last executing test programs: 1m24.301207114s ago: executing program 32 (id=147): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 57.30509418s ago: executing program 33 (id=888): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 52.317434704s ago: executing program 5 (id=947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 52.276964577s ago: executing program 5 (id=948): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x401800, 0x4b) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 51.977627821s ago: executing program 5 (id=954): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x2, 0x80805, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x334, 0x0, r0}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 51.977072481s ago: executing program 5 (id=955): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x20, 0x11e2, &(0x7f0000002480)="$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") chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 51.763875559s ago: executing program 5 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 51.606279861s ago: executing program 5 (id=968): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40041) r0 = socket(0x2, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40080) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) 51.556369866s ago: executing program 34 (id=968): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40041) r0 = socket(0x2, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40080) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) 48.395630202s ago: executing program 6 (id=1043): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 48.341881446s ago: executing program 6 (id=1047): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 46.737196826s ago: executing program 6 (id=1085): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x47, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f00000000c0)) 46.620234605s ago: executing program 6 (id=1090): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x20, 0x11e2, &(0x7f0000002480)="$eJzs3MFrHFUcB/BfYm1rarNRa7UF8aEXvQzdHLzoZZEUpAtK2xVaQZiaWV123A2ZJbAiVk9e/TvEozdBvOklF/8Gb7l4zCE44m5iElkPQZOF8Plc5gfvfee9x8DADPNm561vPu13q6ybj2JxYSEWNyLSbooUi3Hgy3j9zZ9/eeneg4d3Wu322t2UbrfuN99IKS2//OMHn3/3yk+jK+9/v/zDpdhe+XDn99Xftq9v39j54/4nvSr1qjQYjlKeHg2Ho/xRWaT1XtXPUnqvLPKqSL1BVWwea++Ww42NccoH6wsRUVRVygfj1C/GaTRMo81xyj/Oe4OUZVm6uhT8F51vd+u6jqjrJ+Ni1HVdPxVLcSWejquxHI1YiWfi2XgursXzcT1eiBfjxqTXvOcNAAAAAAAAAAAAAAAAAAAA54v9/wAAAAAAAAAAAAAAAAAAADB/9x48vNNqt9fupnQ5ovx6q7PVmR6n7a1u9KKMIm5FI/Zisvt/alrffqe9ditNrMRX5eP9/OOtzhPH883J7wRm5pvTfDqevxRLR/Or0Yhrs/OrM/OX47VXj+SzaMSvH8UwyliPv7KH+S+aKb39bvsf+ZuTfgAAAHAeZOlvM5/fs+zf2qf5E7wfqPaH3M9fiJsX5rdupqrxZ/28LIvNUysuxqkPoVAoDoq9uq7/h/PM+87EWTi86POeCQAAAAAAAAAAACdxFp8lznuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzJDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//9N2dOT") chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 46.425557531s ago: executing program 6 (id=1095): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x9d45, 0x47, 0x0, 0x7, 0x4f1d, 0x6, 0x6}) 46.101469358s ago: executing program 6 (id=1099): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) close(r0) 46.101191598s ago: executing program 35 (id=1099): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) close(r0) 27.985447814s ago: executing program 4 (id=1503): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 27.890678192s ago: executing program 4 (id=1505): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) 27.581842897s ago: executing program 4 (id=1512): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 27.449592067s ago: executing program 4 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 27.431553199s ago: executing program 4 (id=1516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r4}, 0x18) 25.551555601s ago: executing program 4 (id=1549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 25.551344571s ago: executing program 36 (id=1549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 22.744474768s ago: executing program 9 (id=1550): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) syz_io_uring_setup(0x4a3d, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, 0x0, 0x0) epoll_create(0xaf2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 21.873877969s ago: executing program 9 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 21.74290616s ago: executing program 9 (id=1620): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) getdents(r0, 0x0, 0x0) 21.475784381s ago: executing program 9 (id=1629): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) 19.993381781s ago: executing program 9 (id=1646): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 19.992911291s ago: executing program 37 (id=1646): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 18.239597583s ago: executing program 7 (id=1685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 18.096196455s ago: executing program 7 (id=1691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 18.063006187s ago: executing program 7 (id=1694): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x434002, 0xf8) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) open(0x0, 0x0, 0x0) 17.675230209s ago: executing program 7 (id=1697): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 17.375369993s ago: executing program 7 (id=1698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 16.817469898s ago: executing program 7 (id=1708): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="a0a1333368", 0x5}], 0x1, 0x7ffd, 0xffffffff, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f0000000280)=@objname={'system_u:object_r:setrans_initrc_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x4, 0x20, './file1\x00'}, 0x57) sendfile(r0, r2, 0x0, 0x100001) 16.806258609s ago: executing program 38 (id=1708): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="a0a1333368", 0x5}], 0x1, 0x7ffd, 0xffffffff, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f0000000280)=@objname={'system_u:object_r:setrans_initrc_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x4, 0x20, './file1\x00'}, 0x57) sendfile(r0, r2, 0x0, 0x100001) 5.240934656s ago: executing program 3 (id=2061): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.09601575s ago: executing program 1 (id=2108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.625790979s ago: executing program 3 (id=2065): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.600224091s ago: executing program 3 (id=2109): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000e09bffffee000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x4) 1.552934625s ago: executing program 0 (id=2111): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r1, 0x40099d}}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close(0x3) 1.552686404s ago: executing program 3 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 1.522127367s ago: executing program 3 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.505670588s ago: executing program 0 (id=2117): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r3, 0x5, &(0x7f00000002c0)={0x0, 0x2, 0xa, 0x8000000000000001}) 1.475396581s ago: executing program 0 (id=2118): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 1.447345833s ago: executing program 3 (id=2120): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010004b0400000000fdffffff7a000000", @ANYRES32, @ANYBLOB="71a4000000000000200012800b0001006272696467650000100002800c002e0000ffed00f4"], 0x40}}, 0x8080) 1.228301961s ago: executing program 1 (id=2124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.182303885s ago: executing program 1 (id=2126): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.089234912s ago: executing program 2 (id=2129): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r1, 0x40099d}}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close(0x3) 1.014741068s ago: executing program 2 (id=2130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 613.258301ms ago: executing program 2 (id=2132): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000010000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d332000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064001400636d616328"], 0x19c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 553.319056ms ago: executing program 2 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 542.969857ms ago: executing program 0 (id=2135): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 479.880861ms ago: executing program 0 (id=2147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 450.426114ms ago: executing program 0 (id=2138): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d5", 0xc7}], 0x1}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 385.897999ms ago: executing program 8 (id=2140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 385.201689ms ago: executing program 8 (id=2141): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x1, 0x400002000000000, 0xffff) 355.562411ms ago: executing program 8 (id=2142): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) unlink(&(0x7f0000000000)='./file0\x00') 328.859623ms ago: executing program 8 (id=2143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 306.373585ms ago: executing program 1 (id=2144): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) 234.746562ms ago: executing program 8 (id=2145): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpgid(0x0, 0x0) eventfd(0x9) 183.675505ms ago: executing program 2 (id=2146): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 172.820276ms ago: executing program 8 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 91.051803ms ago: executing program 1 (id=2149): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x2, 0x0, 0x400, 0x0, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 29.646538ms ago: executing program 2 (id=2150): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) close(r0) 0s ago: executing program 1 (id=2151): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) kernel console output (not intermixed with test programs): to 1560 would solve the problem. [ 72.856770][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.889269][ T6293] loop4: detected capacity change from 0 to 512 [ 72.897683][ T6196] hsr_slave_0: entered promiscuous mode [ 72.904217][ T6196] hsr_slave_1: entered promiscuous mode [ 72.922909][ T6293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.982240][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.045710][ T6196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.063334][ T6196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.083109][ T6196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.107240][ T6196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.158698][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.169997][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.189007][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.196146][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.232140][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.239259][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.250060][ T6316] pim6reg1: entered promiscuous mode [ 73.255433][ T6316] pim6reg1: entered allmulticast mode [ 73.293762][ T6196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.316591][ T6325] loop4: detected capacity change from 0 to 512 [ 73.366074][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.409414][ T6338] loop4: detected capacity change from 0 to 1024 [ 73.473131][ T6338] EXT4-fs: Ignoring removed bh option [ 73.486311][ T6338] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.498655][ T6338] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.1014: inode #2304: comm syz.4.1014: iget: illegal inode # [ 73.512241][ T6338] EXT4-fs (loop4): Remounting filesystem read-only [ 73.518838][ T6338] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 73.549288][ T6338] EXT4-fs (loop4): mount failed [ 73.563214][ T6196] veth0_vlan: entered promiscuous mode [ 73.573650][ T6196] veth1_vlan: entered promiscuous mode [ 73.579380][ T36] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 73.593165][ T6196] veth0_macvtap: entered promiscuous mode [ 73.602448][ T6196] veth1_macvtap: entered promiscuous mode [ 73.618461][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.631464][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.651361][ T4335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.674641][ T4335] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.687013][ T6367] loop6: detected capacity change from 0 to 512 [ 73.703890][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 73.703906][ T29] audit: type=1326 audit(2000000000.570:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3505bd84a code=0x7ffc0000 [ 73.704574][ T4335] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.712276][ T29] audit: type=1326 audit(2000000000.580:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3505bd84a code=0x7ffc0000 [ 73.765559][ T29] audit: type=1326 audit(2000000000.580:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3505bd457 code=0x7ffc0000 [ 73.789075][ T29] audit: type=1326 audit(2000000000.580:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3505c038a code=0x7ffc0000 [ 73.822351][ T4344] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.834687][ T6371] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.845134][ T6371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.860907][ T6367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.865566][ T29] audit: type=1400 audit(2000000000.730:1668): avc: denied { watch_reads } for pid=6375 comm="syz.4.1025" path="/211/file1" dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.886259][ T6367] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.919549][ T29] audit: type=1326 audit(2000000000.780:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3505bd550 code=0x7ffc0000 [ 73.943092][ T29] audit: type=1326 audit(2000000000.780:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe3505bd937 code=0x7ffc0000 [ 73.966729][ T29] audit: type=1326 audit(2000000000.780:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3505bd550 code=0x7ffc0000 [ 73.988718][ T6365] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1022: corrupted inode contents [ 73.990167][ T29] audit: type=1326 audit(2000000000.780:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3505bebe9 code=0x7ffc0000 [ 74.026436][ T29] audit: type=1400 audit(2000000000.780:1673): avc: denied { ioctl } for pid=6378 comm="syz.7.971" path="socket:[14133]" dev="sockfs" ino=14133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.052477][ T6365] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1022: mark_inode_dirty error [ 74.080154][ T6365] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1022: corrupted inode contents [ 74.105696][ T6365] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1022: mark_inode_dirty error [ 74.156896][ T5937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.247942][ T6394] loop7: detected capacity change from 0 to 2048 [ 74.271835][ T6394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.293005][ T6394] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 74.317645][ T6394] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.330037][ T6394] EXT4-fs (loop7): This should not happen!! Data will be lost [ 74.330037][ T6394] [ 74.339715][ T6394] EXT4-fs (loop7): Total free blocks count 0 [ 74.345784][ T6394] EXT4-fs (loop7): Free/Dirty block details [ 74.351712][ T6394] EXT4-fs (loop7): free_blocks=4096 [ 74.357000][ T6394] EXT4-fs (loop7): dirty_blocks=16 [ 74.362215][ T6394] EXT4-fs (loop7): Block reservation details [ 74.368244][ T6394] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 74.389765][ T6401] macvtap1: entered promiscuous mode [ 74.395238][ T6401] syz_tun: entered promiscuous mode [ 74.414962][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.426273][ T6401] syz_tun: left promiscuous mode [ 74.604122][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1045'. [ 74.628773][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.641979][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 74.795141][ T6448] 9pnet_fd: Insufficient options for proto=fd [ 74.919408][ T6455] loop7: detected capacity change from 0 to 2048 [ 74.932945][ T6455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.135216][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.161626][ T6465] mmap: syz.7.1060 (6465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.190860][ T6463] loop4: detected capacity change from 0 to 512 [ 75.210668][ T6463] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 75.261751][ T6471] netlink: 'syz.4.1064': attribute type 10 has an invalid length. [ 75.269621][ T6471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1064'. [ 75.281560][ T6471] batman_adv: batadv0: Adding interface: macvlan0 [ 75.288073][ T6471] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.316570][ T6471] batman_adv: batadv0: Interface activated: macvlan0 [ 75.348866][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 75.375881][ T6477] wg2: entered promiscuous mode [ 75.385051][ T6477] wg2: entered allmulticast mode [ 75.477941][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.485204][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.524767][ T6488] loop4: detected capacity change from 0 to 1024 [ 75.544392][ T6481] wg2: left promiscuous mode [ 75.563333][ T6488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.564628][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.593131][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.634252][ T6488] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1071: Allocating blocks 449-513 which overlap fs metadata [ 75.654980][ T6490] netlink: 'syz.2.1072': attribute type 13 has an invalid length. [ 75.671683][ T4301] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.693989][ T4301] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.697836][ T6487] EXT4-fs (loop4): pa ffff888105737310: logic 48, phys. 177, len 21 [ 75.703649][ T4301] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.710950][ T6487] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 75.747492][ T4301] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.762490][ T6499] siw: device registration error -23 [ 75.811408][ T6501] loop0: detected capacity change from 0 to 1024 [ 75.869517][ T6501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.912620][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.952647][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.989480][ T6503] loop7: detected capacity change from 0 to 8192 [ 76.013940][ T6512] loop0: detected capacity change from 0 to 512 [ 76.022930][ T6512] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.030499][ T6512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.067396][ T6512] EXT4-fs (loop0): 1 truncate cleaned up [ 76.086544][ T6512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.202592][ T6519] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 76.210463][ T6519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1082'. [ 76.224973][ T6521] bridge: RTM_NEWNEIGH with invalid ether address [ 76.235731][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.350439][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 76.439845][ T6536] loop6: detected capacity change from 0 to 8192 [ 76.510361][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 76.534850][ T5937] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006c61) [ 76.542801][ T5937] FAT-fs (loop6): Filesystem has been set read-only [ 76.556005][ T5937] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 76.575604][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 76.590294][ T5937] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 76.689017][ T6553] loop0: detected capacity change from 0 to 8192 [ 76.824336][ T4339] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.865431][ T4339] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.903877][ T6564] loop7: detected capacity change from 0 to 1024 [ 76.931346][ T6564] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.955306][ T4339] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.980163][ T6564] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 77.009115][ T4339] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.029299][ T6564] EXT4-fs (loop7): orphan cleanup on readonly fs [ 77.037131][ T6564] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 77.051706][ T6564] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 77.064387][ T6564] EXT4-fs (loop7): 1 truncate cleaned up [ 77.070766][ T6564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.107555][ T6564] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 77.133017][ T4339] bridge_slave_1: left allmulticast mode [ 77.138785][ T4339] bridge_slave_1: left promiscuous mode [ 77.144552][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.156947][ T4339] bridge_slave_0: left allmulticast mode [ 77.162790][ T4339] bridge_slave_0: left promiscuous mode [ 77.168660][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.176423][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.375096][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.388137][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.399410][ T4339] bond0 (unregistering): Released all slaves [ 77.471948][ T4339] hsr_slave_0: left promiscuous mode [ 77.472343][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 