last executing test programs: 49.716235866s ago: executing program 4 (id=85): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x702, @mcast1, 0x6d589036}}, 0x9}, &(0x7f0000000080)=0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffffc, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x800, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6]}, &(0x7f0000000000)=0x100) 48.845247192s ago: executing program 4 (id=115): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0043, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) 48.660691266s ago: executing program 4 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 47.972532949s ago: executing program 4 (id=130): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 47.015946068s ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000cc14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000201fd"], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20000080) 46.298027591s ago: executing program 4 (id=159): ftruncate(0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0xfffffffe, 0x31, 0x6, 0x1, 0x2]}}, 0x5c) 46.297685221s ago: executing program 32 (id=159): ftruncate(0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0xfffffffe, 0x31, 0x6, 0x1, 0x2]}}, 0x5c) 25.174237747s ago: executing program 3 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 25.088922558s ago: executing program 3 (id=586): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 25.01535775s ago: executing program 3 (id=589): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) listen(r0, 0x0) 24.132116137s ago: executing program 0 (id=613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) close(r1) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 24.045250079s ago: executing program 0 (id=615): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 24.044940868s ago: executing program 3 (id=616): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 23.631812296s ago: executing program 3 (id=621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 23.318813963s ago: executing program 3 (id=629): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000440)='./file1\x00', 0x200450, &(0x7f0000000480)={[{@grpid}, {}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000001640)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) 23.307165212s ago: executing program 33 (id=629): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000440)='./file1\x00', 0x200450, &(0x7f0000000480)={[{@grpid}, {}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000001640)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) 22.984306379s ago: executing program 0 (id=635): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x2, 0xd9}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 22.89811246s ago: executing program 0 (id=639): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 22.600246716s ago: executing program 0 (id=640): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x101}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 22.058464176s ago: executing program 0 (id=642): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 22.058151037s ago: executing program 34 (id=642): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 18.77973734s ago: executing program 5 (id=684): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x537, &(0x7f0000000c00)="$eJzs3cFvI1cZAPBvvHE2m802KXCASi2FFmUrWDtpaBtxKEVCcKqEKPclJE4UxYmj2Gk3UQXZOxISQoDECS5ckPgDkNBKXDgipEpwBqkIhGALEhygg2yPk5CME+/WsXed30+anfdmPPN9z5s3nhk/jQO4tJ6NiNci4v00TV+IiOlseSGb4qA9NV/33v23l5tTEmn6xt+SSLJlnX0l2fx6ttlERHz1yxHfSE7Hre/tbyxVq5WdrF5ubG6X63v7t9Y3l9Yqa5WthYX5lxdfWXxpca4v7bwREa9+8U/f/85Pv/TqLz/z1h9v/+XmN5tpTWXrj7fjAY2dtbLd9OLViRMb7DxksEdRsz3FTuVab9vcvcB8AADornmO/6GI+GREvBDTceXs01kAAADgMZR+fir+k0Sk+ca7LAcAAAAeI4XWGNikUMrGAkxFoVAqtcfwfiQmC9VavfHp1dru1kp7rOxMFAur69XKXDZWeCaKSbM+3yof1V88UV+IiCcj4nvT11r10nKtujLsmx8AAABwSVw/cf3/z+n29T8AAAAwYmaGnQAAAABw4Vz/AwAAwOhz/Q8AAAAj7Suvv96c0s7vX6+8ube7UXvz1kqlvlHa3F0uLdd2tktrtdpa65l9m+ftr1qrbX82tnbvlBuVeqNc39u/vVnb3WrcXo+JgTQIAAAAOOXJj9/7fRIRB5+71pqaxoedFDAQY4elJJvn9P4/PNGevzugpICBuNLDa969mrv4qvMEeLyNnVyQ39eBEVQcdgLA0CXnrO86eOc32fwT/c0HAADov9mP5X//f971QMRBYQDpARdIJ4bL68T3/+n0sBIBBq71/X+vA3mcLMBIKfY0AhAYZR/4+/9zpekDJQQAAPTdVGtKCqXs9t5UFAqlUsSN1s8CFJPV9WplLiKeiIjfTRevNuvzrS2THsYIAAAAAAAAAAAAAAAAAAAAAAAAAADReip3EikAAAAw0iIKf05+1X6W/+z081PtuwLfPrw/MJ78u/WTwOMR8daP3vjBnaVGY2e+ufzvh8sbP8yWvzisuxgAAADAcZ3r9Nb8X8POBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR8979t5c7Uw8vv9avuH/9QkTM5MUfi4nWfCKKETH5jyTGjm2XRMSVPsQ/uBsRH82LnzTTOgyZF78fb8I58WMmexfy4l/vQ3y4zO41jz+v5fW/Qjzbmuf3v7GI/6s/rO7Hvzg8/l3p0v9v9BjjqXd+Xu4a/27EU2P5x59O/KRL/Od6jP/1r+3vd1uX/jhitvP50zriHY9wVCo3NrfL9b39W+ubS2uVtcrWwsL8y4uvLL60OFdeXa9Wsn9zY3z36V+8f1b7J3M//5Ism+7tfz5nf3mfSf995879D3cqB6fj33wuJ/6vf5K94nT8QhbnU1m5uX62Uz5ol4975me/feas9q8ctb/4IP//N7vt9KRTHeXpXv90AIALUN/b31iqVis7I1toXqU/AmkoPIKFb/V1h2maps0+lbPqXkT0sp8k+tzSQn4+R4WuR4BhH5kAAIB+OzrpH3YmAAAAAAAAAAAAAAAAAAAAcHkN4ilrJ2MexHhWSiYH32IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHz/CwAA///bldSY") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5002, 0x0) 18.619747483s ago: executing program 5 (id=687): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 18.545252494s ago: executing program 5 (id=688): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0xffa1, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 18.382398077s ago: executing program 5 (id=695): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 17.879062157s ago: executing program 5 (id=711): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 17.519267254s ago: executing program 5 (id=705): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 17.461141025s ago: executing program 35 (id=705): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2.961199733s ago: executing program 8 (id=893): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) 2.523586422s ago: executing program 6 (id=901): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000980)='2', 0x51, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(r1, &(0x7f0000000880)='u', 0x1, 0x83) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 2.10405306s ago: executing program 8 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.945232703s ago: executing program 8 (id=915): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.943148943s ago: executing program 7 (id=925): syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) r0 = syz_io_uring_setup(0xf4d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x69f1227ab38ce363}, &(0x7f0000000080)={&(0x7f0000000100)=""/15}) sigaltstack(0x0, &(0x7f0000000200)={0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.754385506s ago: executing program 7 (id=916): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1c001, 0x0) syz_open_procfs(r2, &(0x7f00000003c0)='numa_maps\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 1.123060158s ago: executing program 2 (id=933): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1}, &(0x7f0000000ac0), &(0x7f0000000b40)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) close(0x3) 1.009953891s ago: executing program 1 (id=924): socket$netlink(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 1.009319041s ago: executing program 2 (id=926): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 895.852823ms ago: executing program 1 (id=927): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000002}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 895.626223ms ago: executing program 2 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 833.267904ms ago: executing program 1 (id=929): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffc}, 0x1c) 781.448875ms ago: executing program 1 (id=930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 781.151865ms ago: executing program 2 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 742.627746ms ago: executing program 8 (id=932): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfc9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 737.591016ms ago: executing program 2 (id=934): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) socket$xdp(0x2c, 0x3, 0x0) 708.125066ms ago: executing program 8 (id=935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) acct(&(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 628.646228ms ago: executing program 7 (id=936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 523.34591ms ago: executing program 1 (id=937): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 512.41028ms ago: executing program 7 (id=938): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) ppoll(&(0x7f0000000180)=[{r2, 0x2040}], 0x1, 0x0, 0x0, 0x0) 466.604381ms ago: executing program 2 (id=939): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x300, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000080)=')', 0x1, 0x8008001, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) 461.462341ms ago: executing program 7 (id=940): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(0x0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7fffeffd) 207.136816ms ago: executing program 6 (id=941): r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file2\x00'}, 0x6e) 105.327678ms ago: executing program 6 (id=942): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xa, 0x2) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000180)={&(0x7f00000000c0)="21c2130e555329cb6d0ab56a62d40b283ccbea8b55a0136080c601e586ed01ca99", 0x21, &(0x7f0000000100)=""/98, 0x62}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$nci(r1, 0x0, 0xfffffeea) 0s ago: executing program 1 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): to 1000 [ 41.093030][ T3911] lo speed is unknown, defaulting to 1000 [ 41.101213][ T3911] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.119886][ T3911] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.143651][ T3911] lo speed is unknown, defaulting to 1000 [ 41.162159][ T3911] lo speed is unknown, defaulting to 1000 [ 41.174761][ T3883] chnl_net:caif_netlink_parms(): no params data found [ 41.199563][ T3911] lo speed is unknown, defaulting to 1000 [ 41.225189][ T3911] lo speed is unknown, defaulting to 1000 [ 41.259087][ T3911] lo speed is unknown, defaulting to 1000 [ 41.281808][ T3883] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.289039][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.307472][ T3883] bridge_slave_0: entered allmulticast mode [ 41.314567][ T3883] bridge_slave_0: entered promiscuous mode [ 41.322510][ T3883] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.329945][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.337242][ T3883] bridge_slave_1: entered allmulticast mode [ 41.345858][ T3883] bridge_slave_1: entered promiscuous mode [ 41.376325][ T3883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.396720][ T3883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.431947][ T3883] team0: Port device team_slave_0 added [ 41.439511][ T3883] team0: Port device team_slave_1 added [ 41.471977][ T3883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.479086][ T3883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.505226][ T3883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.528251][ T3883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.535235][ T3883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.561494][ T3883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.691983][ T3883] hsr_slave_0: entered promiscuous mode [ 41.700802][ T3883] hsr_slave_1: entered promiscuous mode [ 41.712438][ T4006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 41.723944][ T3883] debugfs: 'hsr0' already exists in 'hsr' [ 41.729748][ T3883] Cannot create hsr debugfs directory [ 41.806616][ T4013] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.814429][ T4013] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 41.857895][ T4010] lo speed is unknown, defaulting to 1000 [ 41.928308][ T4024] netlink: 68 bytes leftover after parsing attributes in process `syz.1.190'. [ 41.971150][ T4026] loop3: detected capacity change from 0 to 512 [ 41.980633][ T4024] bond1: entered promiscuous mode [ 41.985819][ T4024] bond1: entered allmulticast mode [ 42.014714][ T4024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.025060][ T4024] bond1 (unregistering): Released all slaves [ 42.026707][ T4026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.108804][ T3883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.116957][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.137610][ T3883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.148140][ T3883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.157341][ T3883] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.220663][ T3883] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.228048][ T3883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.235414][ T3883] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.242581][ T3883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.261049][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.271849][ T4057] loop0: detected capacity change from 0 to 4096 [ 42.278789][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.314222][ T4057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.332187][ T4065] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 42.339976][ T4065] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.200'. [ 42.356447][ T4065] loop2: detected capacity change from 0 to 128 [ 42.364168][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 42.373155][ T4062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 42.382148][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 42.394468][ T4062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 42.403553][ T4062] netlink: 'syz.1.199': attribute type 6 has an invalid length. [ 42.406074][ T4065] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.429979][ T4065] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.475940][ T3883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.494202][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 42.498629][ T3883] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.530605][ T4075] syz.3.203 uses obsolete (PF_INET,SOCK_PACKET) [ 42.532504][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.544069][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.560251][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.567431][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.583719][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.626016][ T3883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.643360][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.735836][ T3883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.781257][ T4087] lo speed is unknown, defaulting to 1000 [ 42.895167][ T4108] loop2: detected capacity change from 0 to 512 [ 42.913806][ T4108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.927088][ T4108] EXT4-fs (loop2): 1 truncate cleaned up [ 42.933235][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.951200][ T3883] veth0_vlan: entered promiscuous mode [ 42.959692][ T3883] veth1_vlan: entered promiscuous mode [ 42.973177][ T3883] veth0_macvtap: entered promiscuous mode [ 42.979112][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 42.979127][ T29] audit: type=1400 audit(1757838396.376:483): avc: denied { rename } for pid=4105 comm="syz.2.212" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.009130][ T3883] veth1_macvtap: entered promiscuous mode [ 43.029023][ T3883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.050072][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.064328][ T3883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.088094][ T3433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.097910][ T4117] tipc: Started in network mode [ 43.102815][ T4117] tipc: Node identity ac14140f, cluster identity 4711 [ 43.110563][ T4117] tipc: New replicast peer: 255.255.255.255 [ 43.116698][ T4117] tipc: Enabled bearer , priority 10 [ 43.123367][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.136894][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.149763][ T4117] tipc: Disabling bearer [ 43.155716][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.248979][ T4120] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 43.259526][ T29] audit: type=1400 audit(1757838396.656:484): avc: denied { relabelfrom } for pid=4119 comm="syz.2.214" name="NETLINK" dev="sockfs" ino=6731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.284491][ T29] audit: type=1400 audit(1757838396.666:485): avc: denied { relabelto } for pid=4119 comm="syz.2.214" name="NETLINK" dev="sockfs" ino=6731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 43.322053][ T4120] loop2: detected capacity change from 0 to 1024 [ 43.330199][ T4120] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 43.392434][ T29] audit: type=1400 audit(1757838396.786:486): avc: denied { mount } for pid=3883 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.414515][ T29] audit: type=1400 audit(1757838396.796:487): avc: denied { mounton } for pid=3883 comm="syz-executor" path="/root/syzkaller.Gyg9pd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.457139][ T4123] loop2: detected capacity change from 0 to 1024 [ 43.476447][ T4123] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.487381][ T4123] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.518593][ T4123] JBD2: no valid journal superblock found [ 43.524429][ T4123] EXT4-fs (loop2): Could not load journal inode [ 43.550678][ T29] audit: type=1400 audit(1757838396.936:488): avc: denied { mount } for pid=4126 comm="syz.1.217" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.572598][ T29] audit: type=1400 audit(1757838396.946:489): avc: denied { mounton } for pid=4126 comm="syz.1.217" path="/59/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 43.612409][ T4123] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 43.648657][ T29] audit: type=1400 audit(1757838396.986:490): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.668786][ T29] audit: type=1400 audit(1757838396.996:491): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.062666][ T4151] loop0: detected capacity change from 0 to 1024 [ 44.070945][ T4151] EXT4-fs: Ignoring removed orlov option [ 44.075731][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119e53600: rx timeout, send abort [ 44.076797][ T4151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.085377][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e53600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.106571][ T29] audit: type=1400 audit(1757838397.516:492): avc: denied { read } for pid=2976 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.141981][ T4151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.286575][ T4168] syzkaller0: entered allmulticast mode [ 44.295634][ T4168] syzkaller0 (unregistering): left allmulticast mode [ 44.494907][ T4180] loop5: detected capacity change from 0 to 256 [ 44.900565][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.933912][ T4183] __nla_validate_parse: 1 callbacks suppressed [ 44.933962][ T4183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 44.986568][ T4187] loop0: detected capacity change from 0 to 1024 [ 45.012465][ T4187] EXT4-fs: Ignoring removed bh option [ 45.025187][ T4187] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.048746][ T4187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 45.060041][ T4187] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.240: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.075201][ T4194] net_ratelimit: 73 callbacks suppressed [ 45.075214][ T4194] IPv4: Oversized IP packet from 127.202.26.0 [ 45.081763][ T4187] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.240: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.103498][ T4187] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.240: Failed to acquire dquot type 0 [ 45.114952][ T4187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.132906][ T4187] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.240: mark_inode_dirty error [ 45.147180][ T4187] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.157826][ T4187] EXT4-fs (loop0): 1 orphan inode deleted [ 45.166322][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.183464][ T37] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.199536][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 45.221306][ T4200] loop2: detected capacity change from 0 to 2048 [ 45.234447][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.244672][ T3303] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.257710][ T3303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.267362][ T3303] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 45.278548][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.303636][ T3306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 45.324768][ T3306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.358327][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.479051][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 45.501451][ T4223] loop5: detected capacity change from 0 to 764 [ 45.509530][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 45.518701][ T4225] syz_tun: entered allmulticast mode [ 45.539209][ T4223] Symlink component flag not implemented [ 45.542303][ T4225] dvmrp8: entered allmulticast mode [ 45.544975][ T4223] Symlink component flag not implemented (129) [ 45.556453][ T4225] syz_tun: left allmulticast mode [ 45.562769][ T4225] dvmrp8: left allmulticast mode [ 45.569802][ T4223] rock: directory entry would overflow storage [ 45.576104][ T4223] rock: sig=0x4f50, size=4, remaining=3 [ 45.581676][ T4223] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 45.917188][ T4249] loop5: detected capacity change from 0 to 2048 [ 45.938294][ T4249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.958008][ T4243] syz.0.262 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.147004][ T4265] loop3: detected capacity change from 0 to 164 [ 46.157704][ T4265] syz.3.273: attempt to access beyond end of device [ 46.157704][ T4265] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.191613][ T4265] syz.3.273: attempt to access beyond end of device [ 46.191613][ T4265] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 46.247288][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.352250][ T4283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4283 comm=syz.2.282 [ 46.478291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.649884][ T4299] loop5: detected capacity change from 0 to 128 [ 46.682190][ T4299] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 46.755903][ T4299] syz.5.287: attempt to access beyond end of device [ 46.755903][ T4299] loop5: rw=0, sector=97, nr_sectors = 944 limit=128 [ 46.822797][ T4332] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 46.858167][ T4335] netlink: 'syz.5.290': attribute type 83 has an invalid length. [ 47.251187][ T4344] loop5: detected capacity change from 0 to 512 [ 47.281455][ T4344] ------------[ cut here ]------------ [ 47.287028][ T4344] EA inode 11 i_nlink=2 [ 47.287407][ T4344] WARNING: CPU: 0 PID: 4344 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 47.301825][ T4344] Modules linked in: [ 47.305834][ T4344] CPU: 0 UID: 0 PID: 4344 Comm: syz.5.291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.315512][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.325813][ T4344] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 47.332577][ T4344] Code: 90 49 8d 7e 40 e8 ac fc b7 ff 4d 8b 6e 40 4c 89 e7 e8 c0 f7 b7 ff 41 8b 56 48 48 c7 c7 b8 a4 54 86 4c 89 ee e8 6d e1 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 7e 8f ad 03 66 66 66 66 66 2e 0f 1f [ 47.352267][ T4344] RSP: 0018:ffffc900014475f0 EFLAGS: 00010246 [ 47.358428][ T4344] RAX: f73c29498eaf2e00 RBX: ffff888119872d18 RCX: 0000000000080000 [ 47.366485][ T4344] RDX: ffffc9000fbbb000 RSI: 000000000000427a RDI: 000000000000427b [ 47.374492][ T4344] RBP: 0000000000000002 R08: 0001c9000144746f R09: 0000000000000000 [ 47.382515][ T4344] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119872cc8 [ 47.390630][ T4344] R13: 000000000000000b R14: ffff888119872c80 R15: 0000000000000001 [ 47.398723][ T4344] FS: 00007f155cd876c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 47.407699][ T4344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.414387][ T4344] CR2: 00007f938dbeb000 CR3: 000000011a326000 CR4: 00000000003506f0 [ 47.422450][ T4344] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 47.430577][ T4344] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 47.438842][ T4344] Call Trace: [ 47.442202][ T4344] [ 47.445238][ T4344] ext4_xattr_set_entry+0x77f/0x1020 [ 47.450680][ T4344] ext4_xattr_ibody_set+0x184/0x3c0 [ 47.455942][ T4344] ext4_expand_extra_isize_ea+0xcb6/0x11f0 [ 47.461853][ T4344] __ext4_expand_extra_isize+0x246/0x280 [ 47.467580][ T4344] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 47.473081][ T4344] ext4_evict_inode+0x80e/0xd90 [ 47.478037][ T4344] ? __pfx_ext4_evict_inode+0x10/0x10 [ 47.483522][ T4344] evict+0x2e3/0x550 [ 47.487495][ T4344] ? __dquot_initialize+0x146/0x7c0 [ 47.492798][ T4344] iput+0x447/0x5b0 [ 47.496681][ T4344] ext4_process_orphan+0x1a9/0x1c0 [ 47.501858][ T4344] ext4_orphan_cleanup+0x6a8/0xa00 [ 47.507190][ T4344] ext4_fill_super+0x3260/0x35d0 [ 47.512175][ T4344] ? set_blocksize+0x1a8/0x310 [ 47.517145][ T4344] ? sb_set_blocksize+0xe3/0x100 [ 47.522146][ T4344] ? setup_bdev_super+0x30e/0x370 [ 47.527244][ T4344] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.532650][ T4344] get_tree_bdev_flags+0x291/0x300 [ 47.537829][ T4344] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.543166][ T4344] get_tree_bdev+0x1f/0x30 [ 47.547774][ T4344] ext4_get_tree+0x1c/0x30 [ 47.552232][ T4344] vfs_get_tree+0x54/0x1d0 [ 47.556893][ T4344] do_new_mount+0x207/0x5e0 [ 47.561449][ T4344] ? security_capable+0x83/0x90 [ 47.566439][ T4344] path_mount+0x4a4/0xb20 [ 47.570809][ T4344] ? user_path_at+0x109/0x130 [ 47.575563][ T4344] __se_sys_mount+0x28f/0x2e0 [ 47.580271][ T4344] __x64_sys_mount+0x67/0x80 [ 47.584975][ T4344] x64_sys_call+0x2b4d/0x2ff0 [ 47.589730][ T4344] do_syscall_64+0xd2/0x200 [ 47.594263][ T4344] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.600463][ T4344] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.606251][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.612251][ T4344] RIP: 0033:0x7f155e32034a [ 47.616739][ T4344] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.636458][ T4344] RSP: 002b:00007f155cd86e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.644930][ T4344] RAX: ffffffffffffffda RBX: 00007f155cd86ef0 RCX: 00007f155e32034a [ 47.652999][ T4344] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f155cd86eb0 [ 47.661297][ T4344] RBP: 0000200000000180 R08: 00007f155cd86ef0 R09: 0000000000800700 [ 47.669493][ T4344] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 47.677577][ T4344] R13: 00007f155cd86eb0 R14: 0000000000000473 R15: 0000200000000680 [ 47.685603][ T4344] [ 47.688645][ T4344] ---[ end trace 0000000000000000 ]--- [ 47.713235][ T4344] EXT4-fs (loop5): 1 orphan inode deleted [ 47.724411][ T4344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.871924][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.008143][ T4395] netlink: 'syz.5.303': attribute type 49 has an invalid length. [ 48.022989][ T4394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.089067][ T4394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.121001][ T4403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.161205][ T4405] loop0: detected capacity change from 0 to 1024 [ 48.167977][ T4405] EXT4-fs: Ignoring removed orlov option [ 48.181805][ T4405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.199129][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.311'. [ 48.223993][ T4394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.247573][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 48.247606][ T29] audit: type=1400 audit(1757838401.656:672): avc: denied { listen } for pid=4409 comm="syz.1.312" lport=59701 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.277790][ T4408] netlink: 236 bytes leftover after parsing attributes in process `syz.5.311'. [ 48.292841][ T29] audit: type=1400 audit(1757838401.696:673): avc: denied { bind } for pid=4412 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.329042][ T29] audit: type=1400 audit(1757838401.726:674): avc: denied { accept } for pid=4409 comm="syz.1.312" lport=59701 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.358855][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 48.372805][ T4394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.428343][ T29] audit: type=1400 audit(1757838401.836:675): avc: denied { ioctl } for pid=4421 comm="syz.1.315" path="socket:[7912]" dev="sockfs" ino=7912 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.466928][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.524969][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.543270][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.553086][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.697566][ T29] audit: type=1400 audit(1757838402.106:676): avc: denied { write } for pid=4430 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.890541][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.929958][ T29] audit: type=1400 audit(1757838402.336:677): avc: denied { watch watch_reads } for pid=4440 comm="syz.5.324" path="/29/file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.983591][ T29] audit: type=1326 audit(1757838402.386:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 49.014064][ T29] audit: type=1326 audit(1757838402.416:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 49.037625][ T29] audit: type=1326 audit(1757838402.416:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 49.061160][ T29] audit: type=1326 audit(1757838402.416:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 49.106386][ T10] Process accounting resumed [ 49.141264][ T4450] loop1: detected capacity change from 0 to 512 [ 49.173859][ T4450] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.189810][ T4450] EXT4-fs (loop1): mount failed [ 49.283845][ T4457] lo speed is unknown, defaulting to 1000 [ 49.397140][ T4467] loop1: detected capacity change from 0 to 512 [ 49.403913][ T4467] EXT4-fs: Ignoring removed bh option [ 49.415047][ T4467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.426709][ T4467] EXT4-fs (loop1): 1 truncate cleaned up [ 49.432709][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.494019][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.670600][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.336'. [ 49.859536][ T4484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.932210][ T4484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.957392][ T4491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.998959][ T4484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.047128][ T4491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.072043][ T4484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.085111][ T4059] IPVS: starting estimator thread 0... [ 50.118419][ T4491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.148364][ T4497] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 50.166852][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 50.177081][ T4497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 50.181585][ T4311] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.196055][ T4495] IPVS: using max 2352 ests per chain, 117600 per kthread [ 50.229088][ T4491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.248657][ T4311] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.265656][ T4311] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.283063][ T4311] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.308868][ T4311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.330398][ T4312] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.341749][ T4499] lo speed is unknown, defaulting to 1000 [ 50.366379][ T4328] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.383903][ T4328] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.434585][ T4503] loop1: detected capacity change from 0 to 1024 [ 50.456921][ T4503] EXT4-fs: Ignoring removed orlov option [ 50.476190][ T4503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.520934][ T4503] lo speed is unknown, defaulting to 1000 [ 50.668852][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.790012][ T4516] loop2: detected capacity change from 0 to 512 [ 50.812374][ T4516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.843869][ T4516] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.891004][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.930891][ T4522] bridge0: entered promiscuous mode [ 50.937562][ T4522] macvtap1: entered allmulticast mode [ 50.942974][ T4522] bridge0: entered allmulticast mode [ 50.949747][ T4522] bridge0: port 3(macvtap1) entered blocking state [ 50.957043][ T4522] bridge0: port 3(macvtap1) entered disabled state [ 50.982793][ T4522] bridge0: left allmulticast mode [ 50.988611][ T4522] bridge0: left promiscuous mode [ 51.091846][ T4530] loop2: detected capacity change from 0 to 1024 [ 51.099094][ T4530] EXT4-fs: Ignoring removed orlov option [ 51.117922][ T4530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.181005][ T4530] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.220024][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.246836][ T4530] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 51.259339][ T4530] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.259339][ T4530] [ 51.279376][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.306243][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.348217][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.364562][ T4529] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.381475][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.396991][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.412346][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.429591][ T4529] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.445581][ T4541] loop5: detected capacity change from 0 to 256 [ 51.451662][ T4529] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.356: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.893516][ T4567] ref_ctr increment failed for inode: 0x158 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881045aa840 [ 51.904976][ T4567] ref_ctr increment failed for inode: 0x158 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881045aa840 [ 51.922616][ T4566] uprobe: syz.0.371:4566 failed to unregister, leaking uprobe [ 51.987224][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.996508][ T4566] uprobe: syz.0.371:4566 failed to unregister, leaking uprobe [ 52.154550][ T4584] loop0: detected capacity change from 0 to 1764 [ 52.275381][ T4595] loop5: detected capacity change from 0 to 128 [ 52.338026][ T4595] +}[@: attempt to access beyond end of device [ 52.338026][ T4595] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 52.370478][ T4603] ref_ctr increment failed for inode: 0x1cd offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881041d4ac0 [ 52.426216][ T4595] +}[@: attempt to access beyond end of device [ 52.426216][ T4595] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 52.439332][ T4602] uprobe: syz.2.386:4602 failed to unregister, leaking uprobe [ 52.474824][ T4595] +}[@: attempt to access beyond end of device [ 52.474824][ T4595] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 52.487868][ T4595] buffer_io_error: 15 callbacks suppressed [ 52.487886][ T4595] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 52.518381][ T4595] +}[@: attempt to access beyond end of device [ 52.518381][ T4595] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 52.571115][ T4595] +}[@: attempt to access beyond end of device [ 52.571115][ T4595] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 52.584387][ T4595] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 52.632882][ T4595] +}[@: attempt to access beyond end of device [ 52.632882][ T4595] loop5: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 52.688227][ T4595] +}[@: attempt to access beyond end of device [ 52.688227][ T4595] loop5: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 52.701219][ T4595] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 52.753281][ T4595] +}[@: attempt to access beyond end of device [ 52.753281][ T4595] loop5: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 52.803364][ T4595] +}[@: attempt to access beyond end of device [ 52.803364][ T4595] loop5: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 52.817139][ T4595] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 52.838234][ T4595] +}[@: attempt to access beyond end of device [ 52.838234][ T4595] loop5: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 52.876105][ T4595] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 52.923611][ T4595] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 52.966149][ T4595] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 52.977557][ T4631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4631 comm=syz.2.398 [ 52.990694][ T4631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4631 comm=syz.2.398 [ 53.004553][ T4595] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 53.010837][ T4635] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 53.013703][ T4595] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 53.021450][ T4635] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.400'. [ 53.047763][ T4635] loop0: detected capacity change from 0 to 128 [ 53.065861][ T4595] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 53.090316][ T4598] udevd[4598]: incorrect ext4 checksum on /dev/loop0 [ 53.103950][ T4598] udevd[4598]: incorrect ext4 checksum on /dev/loop0 [ 53.134007][ T4635] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.150635][ T4635] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.190940][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.254977][ T4647] loop0: detected capacity change from 0 to 128 [ 53.270578][ T4643] loop3: detected capacity change from 0 to 128 [ 53.351983][ T4649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.513276][ T4662] loop3: detected capacity change from 0 to 1024 [ 53.541224][ T4665] loop0: detected capacity change from 0 to 512 [ 53.545465][ T4657] loop5: detected capacity change from 0 to 8192 [ 53.588866][ T4662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.622942][ T3296] loop5: p1 p2 p3 p4 [ 53.627091][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 53.627110][ T29] audit: type=1400 audit(1757838407.036:741): avc: denied { bind } for pid=4664 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.627151][ T29] audit: type=1400 audit(1757838407.036:742): avc: denied { getopt } for pid=4664 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.633580][ T3296] loop5: p1 start 51379968 is beyond EOD, truncated [ 53.681763][ T3296] loop5: p3 size 15991040 extends beyond EOD, truncated [ 53.689287][ T4662] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.707636][ T29] audit: type=1400 audit(1757838407.116:743): avc: denied { mounton } for pid=4660 comm="syz.3.410" path="/72/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.734026][ T3296] loop5: p4 start 16711680 is beyond EOD, truncated [ 53.753062][ T4657] loop5: p1 p2 p3 p4 [ 53.768186][ T4657] loop5: p1 start 51379968 is beyond EOD, truncated [ 53.796393][ T4657] loop5: p3 size 15991040 extends beyond EOD, truncated [ 53.816804][ T4657] loop5: p4 start 16711680 is beyond EOD, truncated [ 53.816917][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.868700][ T29] audit: type=1326 audit(1757838407.266:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155e31eba9 code=0x7ffc0000 [ 53.884679][ T4657] loop5: detected capacity change from 0 to 2048 [ 53.892511][ T29] audit: type=1326 audit(1757838407.266:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f155e31eba9 code=0x7ffc0000 [ 53.920909][ T29] audit: type=1326 audit(1757838407.266:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f155e31ebe3 code=0x7ffc0000 [ 53.945177][ T29] audit: type=1326 audit(1757838407.286:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f155e31d65f code=0x7ffc0000 [ 53.968044][ T29] audit: type=1326 audit(1757838407.286:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f155e31ec37 code=0x7ffc0000 [ 53.990835][ T29] audit: type=1326 audit(1757838407.286:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f155e31d510 code=0x7ffc0000 [ 54.013890][ T29] audit: type=1326 audit(1757838407.286:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f155e31e7ab code=0x7ffc0000 [ 54.041120][ T4598] loop5: p1 < > p4 [ 54.061041][ T4598] loop5: p4 size 8388608 extends beyond EOD, truncated [ 54.076469][ T4657] loop5: p1 < > p4 [ 54.081838][ T4657] loop5: p4 size 8388608 extends beyond EOD, truncated [ 54.139067][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 54.149667][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 54.260145][ T4702] loop5: detected capacity change from 0 to 128 [ 54.295646][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 54.299301][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 54.335174][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 54.347111][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 54.371043][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 54.382327][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 54.436657][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 54.444376][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 54.454384][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.462130][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.470016][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.477806][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.485634][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.493352][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.501159][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.508926][ T4059] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 54.527289][ T4059] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 54.586353][ T4719] loop2: detected capacity change from 0 to 164 [ 54.596442][ T4715] fido_id[4715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.704791][ T4727] syzkaller0: entered allmulticast mode [ 54.717764][ T4727] syzkaller0: entered promiscuous mode [ 54.732386][ T4727] syzkaller0 (unregistering): left allmulticast mode [ 54.739200][ T4727] syzkaller0 (unregistering): left