77.487736][ T4339] hsr_slave_1: left promiscuous mode [ 77.495683][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.503398][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.512589][ T6593] loop4: detected capacity change from 0 to 8192 [ 77.530749][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.538241][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.565065][ T6601] loop2: detected capacity change from 0 to 1024 [ 77.575501][ T4339] veth1_macvtap: left promiscuous mode [ 77.588758][ T4339] veth0_macvtap: left promiscuous mode [ 77.594736][ T6601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.594970][ T4339] veth1_vlan: left promiscuous mode [ 77.603878][ T6601] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.608889][ T4339] veth0_vlan: left promiscuous mode [ 77.627277][ T6601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 77.671784][ T6601] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1114: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.697196][ T6601] EXT4-fs (loop2): Remounting filesystem read-only [ 77.715828][ T6601] EXT4-fs (loop2): 1 orphan inode deleted [ 77.728465][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 77.736173][ T4356] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 77.740639][ T6601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.760353][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 77.849021][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.924497][ T6565] chnl_net:caif_netlink_parms(): no params data found [ 78.015466][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.022602][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.030025][ T6565] bridge_slave_0: entered allmulticast mode [ 78.036838][ T6565] bridge_slave_0: entered promiscuous mode [ 78.044206][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.051340][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.058855][ T6565] bridge_slave_1: entered allmulticast mode [ 78.065614][ T6565] bridge_slave_1: entered promiscuous mode [ 78.092677][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.108704][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.165542][ T6565] team0: Port device team_slave_0 added [ 78.190432][ T6565] team0: Port device team_slave_1 added [ 78.261229][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.268317][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.294453][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.332933][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.339936][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.365958][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.450476][ T6565] hsr_slave_0: entered promiscuous mode [ 78.456512][ T6565] hsr_slave_1: entered promiscuous mode [ 78.463677][ T6565] debugfs: 'hsr0' already exists in 'hsr' [ 78.469510][ T6565] Cannot create hsr debugfs directory [ 78.563715][ T6565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.578201][ T6647] macvlan2: entered promiscuous mode [ 78.603074][ T6647] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 78.611888][ T6565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.626686][ T6647] macvlan3: entered promiscuous mode [ 78.632349][ T6647] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 78.642137][ T6565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.652200][ T6565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.667162][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.674294][ T6565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.681574][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.688652][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.719768][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.732839][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.741077][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.757217][ T6565] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.773341][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.780595][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.786995][ T6658] loop4: detected capacity change from 0 to 164 [ 78.789802][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.801185][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.806387][ T6658] bio_check_eod: 10396 callbacks suppressed [ 78.806405][ T6658] syz.4.1128: attempt to access beyond end of device [ 78.806405][ T6658] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 78.843539][ T6658] syz.4.1128: attempt to access beyond end of device [ 78.843539][ T6658] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 79.144901][ T6668] syzkaller0: entered promiscuous mode [ 79.150580][ T6668] syzkaller0: entered allmulticast mode [ 79.190057][ T4306] syzkaller0: tun_net_xmit 48 [ 79.204610][ T6670] syzkaller0: tun_net_xmit 1280 [ 79.209616][ T6670] syzkaller0: create flow: hash 4036350823 index 1 [ 79.218715][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.312459][ T6667] syzkaller0: delete flow: hash 4036350823 index 1 [ 79.415746][ T6565] veth0_vlan: entered promiscuous mode [ 79.437583][ T6565] veth1_vlan: entered promiscuous mode [ 79.469432][ T6565] veth0_macvtap: entered promiscuous mode [ 79.477150][ T6565] veth1_macvtap: entered promiscuous mode [ 79.504172][ T6693] macvtap1: entered promiscuous mode [ 79.509570][ T6693] syz_tun: entered promiscuous mode [ 79.517966][ T6695] netlink: 'syz.7.1138': attribute type 1 has an invalid length. [ 79.525857][ T6695] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1138'. [ 79.536113][ T6693] syz_tun: left promiscuous mode [ 79.563176][ T6697] macvlan2: entered promiscuous mode [ 79.570545][ T6697] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 79.580664][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.589202][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.608344][ T6697] macvlan3: entered promiscuous mode [ 79.614340][ T6697] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 79.635024][ T4300] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.644025][ T4300] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.712145][ T4300] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725020][ T4300] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.355438][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 80.384089][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 80.413503][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 80.423880][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 80.443452][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 80.471140][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 80.650143][ T6741] loop7: detected capacity change from 0 to 128 [ 80.661631][ T6745] loop2: detected capacity change from 0 to 128 [ 80.680229][ T6744] batman_adv: batadv0: Interface deactivated: macvlan0 [ 80.711483][ T6744] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 80.718879][ T6744] bond1: left allmulticast mode [ 80.723990][ T6744] macvlan2: left promiscuous mode [ 80.731762][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.731762][ T6746] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 80.760149][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.760149][ T6746] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 80.789451][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.789451][ T6746] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 80.809061][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.809061][ T6746] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 80.828579][ T6749] loop4: detected capacity change from 0 to 128 [ 80.846930][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.846930][ T6746] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 80.861352][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.861352][ T6746] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 80.876540][ T6746] syz.7.1154: attempt to access beyond end of device [ 80.876540][ T6746] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 80.893389][ T4301] kworker/u8:12: attempt to access beyond end of device [ 80.893389][ T4301] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 80.939471][ T6755] loop7: detected capacity change from 0 to 128 [ 80.951076][ T6755] FAT-fs (loop7): Directory bread(block 32) failed [ 80.958618][ T6757] loop4: detected capacity change from 0 to 128 [ 80.966522][ T6755] FAT-fs (loop7): Directory bread(block 33) failed [ 80.983279][ T6755] FAT-fs (loop7): Directory bread(block 34) failed [ 80.989971][ T6755] FAT-fs (loop7): Directory bread(block 35) failed [ 80.999429][ T6755] FAT-fs (loop7): Directory bread(block 36) failed [ 81.013381][ T6757] FAT-fs (loop4): Directory bread(block 32) failed [ 81.022828][ T6757] FAT-fs (loop4): Directory bread(block 33) failed [ 81.029476][ T6755] FAT-fs (loop7): Directory bread(block 37) failed [ 81.036217][ T6757] FAT-fs (loop4): Directory bread(block 34) failed [ 81.044407][ T6755] FAT-fs (loop7): Directory bread(block 38) failed [ 81.051102][ T6755] FAT-fs (loop7): Directory bread(block 39) failed [ 81.051951][ T6757] FAT-fs (loop4): Directory bread(block 35) failed [ 81.057638][ T6755] FAT-fs (loop7): Directory bread(block 40) failed [ 81.070847][ T6755] FAT-fs (loop7): Directory bread(block 41) failed [ 81.095626][ T6757] FAT-fs (loop4): Directory bread(block 36) failed [ 81.102302][ T6757] FAT-fs (loop4): Directory bread(block 37) failed [ 81.108902][ T6757] FAT-fs (loop4): Directory bread(block 38) failed [ 81.116683][ T6757] FAT-fs (loop4): Directory bread(block 39) failed [ 81.123983][ T6757] FAT-fs (loop4): Directory bread(block 40) failed [ 81.130806][ T6757] FAT-fs (loop4): Directory bread(block 41) failed [ 81.158980][ T6755] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 81.167716][ T6755] FAT-fs (loop7): Filesystem has been set read-only [ 81.218435][ T6755] buffer_io_error: 2 callbacks suppressed [ 81.218452][ T6755] Buffer I/O error on dev loop7, logical block 1050, lost async page write [ 81.236410][ T6755] Buffer I/O error on dev loop7, logical block 1052, lost async page write [ 81.245826][ T6755] Buffer I/O error on dev loop7, logical block 1055, lost async page write [ 81.256070][ T6755] Buffer I/O error on dev loop7, logical block 1057, lost async page write [ 81.268284][ T6755] Buffer I/O error on dev loop7, logical block 1060, lost async page write [ 81.277072][ T6755] Buffer I/O error on dev loop7, logical block 1062, lost async page write [ 81.300222][ T6760] loop0: detected capacity change from 0 to 32768 [ 81.307765][ T6757] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 81.316431][ T6757] FAT-fs (loop4): Filesystem has been set read-only [ 81.327969][ T6757] Buffer I/O error on dev loop4, logical block 1050, lost async page write [ 81.336699][ T6757] Buffer I/O error on dev loop4, logical block 1052, lost async page write [ 81.345510][ T6757] Buffer I/O error on dev loop4, logical block 1055, lost async page write [ 81.347771][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 81.347787][ T29] audit: type=1326 audit(2000000008.210:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.8.