promiscuous mode [ 54.792979][ T4734] loop5: detected capacity change from 0 to 1024 [ 54.808223][ T4734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.838310][ T4737] bridge_slave_0: left allmulticast mode [ 54.844070][ T4737] bridge_slave_0: left promiscuous mode [ 54.849985][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.857322][ T4734] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.442: Allocating blocks 449-513 which overlap fs metadata [ 54.877300][ T4737] bridge_slave_1: left allmulticast mode [ 54.883053][ T4737] bridge_slave_1: left promiscuous mode [ 54.888863][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.897363][ T4733] EXT4-fs (loop5): pa ffff8881071d70e0: logic 48, phys. 177, len 21 [ 54.905446][ T4733] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 54.925203][ T4737] bond0: (slave bond_slave_0): Releasing backup interface [ 54.936647][ T4737] bond0: (slave bond_slave_1): Releasing backup interface [ 54.946938][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.960457][ T4737] team0: Port device team_slave_0 removed [ 54.970215][ T4737] team0: Port device team_slave_1 removed [ 54.977789][ T4737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.985238][ T4737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.997963][ T4737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.005550][ T4737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.234685][ T4766] loop5: detected capacity change from 0 to 1024 [ 55.271157][ T4766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.304244][ T4766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.455'. [ 55.313719][ T4778] capability: warning: `syz.0.460' uses deprecated v2 capabilities in a way that may be insecure [ 55.436025][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.484874][ T4790] loop0: detected capacity change from 0 to 2048 [ 55.502187][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.511018][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.544095][ T4797] loop5: detected capacity change from 0 to 512 [ 55.562459][ T4790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.587892][ T4797] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.635062][ T4797] EXT4-fs (loop5): failed to initialize system zone (-117) [ 55.671508][ T4797] EXT4-fs (loop5): mount failed [ 55.683971][ T3303] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 55.721099][ T3303] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 55.757897][ T4806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 55.766941][ T4806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 55.814042][ T4808] loop2: detected capacity change from 0 to 1024 [ 55.838439][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.864701][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.921450][ T4808] 9pnet_fd: Insufficient options for proto=fd [ 55.962630][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.231536][ T4842] syz_tun: entered allmulticast mode [ 56.249695][ T4841] syz_tun: left allmulticast mode [ 56.398390][ T4866] sd 0:0:1:0: device reset [ 56.661395][ T4883] loop5: detected capacity change from 0 to 2048 [ 56.687495][ T4883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.700051][ T4883] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.722268][ T4887] loop0: detected capacity change from 0 to 1024 [ 56.732006][ T4887] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.744351][ T4887] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.502: Invalid block bitmap block 0 in block_group 0 [ 56.759014][ T4887] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.502: Failed to acquire dquot type 0 [ 56.770712][ T4887] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.502: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.784415][ T4887] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.502: Invalid inode bitmap blk 0 in block_group 0 [ 56.797951][ T4312] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:16: Failed to release dquot type 0 [ 56.805551][ T4887] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 56.818188][ T4887] EXT4-fs (loop0): 1 orphan inode deleted [ 56.824357][ T4887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.851513][ T4887] syz.0.502 (4887) used greatest stack depth: 9584 bytes left [ 56.859942][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.011911][ T4897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.585783][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.741296][ T4926] loop0: detected capacity change from 0 to 1024 [ 57.763739][ T4926] EXT4-fs: Ignoring removed nobh option [ 57.770181][ T4926] EXT4-fs: Ignoring removed bh option [ 57.830415][ T4926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.977390][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.357724][ T4942] netlink: 332 bytes leftover after parsing attributes in process `syz.1.523'. [ 58.643024][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 58.643040][ T29] audit: type=1326 audit(1757838412.046:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.751345][ T29] audit: type=1326 audit(1757838412.076:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.775524][ T29] audit: type=1326 audit(1757838412.086:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.798808][ T29] audit: type=1326 audit(1757838412.096:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.822982][ T29] audit: type=1326 audit(1757838412.106:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.847077][ T29] audit: type=1400 audit(1757838412.116:960): avc: denied { setopt } for pid=4955 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.866414][ T29] audit: type=1326 audit(1757838412.126:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.890323][ T29] audit: type=1400 audit(1757838412.126:962): avc: denied { nlmsg_read } for pid=4955 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.910771][ T29] audit: type=1326 audit(1757838412.136:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 58.934869][ T29] audit: type=1326 audit(1757838412.146:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64154eeba9 code=0x7ffc0000 [ 59.135703][ T4979] tipc: Enabling of bearer rejected, failed to enable media [ 59.163258][ T4981] netlink: 'syz.5.539': attribute type 4 has an invalid length. [ 59.221731][ T4989] 9pnet: p9_errstr2errno: server reported unknown error [ 59.259787][ T4987] netlink: 'syz.1.542': attribute type 21 has an invalid length. [ 59.267617][ T4987] netlink: 156 bytes leftover after parsing attributes in process `syz.1.542'. [ 59.391425][ T5004] loop0: detected capacity change from 0 to 1024 [ 59.401228][ T5001] wg2: entered promiscuous mode [ 59.406238][ T5001] wg2: entered allmulticast mode [ 59.406690][ T5005] loop3: detected capacity change from 0 to 512 [ 59.424978][ T5005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.450760][ T5004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.473156][ T5004] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.517048][ T5005] EXT4-fs (loop3): 1 truncate cleaned up [ 59.538448][ T5005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.581829][ T5004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.550: bg 0: block 393: padding at end of block bitmap is not set [ 59.598462][ T5004] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 59.610979][ T5004] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.610979][ T5004] [ 59.620696][ T5004] EXT4-fs (loop0): Total free blocks count 0 [ 59.626731][ T5004] EXT4-fs (loop0): Free/Dirty block details [ 59.632652][ T5004] EXT4-fs (loop0): free_blocks=0 [ 59.637683][ T5004] EXT4-fs (loop0): dirty_blocks=16 [ 59.642823][ T5004] EXT4-fs (loop0): Block reservation details [ 59.648843][ T5004] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 59.699005][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.222821][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 60.373232][ T5048] loop1: detected capacity change from 0 to 128 [ 60.382885][ T5049] ref_ctr increment failed for inode: 0x178 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881045ab980 [ 60.418534][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 60.430058][ T5049] ref_ctr increment failed for inode: 0x178 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881045ab980 [ 60.497112][ T5044] uprobe: syz.5.563:5044 failed to unregister, leaking uprobe [ 60.540325][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.556637][ T5044] uprobe: syz.5.563:5044 failed to unregister, leaking uprobe [ 60.798102][ T5072] loop5: detected capacity change from 0 to 512 [ 60.819390][ T5072] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.829412][ T5072] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 60.893648][ T5072] netlink: zone id is out of range [ 60.921249][ T5072] netlink: zone id is out of range [ 60.932023][ T5072] netlink: zone id is out of range [ 60.937237][ T5072] netlink: zone id is out of range [ 60.954107][ T5072] netlink: zone id is out of range [ 60.964162][ T5072] netlink: zone id is out of range [ 60.975380][ T5072] netlink: zone id is out of range [ 60.987927][ T5072] netlink: zone id is out of range [ 60.998734][ T5072] netlink: zone id is out of range [ 61.349927][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 61.737932][ T5122] loop1: detected capacity change from 0 to 512 [ 61.757056][ T5122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.791707][ T5130] netlink: 'syz.2.597': attribute type 7 has an invalid length. [ 61.799508][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 61.810113][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.850175][ T5134] ref_ctr increment failed for inode: 0x29c offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881045ab980 [ 61.863481][ T5134] ref_ctr increment failed for inode: 0x29c offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881045ab980 [ 61.889572][ T5132] uprobe: syz.0.599:5132 failed to unregister, leaking uprobe [ 62.008586][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 62.018197][ T5132] uprobe: syz.0.599:5132 failed to unregister, leaking uprobe [ 62.133033][ T5156] syzkaller0: entered allmulticast mode [ 62.141313][ T5156] syzkaller0 (unregistering): left allmulticast mode [ 62.193755][ T5163] loop0: detected capacity change from 0 to 512 [ 62.207115][ T5163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.225789][ T5163] EXT4-fs (loop0): 1 truncate cleaned up [ 62.232090][ T5163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.248079][ T5166] bridge0: port 3(ip6gretap0) entered blocking state [ 62.254882][ T5166] bridge0: port 3(ip6gretap0) entered disabled state [ 62.263064][ T5166] ip6gretap0: entered allmulticast mode [ 62.269391][ T5166] ip6gretap0: entered promiscuous mode [ 62.275168][ T5166] bridge0: port 3(ip6gretap0) entered blocking state [ 62.282023][ T5166] bridge0: port 3(ip6gretap0) entered forwarding state [ 62.316097][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.382276][ T5173] loop3: detected capacity change from 0 to 512 [ 62.385092][ T5175] loop0: detected capacity change from 0 to 512 [ 62.399597][ T5175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.419107][ T5175] EXT4-fs (loop0): 1 truncate cleaned up [ 62.426480][ T5175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.625447][ T5173] loop3: detected capacity change from 512 to 0 [ 62.632880][ C1] blk_print_req_error: 238 callbacks suppressed [ 62.632899][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.648923][ C0] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 62.658476][ T5172] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.616: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 62.672932][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 62.682448][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 62.691952][ C0] buffer_io_error: 32 callbacks suppressed [ 62.691964][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 62.706120][ T5172] EXT4-fs (loop3): I/O error while writing superblock [ 62.712985][ T5172] EXT4-fs error (device loop3): ext4_discard_preallocations:5672: comm syz.3.616: Error -5 reading block bitmap for 0 [ 62.725783][ C1] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 62.735322][ C1] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 62.744810][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 62.753211][ T5172] EXT4-fs (loop3): I/O error while writing superblock [ 62.771539][ C1] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 62.795037][ C0] I/O error, dev loop3, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.804767][ C0] I/O error, dev loop3, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.814574][ C0] I/O error, dev loop3, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 62.824304][ T4311] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4984: inode #20: block 35: comm kworker/u8:15: unable to read itable block [ 62.839874][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 62.848654][ T4311] EXT4-fs (loop3): I/O error while writing superblock [ 62.867314][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 62.875945][ T3302] EXT4-fs (loop3): I/O error while writing superblock [ 62.891876][ C0] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 62.951644][ T5201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 62.977178][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 62.991384][ T5202] loop1: detected capacity change from 0 to 512 [ 63.010981][ T5202] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.043657][ T5202] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.058627][ T5202] EXT4-fs (loop1): 1 truncate cleaned up [ 63.096235][ T4311] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.138570][ T5202] lo speed is unknown, defaulting to 1000 [ 63.189631][ T4311] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.249444][ T4311] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.308408][ T4311] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.407240][ T4311] bridge_slave_1: left allmulticast mode [ 63.413084][ T4311] bridge_slave_1: left promiscuous mode [ 63.418883][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.437022][ T4311] bridge_slave_0: left allmulticast mode [ 63.442701][ T4311] bridge_slave_0: left promiscuous mode [ 63.448438][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.457429][ T5227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 63.547774][ T5233] loop0: detected capacity change from 0 to 512 [ 63.618247][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.629673][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.638557][ T5233] loop0: detected capacity change from 512 to 0 [ 63.650643][ T4311] bond0 (unregistering): Released all slaves [ 63.657879][ T5232] EXT4-fs error (device loop0): ext4_wait_block_bitmap:584: comm syz.0.639: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 63.677893][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 63.687163][ T5232] EXT4-fs (loop0): I/O error while writing superblock [ 63.693976][ T5232] EXT4-fs error (device loop0): ext4_discard_preallocations:5672: comm syz.0.639: Error -5 reading block bitmap for 0 [ 63.705721][ T5212] lo speed is unknown, defaulting to 1000 [ 63.711788][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 63.720980][ T5232] EXT4-fs (loop0): I/O error while writing superblock [ 63.730973][ T4311] tipc: Left network mode [ 63.731036][ T5236] lo speed is unknown, defaulting to 1000 [ 63.765727][ C1] net_ratelimit: 73 callbacks suppressed [ 63.765742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.823773][ T4311] hsr_slave_0: left promiscuous mode [ 63.830862][ T4311] hsr_slave_1: left promiscuous mode [ 63.837326][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.845382][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.854081][ T4355] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #20: block 35: comm kworker/u8:55: unable to read itable block [ 63.869472][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 63.877963][ T4355] EXT4-fs (loop0): I/O error while writing superblock [ 63.887665][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.890179][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 63.895102][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.903455][ T3303] EXT4-fs (loop0): I/O error while writing superblock [ 63.930226][ C1] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 63.939595][ T4311] veth1_macvtap: left promiscuous mode [ 63.946635][ T5239] loop5: detected capacity change from 0 to 1024 [ 63.949213][ T4311] veth0_macvtap: left promiscuous mode [ 63.961389][ T4311] veth1_vlan: left promiscuous mode [ 63.969903][ T4311] veth0_vlan: left promiscuous mode [ 63.976967][ T5239] EXT4-fs: Ignoring removed orlov option [ 63.982670][ T5239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.066831][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 64.078998][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 64.194360][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 64.247532][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.254616][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.261950][ T5212] bridge_slave_0: entered allmulticast mode [ 64.268647][ T5212] bridge_slave_0: entered promiscuous mode [ 64.277110][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.284190][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.291742][ T5212] bridge_slave_1: entered allmulticast mode [ 64.314158][ T5212] bridge_slave_1: entered promiscuous mode [ 64.345610][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.365928][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.427976][ T5212] team0: Port device team_slave_0 added [ 64.434504][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 64.434576][ T29] audit: type=1326 audit(64.403:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.464398][ T5212] team0: Port device team_slave_1 added [ 64.487927][ T29] audit: type=1326 audit(64.433:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.510700][ T29] audit: type=1326 audit(64.433:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.533336][ T29] audit: type=1326 audit(64.453:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.556024][ T29] audit: type=1326 audit(64.453:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.578688][ T29] audit: type=1326 audit(64.453:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.601309][ T29] audit: type=1326 audit(64.453:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.623925][ T29] audit: type=1326 audit(64.453:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.646572][ T29] audit: type=1326 audit(64.453:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.669389][ T29] audit: type=1326 audit(64.453:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 64.715623][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.722612][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.748647][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.778797][ T4311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.791826][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.798928][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.824930][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.851630][ T5270] loop5: detected capacity change from 0 to 512 [ 64.874994][ T5270] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.892482][ T5270] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.911609][ T5270] EXT4-fs (loop5): 1 truncate cleaned up [ 64.918697][ T4311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.938869][ T5212] hsr_slave_0: entered promiscuous mode [ 64.945022][ T5212] hsr_slave_1: entered promiscuous mode [ 64.952735][ T5212] debugfs: 'hsr0' already exists in 'hsr' [ 64.958549][ T5212] Cannot create hsr debugfs directory [ 64.964329][ T5274] syz_tun: entered allmulticast mode [ 64.974563][ T5270] lo speed is unknown, defaulting to 1000 [ 64.990195][ T5273] syz_tun: left allmulticast mode [ 65.006717][ T4311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.018200][ T5248] lo speed is unknown, defaulting to 1000 [ 65.071749][ T4311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.228262][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 65.255554][ T4311] bridge_slave_1: left allmulticast mode [ 65.261273][ T4311] bridge_slave_1: left promiscuous mode [ 65.267046][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.326324][ T4311] bridge_slave_0: left allmulticast mode [ 65.332011][ T4311] bridge_slave_0: left promiscuous mode [ 65.337704][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.647781][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.658901][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.668721][ T4311] bond0 (unregistering): Released all slaves [ 65.762195][ T5212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.774631][ T5212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.795896][ T5307] netlink: 'syz.1.661': attribute type 83 has an invalid length. [ 65.826638][ T4311] hsr_slave_0: left promiscuous mode [ 65.834692][ T4311] hsr_slave_1: left promiscuous mode [ 65.868694][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.876246][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.883997][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.891483][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.902623][ T4311] veth1_macvtap: left promiscuous mode [ 65.908364][ T4311] veth0_macvtap: left promiscuous mode [ 65.914707][ T4311] veth1_vlan: left promiscuous mode [ 65.920315][ T4311] veth0_vlan: left promiscuous mode [ 66.014581][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 66.032712][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 66.100582][ T5212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 66.111952][ T5212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 66.140216][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.147464][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.156339][ T5248] bridge_slave_0: entered allmulticast mode [ 66.162931][ T5248] bridge_slave_0: entered promiscuous mode [ 66.180482][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.187616][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.194965][ T5248] bridge_slave_1: entered allmulticast mode [ 66.201829][ T5248] bridge_slave_1: entered promiscuous mode [ 66.227464][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.240531][ T5336] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 66.248271][ T5336] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.678'. [ 66.259652][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.286835][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.297871][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.305035][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.326445][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.338276][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.345374][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.380322][ T5248] team0: Port device team_slave_0 added [ 66.392487][ T5248] team0: Port device team_slave_1 added [ 66.428762][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.435877][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.461966][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.473497][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.480544][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.506565][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.625655][ T5248] hsr_slave_0: entered promiscuous mode [ 66.631901][ T5248] hsr_slave_1: entered promiscuous mode [ 66.646461][ T4311] IPVS: stop unused estimator thread 0... [ 66.653654][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.772667][ T5248] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 66.781551][ T5248] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 66.792452][ T5248] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 66.801865][ T5248] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 66.847540][ T5348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.862831][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.870061][ T5348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.884206][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.893806][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.900898][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.911131][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.918297][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.934923][ T5212] veth0_vlan: entered promiscuous mode [ 66.946546][ T5212] veth1_vlan: entered promiscuous mode [ 66.969352][ T5212] veth0_macvtap: entered promiscuous mode [ 66.977124][ T5212] veth1_macvtap: entered promiscuous mode [ 66.990318][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.001941][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.013831][ T4355] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.022889][ T4355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.045920][ T4355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.055662][ T4355] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.071134][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.237756][ T5395] syz_tun: entered allmulticast mode [ 67.244578][ T5394] syz_tun: left allmulticast mode [ 67.264777][ T5248] veth0_vlan: entered promiscuous mode [ 67.285591][ T5398] serio: Serial port ptm0 [ 67.286077][ T5248] veth1_vlan: entered promiscuous mode [ 67.306360][ T5368] Process accounting resumed [ 67.319164][ T5248] veth0_macvtap: entered promiscuous mode [ 67.326974][ T5248] veth1_macvtap: entered promiscuous mode [ 67.346571][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.360786][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.373682][ T4355] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.401545][ T4355] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423740][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 67.433693][ T4312] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.452320][ T4312] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.454165][ T5408] netlink: 'syz.5.675': attribute type 7 has an invalid length. [ 67.468936][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.675'. [ 67.478559][ T5409] netlink: 236 bytes leftover after parsing attributes in process `syz.2.676'. [ 67.537111][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.643'. [ 67.611382][ T5422] bridge_slave_0: left allmulticast mode [ 67.617165][ T5422] bridge_slave_0: left promiscuous mode [ 67.622845][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.638899][ T5422] bridge_slave_1: left allmulticast mode [ 67.644650][ T5422] bridge_slave_1: left promiscuous mode [ 67.650462][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.678764][ T5427] loop5: detected capacity change from 0 to 512 [ 67.695146][ T5422] bond0: (slave bond_slave_0): Releasing backup interface [ 67.716246][ T5422] bond0: (slave bond_slave_1): Releasing backup interface [ 67.723493][ T5427] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.738954][ T5427] EXT4-fs (loop5): mount failed [ 67.744972][ T5422] team0: Port device team_slave_0 removed [ 67.756799][ T5422] team0: Port device team_slave_1 removed [ 67.777288][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.784723][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.805004][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.812496][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.899456][ T5435] bridge0: entered promiscuous mode [ 67.906762][ T5435] macvtap1: entered allmulticast mode [ 67.912188][ T5435] bridge0: entered allmulticast mode [ 67.920032][ T5435] bridge0: port 3(macvtap1) entered blocking state [ 67.926841][ T5435] bridge0: port 3(macvtap1) entered disabled state [ 67.957299][ T5435] bridge0: left allmulticast mode [ 67.962390][ T5435] bridge0: left promiscuous mode [ 68.039444][ T5445] netlink: 'syz.1.693': attribute type 7 has an invalid length. [ 68.044467][ T5449] loop5: detected capacity change from 0 to 512 [ 68.047192][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 68.133888][ T5450] lo speed is unknown, defaulting to 1000 [ 68.179771][ T5454] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 68.245562][ T5449] loop5: detected capacity change from 512 to 0 [ 68.252981][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 68.264404][ C1] blk_print_req_error: 20 callbacks suppressed [ 68.264424][ C1] I/O error, dev