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 81.354210][ T6757] Buffer I/O error on dev loop4, logical block 1057, lost async page write [ 81.396112][ T29] audit: type=1326 audit(2000000008.250:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.8.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 81.419586][ T29] audit: type=1326 audit(2000000008.250:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.8.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 81.448733][ T6772] loop2: detected capacity change from 0 to 164 [ 81.468010][ T29] audit: type=1326 audit(2000000008.320:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.8.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 81.491558][ T29] audit: type=1326 audit(2000000008.320:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.8.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 81.520583][ T6774] netlink: 'syz.8.1170': attribute type 3 has an invalid length. [ 81.578842][ T6783] netlink: 'syz.4.1172': attribute type 13 has an invalid length. [ 81.586814][ T6783] netlink: 'syz.4.1172': attribute type 17 has an invalid length. [ 81.607238][ T6789] loop8: detected capacity change from 0 to 1024 [ 81.615435][ T6789] EXT4-fs: Ignoring removed orlov option [ 81.624714][ T6789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.649185][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.664518][ T6783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.678322][ T6783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.809753][ T6808] netlink: 'syz.7.1176': attribute type 10 has an invalid length. [ 81.820628][ T6808] team0: Port device dummy0 added [ 81.828038][ T6808] netlink: 'syz.7.1176': attribute type 10 has an invalid length. [ 81.836724][ T6808] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.846941][ T6808] team0: Failed to send options change via netlink (err -105) [ 81.855000][ T6808] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.864123][ T6808] team0: Port device dummy0 removed [ 81.872302][ T6808] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.911220][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1177'. [ 81.923285][ T6813] bridge_slave_1: left allmulticast mode [ 81.928982][ T6813] bridge_slave_1: left promiscuous mode [ 81.935009][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.944063][ T6813] bridge_slave_0: left allmulticast mode [ 81.949771][ T6813] bridge_slave_0: left promiscuous mode [ 81.955453][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.002068][ T6565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.026304][ T6815] loop8: detected capacity change from 0 to 1024 [ 82.033308][ T6815] EXT4-fs: Ignoring removed bh option [ 82.039274][ T6815] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.055645][ T6815] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.1178: inode #2304: comm syz.8.1178: iget: illegal inode # [ 82.069331][ T6815] EXT4-fs (loop8): Remounting filesystem read-only [ 82.075890][ T6815] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 82.091099][ T6815] EXT4-fs (loop8): mount failed [ 82.149729][ T6820] loop0: detected capacity change from 0 to 128 [ 82.156943][ T6819] loop7: detected capacity change from 0 to 512 [ 82.163578][ T6819] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.170552][ T6819] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 82.176029][ T6820] FAT-fs (loop0): Directory bread(block 32) failed [ 82.187595][ T6820] FAT-fs (loop0): Directory bread(block 33) failed [ 82.194678][ T6820] FAT-fs (loop0): Directory bread(block 34) failed [ 82.201727][ T6820] FAT-fs (loop0): Directory bread(block 35) failed [ 82.208912][ T6819] EXT4-fs (loop7): 1 truncate cleaned up [ 82.215236][ T6819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.219418][ T6823] loop8: detected capacity change from 0 to 512 [ 82.228319][ T29] audit: type=1326 audit(2000000009.070:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 82.238950][ T6820] FAT-fs (loop0): Directory bread(block 36) failed [ 82.257420][ T29] audit: type=1326 audit(2000000009.070:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 82.264112][ T6820] FAT-fs (loop0): Directory bread(block 37) failed [ 82.287238][ T29] audit: type=1326 audit(2000000009.070:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 82.293924][ T6820] FAT-fs (loop0): Directory bread(block 38) failed [ 82.317252][ T29] audit: type=1326 audit(2000000009.070:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 82.347318][ T29] audit: type=1326 audit(2000000009.070:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 82.347346][ T6820] FAT-fs (loop0): Directory bread(block 39) failed [ 82.378058][ T6820] FAT-fs (loop0): Directory bread(block 40) failed [ 82.384859][ T6820] FAT-fs (loop0): Directory bread(block 41) failed [ 82.392577][ T6823] EXT4-fs (loop8): too many log groups per flexible block group [ 82.400477][ T6823] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 82.423958][ T6823] EXT4-fs (loop8): mount failed [ 82.444619][ T6820] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 82.453321][ T6820] FAT-fs (loop0): Filesystem has been set read-only [ 82.703169][ T6842] tipc: Started in network mode [ 82.708181][ T6842] tipc: Node identity de8b9d587e13, cluster identity 4711 [ 82.715425][ T6842] tipc: Enabled bearer , priority 0 [ 82.728965][ T6841] tipc: Disabling bearer [ 82.749881][ T6849] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 82.761454][ T6849] team0: Port device dummy0 added [ 82.770946][ T6849] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 82.779432][ T6849] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.791442][ T6849] team0: Failed to send options change via netlink (err -105) [ 82.799452][ T6849] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.810044][ T6849] team0: Port device dummy0 removed [ 82.817976][ T6849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.043035][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 83.074489][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.117500][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1201'. [ 83.134444][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1201'. [ 83.166712][ T6878] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 83.180710][ T6878] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 83.201407][ T6878] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.685478][ T6902] loop8: detected capacity change from 0 to 1024 [ 83.699207][ T6902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.719478][ T6902] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.732039][ T6902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 83.742715][ T6902] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.1209: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.763056][ T6902] EXT4-fs (loop8): Remounting filesystem read-only [ 83.769749][ T6902] EXT4-fs (loop8): 1 orphan inode deleted [ 83.778359][ T6902] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.791075][ T4300] EXT4-fs (loop8): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 83.807975][ T6902] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.829086][ T6565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.983248][ T6916] loop0: detected capacity change from 0 to 512 [ 84.015038][ T6916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.035741][ T6916] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.050667][ T6922] loop4: detected capacity change from 0 to 512 [ 84.064260][ T6922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.081640][ T6922] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 84.369201][ T6938] netlink: zone id is out of range [ 84.374426][ T6938] netlink: set zone limit has 4 unknown bytes [ 84.497167][ T6943] loop8: detected capacity change from 0 to 128 [ 84.613381][ T4306] bio_check_eod: 149 callbacks suppressed [ 84.613400][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.613400][ T4306] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 84.640001][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.640001][ T4306] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 84.653631][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.653631][ T4306] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 84.667161][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.667161][ T4306] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 84.681133][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.681133][ T4306] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 84.694824][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.694824][ T4306] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 84.708508][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.708508][ T4306] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 84.732808][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.732808][ T4306] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 84.748176][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.748176][ T4306] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 84.763446][ T4306] kworker/u8:17: attempt to access beyond end of device [ 84.763446][ T4306] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 84.808145][ T6956] loop8: detected capacity change from 0 to 128 [ 84.836753][ T6956] FAT-fs (loop8): Directory bread(block 32) failed [ 84.843696][ T6952] loop7: detected capacity change from 0 to 8192 [ 84.852380][ T6956] FAT-fs (loop8): Directory bread(block 33) failed [ 84.867637][ T6956] FAT-fs (loop8): Directory bread(block 34) failed [ 84.890789][ T6956] FAT-fs (loop8): Directory bread(block 35) failed [ 84.899423][ T6956] FAT-fs (loop8): Directory bread(block 36) failed [ 84.906127][ T6956] FAT-fs (loop8): Directory bread(block 37) failed [ 84.912815][ T6956] FAT-fs (loop8): Directory bread(block 38) failed [ 84.919364][ T6956] FAT-fs (loop8): Directory bread(block 39) failed [ 84.926199][ T6956] FAT-fs (loop8): Directory bread(block 40) failed [ 84.933031][ T6956] FAT-fs (loop8): Directory bread(block 41) failed [ 84.940533][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.983775][ T6956] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 84.992436][ T6956] FAT-fs (loop8): Filesystem has been set read-only [ 85.062360][ T6966] loop0: detected capacity change from 0 to 164 [ 85.119892][ T6968] tipc: Started in network mode [ 85.125010][ T6968] tipc: Node identity a6b6cf1618fd, cluster identity 4711 [ 