loop5, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.281849][ C0] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 68.291719][ T5448] EXT4-fs error (device loop5): ext4_wait_block_bitmap:584: comm syz.5.695: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 68.318952][ T5461] loop6: detected capacity change from 0 to 512 [ 68.325385][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 68.334908][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 68.344397][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 68.352700][ T5448] EXT4-fs (loop5): I/O error while writing superblock [ 68.359612][ T5448] EXT4-fs error (device loop5): ext4_discard_preallocations:5672: comm syz.5.695: Error -5 reading block bitmap for 0 [ 68.382455][ T5461] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.406065][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 68.415610][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 68.425174][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 68.433867][ T5448] EXT4-fs (loop5): I/O error while writing superblock [ 68.443629][ T5461] EXT4-fs (loop6): mount failed [ 68.482792][ C0] I/O error, dev loop5, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 68.503177][ C0] I/O error, dev loop5, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.512946][ C0] I/O error, dev loop5, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.522662][ C0] I/O error, dev loop5, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 68.535688][ T59] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4984: inode #20: block 35: comm kworker/u8:4: unable to read itable block [ 68.552474][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 68.561075][ T59] EXT4-fs (loop5): I/O error while writing superblock [ 68.574517][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 68.582813][ T3883] EXT4-fs (loop5): I/O error while writing superblock [ 68.592665][ C1] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 68.863591][ T4328] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.938456][ T4328] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.008029][ T4328] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.133187][ T4328] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.153436][ T5476] lo speed is unknown, defaulting to 1000 [ 69.248136][ T4328] bridge_slave_1: left allmulticast mode [ 69.253911][ T4328] bridge_slave_1: left promiscuous mode [ 69.259698][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.289834][ T4328] bridge_slave_0: left allmulticast mode [ 69.295567][ T4328] bridge_slave_0: left promiscuous mode [ 69.300361][ T5496] loop7: detected capacity change from 0 to 1764 [ 69.301243][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.427340][ T5507] loop6: detected capacity change from 0 to 1024 [ 69.444223][ T5507] EXT4-fs: Ignoring removed orlov option [ 69.483397][ T5507] EXT4-fs mount: 13 callbacks suppressed [ 69.483415][ T5507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.627641][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.639941][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.650049][ T4328] bond0 (unregistering): Released all slaves [ 69.677261][ T5518] ip6gretap0: left allmulticast mode [ 69.682636][ T5518] ip6gretap0: left promiscuous mode [ 69.688059][ T5518] bridge0: port 3(ip6gretap0) entered disabled state [ 69.713674][ T5518] bridge_slave_0: left allmulticast mode [ 69.719396][ T5518] bridge_slave_0: left promiscuous mode [ 69.725033][ T5518] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.736232][ T5518] bridge_slave_1: left allmulticast mode [ 69.741983][ T5518] bridge_slave_1: left promiscuous mode [ 69.748578][ T5518] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.767102][ T5518] bond0: (slave bond_slave_0): Releasing backup interface [ 69.778452][ T5518] bond0: (slave bond_slave_1): Releasing backup interface [ 69.792420][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 69.792437][ T29] audit: type=1326 audit(69.763:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.824764][ T29] audit: type=1326 audit(69.763:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.837315][ T5518] team0: Port device team_slave_0 removed [ 69.848222][ T29] audit: type=1326 audit(69.763:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.875962][ T29] audit: type=1326 audit(69.763:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.899423][ T29] audit: type=1326 audit(69.763:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.922318][ T29] audit: type=1326 audit(69.763:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.945682][ T29] audit: type=1326 audit(69.763:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.968556][ T29] audit: type=1326 audit(69.763:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.993679][ T5518] team0: Port device team_slave_1 removed [ 69.999541][ T29] audit: type=1326 audit(69.793:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 69.999573][ T29] audit: type=1326 audit(69.803:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff726c0eba9 code=0x7ffc0000 [ 70.027383][ T5518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.053017][ T5518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.061988][ T5518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.069608][ T5518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.100429][ T1035] lo speed is unknown, defaulting to 1000 [ 70.108537][ T4328] hsr_slave_0: left promiscuous mode [ 70.114228][ T4328] hsr_slave_1: left promiscuous mode [ 70.120089][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.127608][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.137004][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.144460][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.159794][ T4328] veth1_macvtap: left promiscuous mode [ 70.175405][ T4328] veth0_macvtap: left promiscuous mode [ 70.181087][ T4328] veth1_vlan: left promiscuous mode [ 70.189417][ T4328] veth0_vlan: left promiscuous mode [ 70.253810][ T5523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.264443][ T5523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.290973][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 70.300809][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 70.362397][ T5476] chnl_net:caif_netlink_parms(): no params data found [ 70.411135][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.418396][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.426139][ T5476] bridge_slave_0: entered allmulticast mode [ 70.432851][ T5476] bridge_slave_0: entered promiscuous mode [ 70.433087][ T5212] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.440006][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.455948][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.463360][ T5476] bridge_slave_1: entered allmulticast mode [ 70.470247][ T5476] bridge_slave_1: entered promiscuous mode [ 70.482508][ T5542] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 70.496782][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 70.519316][ T5476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.530280][ T5476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.558068][ T5476] team0: Port device team_slave_0 added [ 70.565017][ T5476] team0: Port device team_slave_1 added [ 70.592203][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.599255][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.625368][ T5476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.640177][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.647276][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.673372][ T5476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.710773][ T5476] hsr_slave_0: entered promiscuous mode [ 70.717568][ T5476] hsr_slave_1: entered promiscuous mode [ 70.723604][ T5476] debugfs: 'hsr0' already exists in 'hsr' [ 70.729494][ T5476] Cannot create hsr debugfs directory [ 70.738167][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.729'. [ 70.780593][ T5553] loop6: detected capacity change from 0 to 736 [ 70.831863][ T5553] rock: directory entry would overflow storage [ 70.839080][ T5553] rock: sig=0x3b10, size=4, remaining=3 [ 70.856636][ T5476] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 70.869423][ T5476] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 70.887592][ T5476] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 70.901709][ T5476] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 70.929181][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.936694][ T5476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.944038][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.951208][ T5476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.991527][ T5476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.016932][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.024970][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.039658][ T5476] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.054659][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.061803][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.070601][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.077759][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.101284][ T5476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.111848][ T5476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.169686][ T5476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.289729][ T5476] veth0_vlan: entered promiscuous mode [ 71.299118][ T5476] veth1_vlan: entered promiscuous mode [ 71.315275][ T5476] veth0_macvtap: entered promiscuous mode [ 71.322562][ T5476] veth1_macvtap: entered promiscuous mode [ 71.333273][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.344313][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.355045][ T4355] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.364214][ T4355] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.375142][ T4355] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.384682][ T4355] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.814123][ T5606] ref_ctr increment failed for inode: 0x3ad offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881041d5640 [ 71.826946][ T5606] ref_ctr increment failed for inode: 0x3ad offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881041d5640 [ 71.842693][ T5605] uprobe: syz.1.739:5605 failed to unregister, leaking uprobe [ 71.917429][ T5612] lo speed is unknown, defaulting to 1000 [ 71.919826][ T5613] loop7: detected capacity change from 0 to 512 [ 71.930365][ T5612] lo speed is unknown, defaulting to 1000 [ 71.936610][ T5612] lo speed is unknown, defaulting to 1000 [ 71.944808][ T5612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.954384][ T5605] uprobe: syz.1.739:5605 failed to unregister, leaking uprobe [ 71.964514][ T5613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.971045][ T5612] lo speed is unknown, defaulting to 1000 [ 71.985270][ T5612] lo speed is unknown, defaulting to 1000 [ 71.991658][ T5612] lo speed is unknown, defaulting to 1000 [ 71.998265][ T5612] lo speed is unknown, defaulting to 1000 [ 72.004512][ T5612] lo speed is unknown, defaulting to 1000 [ 72.051747][ T5622] loop6: detected capacity change from 0 to 128 [ 72.067102][ T5622] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 72.095577][ T5613] loop7: detected capacity change from 512 to 0 [ 72.103766][ T5626] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 72.117129][ T5611] EXT4-fs error (device loop7): ext4_wait_block_bitmap:584: comm syz.7.741: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 72.132798][ T5622] bio_check_eod: 62 callbacks suppressed [ 72.132815][ T5622] syz.6.743: attempt to access beyond end of device [ 72.132815][ T5622] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 72.134957][ C0] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.161775][ T3391] lo speed is unknown, defaulting to 1000 [ 72.167586][ T3391] syz0: Port: 1 Link DOWN [ 72.172123][ T5611] EXT4-fs (loop7): I/O error while writing superblock [ 72.179076][ T5611] EXT4-fs error (device loop7): ext4_discard_preallocations:5672: comm syz.7.741: Error -5 reading block bitmap for 0 [ 72.202759][ C1] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.211094][ T5611] EXT4-fs (loop7): I/O error while writing superblock [ 72.218140][ T4312] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 72.261010][ T4312] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4984: inode #20: block 35: comm kworker/u8:16: unable to read itable block [ 72.277393][ C1] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.285707][ T4312] EXT4-fs (loop7): I/O error while writing superblock [ 72.296843][ T5248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.307836][ C0] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.316179][ T5248] EXT4-fs (loop7): I/O error while writing superblock [ 72.324437][ C0] Buffer I/O error on dev loop7, logical block 12, lost sync page write [ 72.503261][ T4329] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.548420][ T4329] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.608183][ T4329] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.659078][ T4329] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.838527][ T4329] bond0 (unregistering): Released all slaves [ 72.890702][ T4329] hsr_slave_0: left promiscuous mode [ 72.897859][ T4329] hsr_slave_1: left promiscuous mode [ 72.906768][ T4329] veth1_macvtap: left promiscuous mode [ 72.912253][ T4329] veth0_macvtap: left promiscuous mode [ 72.917876][ T4329] veth1_vlan: left promiscuous mode [ 72.923155][ T4329] veth0_vlan: left promiscuous mode [ 73.153427][ T5647] lo speed is unknown, defaulting to 1000 [ 73.159857][ T5647] lo speed is unknown, defaulting to 1000 [ 73.224796][ T5647] chnl_net:caif_netlink_parms(): no params data found [ 73.282443][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.291083][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.298691][ T5647] bridge_slave_0: entered allmulticast mode [ 73.305075][ T5647] bridge_slave_0: entered promiscuous mode [ 73.312072][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.320327][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.327572][ T5647] bridge_slave_1: entered