85.132298][ T6968] tipc: Enabled bearer , priority 0 [ 85.142802][ T6970] loop4: detected capacity change from 0 to 1024 [ 85.151110][ T6970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.160493][ T6970] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.172388][ T6970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 85.181621][ T6968] syzkaller0: MTU too low for tipc bearer [ 85.187404][ T6968] tipc: Disabling bearer [ 85.194148][ T6970] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1236: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.208329][ T6970] EXT4-fs (loop4): Remounting filesystem read-only [ 85.217053][ T6970] EXT4-fs (loop4): 1 orphan inode deleted [ 85.225350][ T6970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.238320][ T4301] EXT4-fs (loop4): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 85.320918][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.334478][ T6987] loop7: detected capacity change from 0 to 512 [ 85.341900][ T6987] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 85.360060][ T6987] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1242: invalid indirect mapped block 4294967295 (level 0) [ 85.375682][ T6987] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1242: invalid indirect mapped block 4294967295 (level 1) [ 85.391547][ T6987] EXT4-fs (loop7): 1 orphan inode deleted [ 85.397446][ T6987] EXT4-fs (loop7): 1 truncate cleaned up [ 85.404811][ T6995] __nla_validate_parse: 6 callbacks suppressed [ 85.404827][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 85.405603][ T6987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.430700][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 85.465577][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.508693][ T7005] loop4: detected capacity change from 0 to 512 [ 85.521897][ T7005] EXT4-fs (loop4): too many log groups per flexible block group [ 85.529609][ T7005] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 85.536743][ T7005] EXT4-fs (loop4): mount failed [ 85.596175][ T7010] loop4: detected capacity change from 0 to 8192 [ 85.684012][ T7016] wireguard0: entered promiscuous mode [ 85.689528][ T7016] wireguard0: entered allmulticast mode [ 85.935076][ T7034] loop4: detected capacity change from 0 to 128 [ 85.943930][ T7034] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.956568][ T7034] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.028371][ T7040] loop7: detected capacity change from 0 to 512 [ 86.046486][ T7040] EXT4-fs (loop7): too many log groups per flexible block group [ 86.054298][ T7040] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 86.061805][ T7040] EXT4-fs (loop7): mount failed [ 86.286879][ T7074] loop0: detected capacity change from 0 to 512 [ 86.311914][ T7074] EXT4-fs (loop0): too many log groups per flexible block group [ 86.319667][ T7074] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 86.328171][ T7074] EXT4-fs (loop0): mount failed [ 86.346524][ T7084] loop2: detected capacity change from 0 to 1024 [ 86.346794][ T7084] EXT4-fs: Ignoring removed orlov option [ 86.393250][ T7084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.632047][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 86.632095][ T29] audit: type=1326 audit(2000000013.500:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.632893][ T29] audit: type=1326 audit(2000000013.500:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.632931][ T29] audit: type=1326 audit(2000000013.500:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.754993][ T7099] vlan2: entered allmulticast mode [ 86.777075][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.781059][ T7099] dummy0: entered allmulticast mode [ 86.815079][ T7109] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1297'. [ 86.877966][ T29] audit: type=1326 audit(2000000013.740:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.878013][ T29] audit: type=1326 audit(2000000013.740:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.901752][ T29] audit: type=1326 audit(2000000013.740:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.910313][ T29] audit: type=1326 audit(2000000013.770:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.910343][ T29] audit: type=1326 audit(2000000013.770:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.912995][ T29] audit: type=1326 audit(2000000013.780:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.913756][ T29] audit: type=1326 audit(2000000013.780:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99c4eebe9 code=0x7ffc0000 [ 86.927905][ T7115] loop4: detected capacity change from 0 to 2048 [ 86.959124][ T7117] loop0: detected capacity change from 0 to 1024 [ 86.963551][ T7117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.963680][ T7117] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.992967][ T7117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 87.028914][ T7115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.157656][ T7117] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1300: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.171208][ T7117] EXT4-fs (loop0): Remounting filesystem read-only [ 87.171314][ T7117] EXT4-fs (loop0): 1 orphan inode deleted [ 87.171759][ T7117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.205164][ T4339] EXT4-fs (loop0): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 87.287020][ T7135] loop7: detected capacity change from 0 to 1024 [ 87.295938][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.304068][ T7135] EXT4-fs: Ignoring removed orlov option [ 87.333961][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1309'. [ 87.344950][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.345153][ T7135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.352590][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.376872][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.384802][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.393272][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.458861][ T7151] bridge: RTM_NEWNEIGH with invalid ether address [ 87.549425][ T7158] loop8: detected capacity change from 0 to 8192 [ 87.562453][ T7159] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1316'. [ 87.571646][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 87.593125][ T7161] loop2: detected capacity change from 0 to 512 [ 87.599600][ T7161] EXT4-fs: Ignoring removed nobh option [ 87.623044][ T7161] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1317: corrupted inode contents [ 87.643625][ T7161] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1317: mark_inode_dirty error [ 87.671145][ T7161] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1317: corrupted inode contents [ 87.686672][ T7161] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1317: mark_inode_dirty error [ 87.698819][ T7161] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1317: Failed to acquire dquot type 0 [ 87.711655][ T7161] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1317: corrupted inode contents [ 87.726294][ T7161] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1317: mark_inode_dirty error [ 87.744455][ T7161] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1317: corrupted inode contents [ 87.767732][ T7161] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1317: mark_inode_dirty error [ 87.791181][ T7161] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1317: corrupted inode contents [ 87.809425][ T7161] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 87.830443][ T7161] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1317: corrupted inode contents [ 87.832398][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.866871][ T7161] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1317: mark_inode_dirty error [ 87.881587][ T7161] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 87.892145][ T7161] EXT4-fs (loop2): 1 truncate cleaned up [ 87.898300][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.904189][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 87.912975][ T7161] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.933442][ T7161] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.948043][ T7174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.957625][ T7174] bond1: (slave bond2): Enslaving as an active interface with an up link [ 87.985099][ T7180] serio: Serial port ptm0 [ 87.986172][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 87.999622][ T7182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.390730][ T7195] netlink: zone id is out of range [ 88.390905][ T7195] netlink: zone id is out of range [ 88.390913][ T7195] netlink: zone id is out of range [ 88.493168][ T7199] loop4: detected capacity change from 0 to 8192 [ 88.761839][ T7201] netlink: zone id is out of range [ 88.767377][ T7201] netlink: zone id is out of range [ 88.767386][ T7201] netlink: zone id is out of range [ 88.767393][ T7201] netlink: zone id is out of range [ 88.767402][ T7201] netlink: zone id is out of range [ 88.767412][ T7201] netlink: zone id is out of range [ 88.767419][ T7201] netlink: zone id is out of range [ 89.144440][ T7236] loop7: detected capacity change from 0 to 1024 [ 89.151282][ T7236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.161747][ T7236] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.172907][ T7236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 89.174009][ T7236] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.1348: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.174105][ T7236] EXT4-fs (loop7): Remounting filesystem read-only [ 89.174192][ T7236] EXT4-fs (loop7): 1 orphan inode deleted [ 89.174597][ T7236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.190342][ T4301] EXT4-fs (loop7): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 89.221438][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.451330][ T7246] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2 [ 89.562693][ T7257] loop8: detected capacity change from 0 to 128 [ 89.596830][ T7257] Process accounting resumed [ 89.596868][ T7257] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 89.609051][ T7257] FAT-fs (loop8): Filesystem has been set read-only [ 89.615955][ T36] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 89.633085][ T7259] can0: slcan on ttyS3. [ 89.670676][ T7259] can0 (unregistered): slcan off ttyS3. [ 89.699492][ T7262] SELinux: policydb version 0 does not match my version range 15-35 [ 89.699627][ T7262] SELinux: failed to load policy [ 90.079166][ T7285] netlink: 'syz.2.1368': attribute type 13 has an invalid length. [ 90.094480][ T7285] gretap0: refused to change device tx_queue_len [ 91.017346][ T7348] SELinux: ebitmap: truncated map [ 91.026819][ T7348] SELinux: failed to load policy [ 91.065998][ T7357] SELinux: policydb version 0 does not match my version range 15-35 [ 91.078718][ T7357] SELinux: failed to load policy [ 91.117597][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1394'. [ 91.126569][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1394'. [ 91.381328][ T7380] pim6reg1: entered promiscuous mode [ 91.386686][ T7380] pim6reg1: entered allmulticast mode [ 91.523479][ T7399] netlink: 'syz.8.1402': attribute type 27 has an invalid length. [ 91.531363][ T7399] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1402'. [ 91.648304][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 91.749678][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 91.749719][ T29] audit: type=1326 audit(2000000018.610:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784722ebe9 code=0x7ffc0000 [ 91.768449][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 91.825335][ T29] audit: type=1326 audit(2000000018.650:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f784722ebe9 code=0x7ffc0000 [ 91.848994][ T29] audit: type=1326 audit(2000000018.650:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784722ebe9 code=0x7ffc0000 [ 91.872498][ T29] audit: type=1326 audit(2000000018.650:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f784722ebe9 code=0x7ffc0000 [ 91.895913][ T29] audit: type=1326 audit(2000000018.650:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7431 comm="syz.2.