allmulticast mode [ 73.333946][ T5647] bridge_slave_1: entered promiscuous mode [ 73.351419][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.363531][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.383539][ T5647] team0: Port device team_slave_0 added [ 73.391393][ T5647] team0: Port device team_slave_1 added [ 73.406811][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.413885][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.439883][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.451580][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.458618][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.485932][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.511651][ T5647] hsr_slave_0: entered promiscuous mode [ 73.519303][ T5647] hsr_slave_1: entered promiscuous mode [ 73.752645][ T5647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.761236][ T5647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.770094][ T5647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.780082][ T5647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.795191][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.802269][ T5647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.809674][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.816793][ T5647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.846141][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.858562][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.867343][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.884723][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.902750][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.909864][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.916550][ T5676] siw: device registration error -23 [ 73.925026][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.932129][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.998643][ T5688] loop8: detected capacity change from 0 to 128 [ 74.025539][ T5687] tipc: Started in network mode [ 74.030565][ T5687] tipc: Node identity ac14140f, cluster identity 4711 [ 74.046212][ T5694] netlink: 68 bytes leftover after parsing attributes in process `syz.2.766'. [ 74.049095][ T5687] tipc: New replicast peer: 255.255.255.83 [ 74.061032][ T5687] tipc: Enabled bearer , priority 10 [ 74.073715][ T5688] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.082328][ T5696] lo speed is unknown, defaulting to 1000 [ 74.090022][ T5696] lo speed is unknown, defaulting to 1000 [ 74.092354][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.115428][ T5694] bond1: entered promiscuous mode [ 74.120723][ T5694] bond1: entered allmulticast mode [ 74.135435][ T5694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.155336][ T5694] bond1 (unregistering): Released all slaves [ 74.163613][ T5688] syz.8.763: attempt to access beyond end of device [ 74.163613][ T5688] loop8: rw=0, sector=97, nr_sectors = 944 limit=128 [ 74.212947][ T4329] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.376611][ T5647] veth0_vlan: entered promiscuous mode [ 74.384909][ T5647] veth1_vlan: entered promiscuous mode [ 74.403497][ T5647] veth0_macvtap: entered promiscuous mode [ 74.410990][ T5647] veth1_macvtap: entered promiscuous mode [ 74.430246][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.448123][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.469032][ T4328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490565][ T4328] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.492950][ T5726] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 74.501645][ T4328] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.522401][ T4328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.531292][ T5730] syzkaller0: entered allmulticast mode [ 74.552663][ T5730] syzkaller0 (unregistering): left allmulticast mode [ 74.577395][ T5734] loop7: detected capacity change from 0 to 512 [ 74.584709][ T5734] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.598139][ T5734] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 74.613875][ T5734] EXT4-fs (loop7): 1 truncate cleaned up [ 74.620355][ T5734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.652788][ T5734] lo speed is unknown, defaulting to 1000 [ 74.659662][ T5734] lo speed is unknown, defaulting to 1000 [ 74.870206][ T5647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.020380][ T5750] lo speed is unknown, defaulting to 1000 [ 75.065759][ T5750] lo speed is unknown, defaulting to 1000 [ 75.109772][ T5753] loop7: detected capacity change from 0 to 1024 [ 75.148094][ T5753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.175971][ T3383] tipc: Node number set to 2886997007 [ 75.198735][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 75.198752][ T29] audit: type=1400 audit(75.173:1311): avc: denied { relabelto } for pid=5752 comm="syz.7.786" name="cgroup.controllers" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 75.278826][ T5647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.319273][ T5762] netlink: 68 bytes leftover after parsing attributes in process `syz.7.787'. [ 75.362209][ T29] audit: type=1326 audit(75.323:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.373975][ T5762] bond1: entered promiscuous mode [ 75.385005][ T29] audit: type=1326 audit(75.323:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.391596][ T5762] bond1: entered allmulticast mode [ 75.412830][ T29] audit: type=1326 audit(75.323:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.419797][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.440698][ T29] audit: type=1326 audit(75.323:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.469955][ T29] audit: type=1326 audit(75.333:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.492683][ T29] audit: type=1326 audit(75.333:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.515488][ T29] audit: type=1326 audit(75.333:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.538321][ T29] audit: type=1326 audit(75.333:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.561412][ T29] audit: type=1326 audit(75.333:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6fe4f3eba9 code=0x7ffc0000 [ 75.590763][ T5762] bond1 (unregistering): Released all slaves [ 75.620000][ T5765] tipc: New replicast peer: 255.255.255.83 [ 75.626111][ T5765] tipc: Enabled bearer , priority 10 [ 75.827176][ T5779] loop6: detected capacity change from 0 to 512 [ 75.834500][ T5779] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 75.860219][ T5779] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 75.904693][ T5779] EXT4-fs (loop6): 1 truncate cleaned up [ 75.912906][ T5779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.980370][ T5779] lo speed is unknown, defaulting to 1000 [ 75.992416][ T5779] lo speed is unknown, defaulting to 1000 [ 76.107370][ T5800] Invalid ELF header magic: != ELF [ 76.151781][ T5802] lo speed is unknown, defaulting to 1000 [ 76.160992][ T5802] lo speed is unknown, defaulting to 1000 [ 76.228298][ T5212] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.281031][ T5806] netlink: 68 bytes leftover after parsing attributes in process `syz.6.806'. [ 76.314851][ T5806] bond1: entered promiscuous mode [ 76.320057][ T5806] bond1: entered allmulticast mode [ 76.334388][ T5806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.350996][ T5806] bond1 (unregistering): Released all slaves [ 76.528201][ T5368] IPVS: starting estimator thread 0... [ 76.537701][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.807'. [ 76.593846][ T5820] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.615525][ T5816] IPVS: using max 1872 ests per chain, 93600 per kthread [ 76.649646][ T5820] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.698885][ T5820] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.746807][ T3383] tipc: Node number set to 2886997007 [ 76.761944][ T5820] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.815951][ T4346] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.837524][ T4346] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.862314][ T4346] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.878621][ T4346] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959398][ T5839] loop7: detected capacity change from 0 to 128 [ 76.982998][ T5839] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.050225][ T5840] lo speed is unknown, defaulting to 1000 [ 77.076323][ T5840] lo speed is unknown, defaulting to 1000 [ 77.159917][ T5839] syz.7.815: attempt to access beyond end of device [ 77.159917][ T5839] loop7: rw=0, sector=97, nr_sectors = 944 limit=128 [ 77.235450][ T4318] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.326789][ T5846] loop7: detected capacity change from 0 to 1024 [ 77.333699][ T5846] EXT4-fs: Ignoring removed orlov option [ 77.339560][ T5846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.368263][ T5846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.888590][ T5854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 78.166588][ T5647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.821718][ T5886] loop8: detected capacity change from 0 to 128 [ 78.845123][ T5886] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 78.946282][ T5886] syz.8.830: attempt to access beyond end of device [ 78.946282][ T5886] loop8: rw=0, sector=97, nr_sectors = 944 limit=128 [ 79.046043][ T5862] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 79.179853][ T5902] lo speed is unknown, defaulting to 1000 [ 79.225657][ T5902] lo speed is unknown, defaulting to 1000 [ 79.236732][ T5901] lo speed is unknown, defaulting to 1000 [ 79.258610][ T5901] lo speed is unknown, defaulting to 1000 [ 79.393027][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.401867][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.527784][ T5915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.019913][ T5932] loop8: detected capacity change from 0 to 1024 [ 80.049267][ T5932] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.082058][ T5476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.153711][ T5936] loop8: detected capacity change from 0 to 2048 [ 80.178474][ T5936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.206589][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 80.206606][ T29] audit: type=1326 audit(80.173:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.240620][ T29] audit: type=1326 audit(80.213:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.256859][ T5476] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 80.265262][ T29] audit: type=1326 audit(80.213:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.280035][ T5476] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 80.302505][ T29] audit: type=1326 audit(80.213:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.333699][ T29] audit: type=1326 audit(80.213:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.357659][ T29] audit: type=1326 audit(80.213:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.380377][ T29] audit: type=1326 audit(80.213:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.404415][ T29] audit: type=1326 audit(80.213:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.428542][ T29] audit: type=1326 audit(80.213:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.451420][ T29] audit: type=1326 audit(80.213:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.8.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f36beba9 code=0x7ffc0000 [ 80.476977][ T5476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.827834][ T5950] netlink: 68 bytes leftover after parsing attributes in process `syz.8.851'. [ 80.856754][ T5950] bond1: entered promiscuous mode [ 80.861980][ T5950] bond1: entered allmulticast mode [ 80.867767][ T5950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.883348][ T5950] bond1 (unregistering): Released all slaves [ 81.031044][ T5960] loop8: detected capacity change from 0 to 1024 [ 81.043126][ T5963] netlink: 68 bytes leftover after parsing attributes in process `syz.7.870'. [ 81.062042][ T5960] EXT4-fs: Ignoring removed orlov option [ 81.083477][ T5963] bond1: entered promiscuous mode [ 81.089329][ T5963] bond1: entered allmulticast mode [ 81.097150][ T5963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.107385][ T5960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.135946][ T5960] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.152006][ T5963] bond1 (unregistering): Released all slaves [ 81.162853][ T5960] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 81.175205][ T5960] EXT4-fs (loop8): This should not happen!! Data will be lost [ 81.175205][ T5960] [ 81.188839][ T5960] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.263553][ T5959] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.296300][ T5960] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.344867][ T5959] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.377019][ T5959] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.395567][ T5960] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.428308][ T5960] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.459554][ T5968] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.479398][ T5960] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.857: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.651638][ T5975] loop7: detected capacity change from 0 to 512 [ 81.686136][ T5975] EXT4-fs: Ignoring removed bh option [ 81.695036][ T5975] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 81.729633][ T5986] siw: device registration error -23 [ 81.729683][ T5975] EXT4-fs (loop7): 1 truncate cleaned up [ 81.778875][ T5975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.856221][ T5647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.001278][ T5476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.014882][ T6037] siw: device registration error -23 [ 83.111480][ T6031] loop8: detected capacity change from 0 to 128 [ 83.178851][ T6047] lo speed is unknown, defaulting to 1000 [ 83.194229][ T6047] lo speed is unknown, defaulting to 1000 [ 83.253140][ T6049] syzkaller0: entered allmulticast mode [ 83.293492][ T6049] syzkaller0: entered promiscuous mode [ 83.340881][ T6049] syzkaller0 (unregistering): left allmulticast mode [ 83.348348][ T6049] syzkaller0 (unregistering): left promiscuous mode [ 83.739951][ T6069] loop7: detected capacity change from 0 to 128 [ 83.903557][ T6075] loop6: detected capacity change from 0 to 1024 [ 83.945661][ T6075] EXT4-fs: Ignoring removed orlov option [ 83.980852][ T6075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.996536][ T6081] loop7: detected capacity change from 0 to 512 [ 84.011899][ T6081] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.032464][ T6075] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.049091][ T6075] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 84.061525][ T6075] EXT4-fs (loop6): This should not happen!! Data will be lost [ 84.061525][ T6075] [ 84.091419][ T6081] EXT4-fs (loop7): failed to initialize system zone (-117) [ 84.100322][ T6087] netlink: 'syz.2.906': attribute type 4 has an invalid length. [ 84.112330][ T36] lo speed is unknown, defaulting to 1000 [ 84.118193][ T36] syz2: Port: 1 Link DOWN [ 84.118645][ T6081] EXT4-fs (loop7): mount failed [ 84.128435][ T6075] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.179324][ T6075] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.194581][ T6074] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.249004][ T6074] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.275078][ T6075] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.309879][ T6074] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.349833][ T6075] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.380124][ T6085] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.901: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.409895][ T6075] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.901: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.442370][ T6100] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.477805][ T6100] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.519838][ T6106] loop8: detected capacity change from 0 to 512 [ 84.583798][ T6106] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 84.597982][ T6100] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.670067][ T6106] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 84.688115][ T6100] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.700268][ T6109] loop7: detected capacity change from 0 to 164 [ 84.704202][ T6106] EXT4-fs (loop8): 1 truncate cleaned up [ 84.713602][ T6106] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.747284][ T6109] syz.7.916: attempt to access beyond end of device [ 84.747284][ T6109] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.763947][ T5212] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.773187][ T4307] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.782507][ T6109] syz.7.916: attempt to access beyond end of device [ 84.782507][ T6109] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 84.793528][ T5862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.832783][ T6106] lo speed is unknown, defaulting to 1000 [ 84.838799][ T5862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.935976][ T6106] lo speed is unknown, defaulting to 1000 [ 84.965805][ T5862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007420][ T6120] lo speed is unknown, defaulting to 1000 [ 85.024041][ T6120] lo speed is unknown, defaulting to 1000 [ 85.279482][ T5476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.382284][ T6128] lo speed is unknown, defaulting to 1000 [ 85.393988][ T6128] lo speed is unknown, defaulting to 1000 [ 85.693617][ T6154] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 85.864695][ T6154] team0: Port device dummy0 added [ 85.916117][ T6164] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.962958][ T6171] loop7: detected capacity change from 0 to 512 [ 85.972635][ T6171] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 85.987618][ T6164] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.001225][ T6171] EXT4-fs (loop7): 1 truncate cleaned up [ 86.019484][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 86.028470][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 86.044697][ T6171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.076968][ T6164] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.163025][ T6164] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.241496][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.261360][ T4340] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.308437][ T4355] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.337117][ T4312] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.380458][ T6179] loop6: detected capacity change from 0 to 1024 [ 86.395959][ T6179] EXT4-fs: Ignoring removed oldalloc option [ 86.401980][ T6179] EXT4-fs: Ignoring removed bh option [ 86.413635][ T6179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.450391][ T5212] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.463708][ T6186] netlink: 'syz.1.943': attribute type 4 has an invalid length. [ 86.777211][ T6175] ================================================================== [ 86.785352][ T6175] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 86.793464][ T6175] [ 86.795809][ T6175] write to 0xffff8881198b86e4 of 4 bytes by task 6171 on cpu 0: [ 86.803473][ T6175] xas_set_mark+0x12b/0x140 [ 86.808016][ T6175] tag_pages_for_writeback+0xc2/0x290 [ 86.813432][ T6175] ext4_do_writepages+0x6b2/0x2750 [ 86.818589][ T6175] ext4_writepages+0x176/0x300 [ 86.823387][ T6175] do_writepages+0x1c6/0x310 [ 86.828006][ T6175] filemap_write_and_wait_range+0x144/0x340 [ 86.833943][ T6175] filemap_invalidate_pages+0xa4/0x1a0 [ 86.839420][ T6175] kiocb_invalidate_pages+0x6e/0x80 [ 86.844648][ T6175] __iomap_dio_rw+0x5d4/0x1250 [ 86.849448][ T6175] iomap_dio_rw+0x40/0x90 [ 86.853812][ T6175] ext4_file_write_iter+0xad9/0xf00 [ 86.859055][ T6175] iter_file_splice_write+0x663/0xa60 [ 86.864455][ T6175] direct_splice_actor+0x153/0x2a0 [ 86.869589][ T6175] splice_direct_to_actor+0x30f/0x680 [ 86.875028][ T6175] do_splice_direct+0xda/0x150 [ 86.879817][ T6175] do_sendfile+0x380/0x650 [ 86.884274][ T6175] __x64_sys_sendfile64+0x105/0x150 [ 86.889496][ T6175] x64_sys_call+0x2bb0/0x2ff0 [ 86.894291][ T6175] do_syscall_64+0xd2/0x200 [ 86.898836][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.904752][ T6175] [ 86.907097][ T6175] read to 0xffff8881198b86e4 of 4 bytes by task 6175 on cpu 1: [ 86.914677][ T6175] file_write_and_wait_range+0x10e/0x2c0 [ 86.920372][ T6175] generic_buffers_fsync_noflush+0x45/0x120 [ 86.926302][ T6175] ext4_sync_file+0x1ab/0x690 [ 86.931004][ T6175] vfs_fsync_range+0x10d/0x130 [ 86.935801][ T6175] ext4_buffered_write_iter+0x34f/0x3c0 [ 86.941408][ T6175] ext4_file_write_iter+0xdbf/0xf00 [ 86.946658][ T6175] iter_file_splice_write+0x663/0xa60 [ 86.952063][ T6175] direct_splice_actor+0x153/0x2a0 [ 86.957205][ T6175] splice_direct_to_actor+0x30f/0x680 [ 86.962700][ T6175] do_splice_direct+0xda/0x150 [ 86.967667][ T6175] do_sendfile+0x380/0x650 [ 86.972120][ T6175] __x64_sys_sendfile64+0x105/0x150 [ 86.977357][ T6175] x64_sys_call+0x2bb0/0x2ff0 [ 86.982156][ T6175] do_syscall_64+0xd2/0x200 [ 86.986704][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.992627][ T6175] [ 86.994959][ T6175] value changed: 0x02000021 -> 0x04000021 [ 87.000685][ T6175] [ 87.003028][ T6175] Reported by Kernel Concurrency Sanitizer on: [ 87.009191][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.7.940 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.020596][ T6175] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 87.024461][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.034533][ T6175] ================================================================== [ 87.046192][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 87.046210][ T29] audit: type=1400 audit(87.023:1585): avc: denied { write } for pid=3290 comm="syz-executor" path="pipe:[1988]" dev="pipefs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 87.428465][ T4347] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.478517][ T4347] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.522956][ T6169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.547124][ T4347] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.616994][ T4347] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.682811][ T4347] bridge_slave_1: left allmulticast mode [ 87.688671][ T4347] bridge_slave_1: left promiscuous mode [ 87.694465][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.702340][ T4347] bridge_slave_0: left allmulticast mode [ 87.708025][ T4347] bridge_slave_0: left promiscuous mode [ 87.713834][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.818193][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.828218][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.837906][ T4347] bond0 (unregistering): Released all slaves [ 87.890279][ T4347] hsr_slave_0: left promiscuous mode [ 87.896617][ T4347] hsr_slave_1: left promiscuous mode [ 87.902261][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.909684][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.918023][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.925630][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.936555][ T4347] veth1_macvtap: left promiscuous mode [ 87.942051][ T4347] veth0_macvtap: left promiscuous mode [ 87.948396][ T4347] veth1_vlan: left promiscuous mode [ 87.953626][ T4347] veth0_vlan: left promiscuous mode [ 88.019739][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 88.030630][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 88.327089][ T4347] IPVS: stop unused estimator thread 0... [ 88.379315][ T4347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.428254][ T4347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.487970][ T4347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.547668][ T4347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.615624][ T4347] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.658894][ T4347] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.718708][ T4347] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.768228][ T4347] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.842585][ T4347] bridge_slave_1: left allmulticast mode [ 88.848426][ T4347] bridge_slave_1: left promiscuous mode [ 88.854055][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.861854][ T4347] bridge_slave_0: left allmulticast mode [ 88.868253][ T4347] bridge_slave_0: left promiscuous mode [ 88.873967][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.882328][ T4347] bridge_slave_1: left allmulticast mode [ 88.888035][ T4347] bridge_slave_1: left promiscuous mode [ 88.893764][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.901701][ T4347] bridge_slave_0: left allmulticast mode [ 88.907427][ T4347] bridge_slave_0: left promiscuous mode [ 88.913103][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.019372][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.029429][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.039105][ T4347] bond0 (unregistering): Released all slaves [ 89.107576][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.117386][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.127638][ T4347] bond0 (unregistering): Released all slaves [ 89.172346][ T4347] hsr_slave_0: left promiscuous mode [ 89.178027][ T4347] hsr_slave_1: left promiscuous mode [ 89.183692][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.191763][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.199706][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.207283][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.217398][ T4347] hsr_slave_0: left promiscuous mode [ 89.223056][ T4347] hsr_slave_1: left promiscuous mode [ 89.228602][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.236010][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.243701][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.251788][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.264325][ T4347] veth1_macvtap: left promiscuous mode [ 89.269854][ T4347] veth0_macvtap: left promiscuous mode [ 89.276174][ T4347] veth1_vlan: left promiscuous mode [ 89.281564][ T4347] veth0_vlan: left promiscuous mode [ 89.287394][ T4347] veth1_macvtap: left promiscuous mode [ 89.292866][ T4347] veth0_macvtap: left promiscuous mode [ 89.298456][ T4347] veth1_vlan: left promiscuous mode [ 89.303748][ T4347] veth0_vlan: left promiscuous mode [ 89.403156][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 89.413180][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 89.467247][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 89.477339][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 90.047473][ T4347] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.116730][ T4347] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.166918][ T4347] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.206856][ T4347] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.386899][ T4347] bond0 (unregistering): Released all slaves [ 90.427237][ T4347] tipc: Disabling bearer [ 90.432333][ T4347] tipc: Left network mode [ 90.439746][ T4347] hsr_slave_0: left promiscuous mode [ 90.445387][ T4347] hsr_slave_1: left promiscuous mode [ 90.453572][ T4347] veth1_macvtap: left promiscuous mode [ 90.459648][ T4347] veth0_macvtap: left promiscuous mode [ 90.465168][ T4347] veth1_vlan: left promiscuous mode [ 90.470553][ T4347] veth0_vlan: left promiscuous mode [ 90.544390][ T4347] team0 (unregistering): Port device dummy0 removed [ 90.867747][ T4347] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.906782][ T4347] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.977440][ T4347] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.046860][ T4347] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.247504][ T4347] bond0 (unregistering): Released all slaves [ 91.287017][ T4347] tipc: Disabling bearer [ 91.292007][ T4347] tipc: Left network mode [ 91.299574][ T4347] hsr_slave_0: left promiscuous mode [ 91.305254][ T4347] hsr_slave_1: left promiscuous mode [ 91.313348][ T4347] veth1_macvtap: left promiscuous mode [ 91.319479][ T4347] veth0_macvtap: left promiscuous mode [ 91.324978][ T4347] veth1_vlan: left promiscuous mode [ 91.330271][ T4347] veth0_vlan: left promiscuous mode