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784722ebe9 code=0x7ffc0000 [ 91.909145][ T7435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.919966][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1412'. [ 91.946610][ T7435] bond3: (slave bond4): Enslaving as an active interface with an up link [ 91.955906][ T7445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.259875][ T7492] loop4: detected capacity change from 0 to 1024 [ 92.266679][ T7492] EXT4-fs: Ignoring removed orlov option [ 92.284347][ T7492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.345607][ T7506] loop7: detected capacity change from 0 to 512 [ 92.353370][ T7506] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1422: casefold flag without casefold feature [ 92.366273][ T7506] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1422: couldn't read orphan inode 15 (err -117) [ 92.379656][ T7506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.398920][ T29] audit: type=1400 audit(2000000019.260:2299): avc: denied { setattr } for pid=7504 comm="syz.7.1422" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.450742][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.514931][ T7519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7519 comm=syz.7.1427 [ 92.639368][ T7530] loop0: detected capacity change from 0 to 512 [ 92.695134][ T7530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1434: bg 0: block 248: padding at end of block bitmap is not set [ 92.708509][ T29] audit: type=1400 audit(2000000019.560:2300): avc: denied { prog_load } for pid=7542 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.720415][ T7530] Quota error (device loop0): write_blk: dquota write failed [ 92.728634][ T29] audit: type=1400 audit(2000000019.560:2301): avc: denied { bpf } for pid=7542 comm="syz.2.1440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.744942][ T29] audit: type=1400 audit(2000000019.590:2302): avc: denied { map_create } for pid=7542 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.757375][ T7530] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1434: Failed to acquire dquot type 1 [ 92.817979][ T7530] EXT4-fs (loop0): 1 truncate cleaned up [ 92.825427][ T7530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.826516][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.838154][ T7530] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.880557][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 92.890204][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 92.894584][ T7530] syz.0.1434 (7530) used greatest stack depth: 9200 bytes left [ 92.909183][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.943971][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 92.965580][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 93.097851][ T7574] loop7: detected capacity change from 0 to 1024 [ 93.125230][ T7574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.163851][ T7574] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 93.186664][ T7583] loop4: detected capacity change from 0 to 8192 [ 93.194538][ T7583] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.231889][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.266980][ T7591] netlink: 'syz.7.1461': attribute type 27 has an invalid length. [ 93.554506][ T7614] wg2: entered promiscuous mode [ 93.559444][ T7614] wg2: entered allmulticast mode [ 93.633764][ T7620] loop7: detected capacity change from 0 to 2048 [ 93.667257][ T7620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.083854][ T7657] netlink: 'syz.4.1478': attribute type 27 has an invalid length. [ 94.144086][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.465450][ T7717] geneve2: entered promiscuous mode [ 94.501523][ T4356] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.512444][ T4356] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541406][ T7741] wg2: entered promiscuous mode [ 94.570052][ T4356] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.600920][ T4356] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.960931][ T7781] loop4: detected capacity change from 0 to 1024 [ 94.977909][ T7781] EXT4-fs: Ignoring removed orlov option [ 95.440275][ T7806] loop7: detected capacity change from 0 to 128 [ 95.491853][ T7809] loop8: detected capacity change from 0 to 1024 [ 95.547466][ T7809] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1514: Allocating blocks 449-513 which overlap fs metadata [ 95.582504][ T7809] SELinux: Context @ is not valid (left unmapped). [ 95.594656][ T7809] EXT4-fs (loop8): pa ffff888105737460: logic 48, phys. 177, len 21 [ 95.602859][ T7809] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 95.654769][ T7817] netlink: 'syz.7.1518': attribute type 10 has an invalid length. [ 95.676638][ T7817] bond0: (slave macvlan2): Releasing backup interface [ 95.698329][ T7819] vlan2: entered allmulticast mode [ 95.796119][ T7822] loop0: detected capacity change from 0 to 1024 [ 95.820918][ T7822] EXT4-fs: Ignoring removed nobh option [ 95.838880][ T7822] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.849885][ T7822] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 95.861707][ T7822] JBD2: no valid journal superblock found [ 95.867484][ T7822] EXT4-fs (loop0): Could not load journal inode [ 95.947617][ T7830] bridge0: entered promiscuous mode [ 95.961663][ T7830] bridge0: port 3(macsec1) entered blocking state [ 95.968237][ T7830] bridge0: port 3(macsec1) entered disabled state [ 95.990476][ T7830] macsec1: entered allmulticast mode [ 95.995828][ T7830] bridge0: entered allmulticast mode [ 96.011001][ T7830] macsec1: left allmulticast mode [ 96.016074][ T7830] bridge0: left allmulticast mode [ 96.021785][ T7830] bridge0: left promiscuous mode [ 96.046996][ T7834] tipc: Enabled bearer , priority 0 [ 96.071374][ T7833] tipc: Disabling bearer [ 96.659462][ T7859] netlink: 'syz.2.1535': attribute type 7 has an invalid length. [ 96.667280][ T7859] __nla_validate_parse: 12 callbacks suppressed [ 96.667298][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 96.704942][ T7862] netem: incorrect gi model size [ 96.709926][ T7862] netem: change failed [ 96.833155][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 96.842199][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1540'. [ 96.851309][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 96.860325][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 96.957413][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 96.957472][ T29] audit: type=1400 audit(2000000023.820:2464): avc: denied { create } for pid=7880 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.983497][ T29] audit: type=1400 audit(2000000023.830:2465): avc: denied { ioctl } for pid=7880 comm="syz.2.1545" path="socket:[20711]" dev="sockfs" ino=20711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.008361][ T29] audit: type=1400 audit(2000000023.850:2466): avc: denied { bind } for pid=7880 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.027822][ T29] audit: type=1400 audit(2000000023.850:2467): avc: denied { connect } for pid=7880 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.047429][ T29] audit: type=1400 audit(2000000023.850:2468): avc: denied { write } for pid=7880 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.180017][ T29] audit: type=1400 audit(2000000024.040:2469): avc: denied { create } for pid=7882 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.199768][ T29] audit: type=1400 audit(2000000024.060:2470): avc: denied { bind } for pid=7882 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.219238][ T29] audit: type=1400 audit(2000000024.080:2471): avc: denied { read } for pid=7882 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.250596][ T29] audit: type=1400 audit(2000000024.120:2472): avc: denied { write } for pid=7882 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.421179][ T29] audit: type=1400 audit(2000000024.290:2473): avc: denied { validate_trans } for pid=7893 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.461081][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 97.532434][ T7901] loop0: detected capacity change from 0 to 2048 [ 97.702118][ T4300] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 97.721024][ T4300] bond0 (unregistering): Released all slaves [ 97.729512][ T4300] bond1 (unregistering): Released all slaves [ 97.748269][ T4300] bond2 (unregistering): Released all slaves [ 97.779026][ T4300] bond3 (unregistering): (slave bond4): Releasing backup interface [ 97.794338][ T4300] bond3 (unregistering): Released all slaves [ 97.815571][ T4300] bond4 (unregistering): Released all slaves [ 97.867420][ T4300] hsr_slave_0: left promiscuous mode [ 97.874390][ T4300] hsr_slave_1: left promiscuous mode [ 97.885116][ T4300] batman_adv: batadv0: Removing interface: macvlan0 [ 98.169004][ T7905] chnl_net:caif_netlink_parms(): no params data found [ 98.215039][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.222233][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.239647][ T7905] bridge_slave_0: entered allmulticast mode [ 98.252497][ T7905] bridge_slave_0: entered promiscuous mode [ 98.267246][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.274376][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.281722][ T7905] bridge_slave_1: entered allmulticast mode [ 98.288417][ T7905] bridge_slave_1: entered promiscuous mode [ 98.548248][ T7905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.568140][ T7905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.592562][ T7905] team0: Port device team_slave_0 added [ 98.611409][ T7905] team0: Port device team_slave_1 added [ 98.652344][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.659489][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.685526][ T7905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.750662][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.757658][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.783688][ T7905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.966071][ T7905] hsr_slave_0: entered promiscuous mode [ 98.972772][ T7905] hsr_slave_1: entered promiscuous mode [ 98.978793][ T7905] debugfs: 'hsr0' already exists in 'hsr' [ 98.984573][ T7905] Cannot create hsr debugfs directory [ 99.217984][ T7953] loop7: detected capacity change from 0 to 1024 [ 99.232211][ T7905] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 99.249541][ T7953] EXT4-fs: Ignoring removed nobh option [ 99.255750][ T7953] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.266713][ T7953] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.269178][ T7905] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 99.292401][ T7953] JBD2: no valid journal superblock found [ 99.298175][ T7953] EXT4-fs (loop7): Could not load journal inode [ 99.324547][ T7905] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 99.345780][ T7905] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 99.357896][ T7958] netlink: 'syz.2.1569': attribute type 21 has an invalid length. [ 99.387096][ T7958] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1569'. [ 99.410472][ T7963] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 99.503520][ T7905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.536430][ T7905] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.574277][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.581399][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.622544][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.629653][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.809476][ T7905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.988123][ T7905] veth0_vlan: entered promiscuous mode [ 100.001645][ T8011] syzkaller0: entered allmulticast mode [ 100.008506][ T7905] veth1_vlan: entered promiscuous mode [ 100.020533][ T8011] syzkaller0 (unregistering): left allmulticast mode [ 100.060221][ T7905] veth0_macvtap: entered promiscuous mode [ 100.068432][ T7905] veth1_macvtap: entered promiscuous mode [ 100.080508][ T7905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.100620][ T7905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.117614][ T4356] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.129206][ T4356] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.155392][ T4356] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.164283][ T8013] loop7: detected capacity change from 0 to 1024 [ 100.172055][ T4356] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.193536][ T8013] EXT4-fs mount: 6 callbacks suppressed [ 100.193552][ T8013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.240326][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.428072][ T8032] ÿÿÿÿÿÿ: renamed from vlan1 [ 100.525460][ T8040] sd 0:0:1:0: device reset [ 100.641575][ T8046] netlink: 'syz.0.1598': attribute type 21 has an invalid length. [ 100.664982][ T8046] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1598'. [ 100.715389][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1601'. [ 100.925617][ T8070] loop7: detected capacity change from 0 to 512 [ 100.935681][ T8070] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 100.944689][ T8070] EXT4-fs (loop7): orphan cleanup on readonly fs [ 100.945422][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 100.960337][ T8077] loop0: detected capacity change from 0 to 1024 [ 100.962665][ T8070] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1607: Failed to acquire dquot type 1 [ 100.990867][ T8070] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1607: bg 0: block 40: padding at end of block bitmap is not set [ 101.011226][ T8070] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.012114][ T8077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.032915][ T8070] EXT4-fs (loop7): 1 truncate cleaned up [ 101.042539][ T8070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.090234][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.112808][ T8077] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1608: Allocating blocks 449-513 which overlap fs metadata [ 101.178197][ T8077] EXT4-fs (loop0): pa ffff888106b30c40: logic 48, phys. 177, len 21 [ 101.186406][ T8077] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 101.229041][ T8100] loop9: detected capacity change from 0 to 512 [ 101.237145][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.279025][ T8100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.300459][ T8100] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.318677][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8109 comm=syz.8.1622 [ 101.324819][ T8114] netlink: 'syz.2.1624': attribute type 12 has an invalid length. [ 101.420382][ T8100] loop9: detected capacity change from 512 to 64 [ 101.467062][ T7905] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Out of memory [ 101.492337][ T7905] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 101.688335][ T8136] __nla_validate_parse: 1 callbacks suppressed [ 101.688354][ T8136] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1633'. [ 101.724352][ T8139] net_ratelimit: 5 callbacks suppressed [ 101.724367][ T8139] netlink: zone id is out of range [ 101.737595][ T8139] netlink: zone id is out of range [ 101.743661][ T8139] netlink: zone id is out of range [ 101.748810][ T8139] netlink: zone id is out of range [ 101.771985][ T8139] netlink: zone id is out of range [ 101.793552][ T8139] netlink: zone id is out of range [ 101.806908][ T8139] netlink: zone id is out of range [ 101.813277][ T8139] netlink: zone id is out of range [ 101.818749][ T8139] netlink: zone id is out of range [ 101.826206][ T8139] netlink: zone id is out of range [ 101.975914][ T8152] netlink: 'syz.7.1639': attribute type 1 has an invalid length. [ 102.261945][ T8155] bond1: (slave bridge0): making interface the new active one [ 102.269704][ T8155] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 102.393236][ T8162] loop7: detected capacity change from 0 to 8192 [ 102.417710][ T8162] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.892162][ T7905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.905754][ T4339] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.007434][ T8238] netlink: 'syz.0.1649': attribute type 30 has an invalid length. [ 103.173201][ T4339] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.198531][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 103.198546][ T29] audit: type=1326 audit(2000000030.060:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.228219][ T29] audit: type=1326 audit(2000000030.060:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.280988][ T29] audit: type=1326 audit(2000000030.120:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.304560][ T29] audit: type=1326 audit(2000000030.120:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.328029][ T29] audit: type=1326 audit(2000000030.120:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.351507][ T29] audit: type=1326 audit(2000000030.120:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.374928][ T29] audit: type=1326 audit(2000000030.120:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.398513][ T29] audit: type=1326 audit(2000000030.120:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.422040][ T29] audit: type=1326 audit(2000000030.120:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.445488][ T29] audit: type=1326 audit(2000000030.120:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.0.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 103.471641][ T4339] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.586509][ T4339] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.684646][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 103.783870][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.791060][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.798948][ T8241] bridge_slave_0: entered allmulticast mode [ 103.806529][ T8241] bridge_slave_0: entered promiscuous mode [ 103.816093][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.823399][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.831743][ T8241] bridge_slave_1: entered allmulticast mode [ 103.838427][ T8241] bridge_slave_1: entered promiscuous mode [ 103.845270][ T4339] bridge_slave_1: left allmulticast mode [ 103.850990][ T4339] bridge_slave_1: left promiscuous mode [ 103.856706][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.866331][ T4339] bridge_slave_0: left allmulticast mode [ 103.872132][ T4339] bridge_slave_0: left promiscuous mode [ 103.877866][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.949497][ T8343] loop0: detected capacity change from 0 to 1024 [ 103.960063][ T8343] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 103.978448][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.989831][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.001370][ T4339] bond0 (unregistering): Released all slaves [ 104.008514][ T8343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.046365][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.061765][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.074701][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.090306][ T8354] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1667'. [ 104.102149][ T8354] hsr_slave_0: left promiscuous mode [ 104.108077][ T8354] hsr_slave_1: left promiscuous mode [ 104.112231][ T8357] loop0: detected capacity change from 0 to 512 [ 104.119931][ T8357] EXT4-fs: Ignoring removed nobh option [ 104.126177][ T8357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.136383][ T8357] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1668: iget: bad i_size value: 38620345925642 [ 104.149478][ T4339] hsr_slave_0: left promiscuous mode [ 104.149548][ T8357] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1668: couldn't read orphan inode 15 (err -117) [ 104.166748][ T4339] hsr_slave_1: left promiscuous mode [ 104.167566][ T8357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.172429][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.187650][ T8357] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.191997][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.208769][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.216293][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.228868][ T4339] veth1_macvtap: left promiscuous mode [ 104.236500][ T4339] veth0_macvtap: left promiscuous mode [ 104.250188][ T4339] veth1_vlan: left promiscuous mode [ 104.255542][ T4339] veth0_vlan: left promiscuous mode [ 104.267003][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1670'. [ 104.338539][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 104.348847][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 104.383931][ T8241] team0: Port device team_slave_0 added [ 104.391434][ T8241] team0: Port device team_slave_1 added [ 104.414366][ T8362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.432583][ T8367] macvlan2: entered promiscuous mode [ 104.437924][ T8367] macvlan2: entered allmulticast mode [ 104.444317][ T8367] bond2: entered promiscuous mode [ 104.449611][ T8367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.457367][ T8367] bond2: left promiscuous mode [ 104.482955][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.489931][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.515957][ T8241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.526988][ T8371] tipc: Enabling of bearer rejected, failed to enable media [ 104.537120][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.544155][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.570186][ T8241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.619000][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1678'. [ 104.646094][ T8241] hsr_slave_0: entered promiscuous mode [ 104.653929][ T8241] hsr_slave_1: entered promiscuous mode [ 104.661472][ T8241] debugfs: 'hsr0' already exists in 'hsr' [ 104.667268][ T8241] Cannot create hsr debugfs directory [ 104.739710][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1686'. [ 104.767438][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1686'. [ 104.803164][ T8400] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1686'. [ 104.916077][ T8424] loop7: detected capacity change from 0 to 1024 [ 104.942589][ T8424] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 104.969157][ T8424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.097625][ T8241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.113719][ T8241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.133261][ T8241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.150112][ T8241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.239341][ T8241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.260477][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.262500][ T8241] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.297304][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.304448][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.337873][ T8462] loop7: detected capacity change from 0 to 1024 [ 105.345230][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.352343][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.370914][ T8462] EXT4-fs: Ignoring removed nobh option [ 105.386802][ T8462] EXT4-fs: Ignoring removed bh option [ 105.426960][ T8462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.500338][ T8462] loop7: detected capacity change from 1024 to 64 [ 105.554072][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.566807][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.583541][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.607070][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.639184][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 105.661106][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 105.670502][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.691400][ T8487] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1699'. [ 105.705426][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.769272][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.786792][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.792864][ T8241] veth0_vlan: entered promiscuous mode [ 105.812522][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.842373][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.876826][ T6196] EXT4-fs warning (device loop7): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.890985][ T8241] veth1_vlan: entered promiscuous mode [ 105.912677][ T8512] vlan2: entered allmulticast mode [ 105.917815][ T8512] dummy0: entered allmulticast mode [ 105.960363][ T8241] veth0_macvtap: entered promiscuous mode [ 105.981666][ T8241] veth1_macvtap: entered promiscuous mode [ 106.021832][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.022866][ T6196] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.042569][ T8467] bio_check_eod: 70 callbacks suppressed [ 106.042581][ T8467] kmmpd-loop7: attempt to access beyond end of device [ 106.042581][ T8467] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 106.046744][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.048263][ T8467] buffer_io_error: 14 callbacks suppressed [ 106.048318][ T8467] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 106.133239][ T4345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.217763][ T4345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.232870][ T4345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.273947][ T8541] netlink: 'syz.8.1711': attribute type 13 has an invalid length. [ 106.282038][ T4345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.340671][ T8541] gretap0: refused to change device tx_queue_len [ 106.770031][ T8599] bridge: RTM_NEWNEIGH with invalid ether address [ 106.831156][ T8543] chnl_net:caif_netlink_parms(): no params data found [ 106.877121][ T8625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8625 comm=syz.0.1723 [ 106.991479][ T8645] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 107.002791][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.009893][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.045307][ T8543] bridge_slave_0: entered allmulticast mode [ 107.054983][ T8543] bridge_slave_0: entered promiscuous mode [ 107.068896][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.076131][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.083562][ T8659] loop8: detected capacity change from 0 to 512 [ 107.088016][ T8543] bridge_slave_1: entered allmulticast mode [ 107.101286][ T8543] bridge_slave_1: entered promiscuous mode [ 107.107769][ T8659] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1731: iget: bad extended attribute block 1 [ 107.127410][ T8659] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1731: couldn't read orphan inode 15 (err -117) [ 107.140722][ T8659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.159186][ T8659] program syz.8.1731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.176757][ T8543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.201928][ T8543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.214352][ T6565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.249928][ T8543] team0: Port device team_slave_0 added [ 107.277214][ T8543] team0: Port device team_slave_1 added [ 107.295455][ T8672] loop8: detected capacity change from 0 to 1024 [ 107.335133][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.342172][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.368277][ T8543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.409603][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.410808][ T8672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.416603][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.454559][ T8543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.519648][ T8672] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1736: Allocating blocks 449-513 which overlap fs metadata [ 107.540024][ T8543] hsr_slave_0: entered promiscuous mode [ 107.567932][ T8543] hsr_slave_1: entered promiscuous mode [ 107.574483][ T8543] debugfs: 'hsr0' already exists in 'hsr' [ 107.580274][ T8543] Cannot create hsr debugfs directory [ 107.585501][ T8670] EXT4-fs (loop8): pa ffff8881057374d0: logic 48, phys. 177, len 21 [ 107.593835][ T8670] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 107.594669][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 107.624931][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 107.657327][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1745'. [ 107.670701][ T6565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.743946][ T8713] SELinux: failed to load policy [ 108.005032][ T8752] siw: device registration error -23 [ 108.043060][ T8543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.085538][ T8543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.102786][ T8543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.123252][ T8543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.345671][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.378620][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 108.378638][ T29] audit: type=1326 audit(2000000035.240:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.414457][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.426896][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.434001][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.450157][ T29] audit: type=1326 audit(2000000035.280:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.473846][ T29] audit: type=1326 audit(2000000035.280:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.497524][ T29] audit: type=1326 audit(2000000035.290:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.521102][ T29] audit: type=1326 audit(2000000035.290:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.544582][ T29] audit: type=1326 audit(2000000035.290:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.568194][ T29] audit: type=1326 audit(2000000035.290:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.592104][ T29] audit: type=1326 audit(2000000035.290:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.615763][ T29] audit: type=1326 audit(2000000035.290:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.639341][ T29] audit: type=1326 audit(2000000035.290:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496aa0ebe9 code=0x7ffc0000 [ 108.673954][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.681119][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.705610][ T8543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.748901][ T8802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8802 comm=syz.3.1774 [ 108.823135][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.943593][ T8828] bridge: RTM_NEWNEIGH with invalid ether address [ 108.975054][ T8834] serio: Serial port ptm0 [ 109.023935][ T8543] veth0_vlan: entered promiscuous mode [ 109.042322][ T8543] veth1_vlan: entered promiscuous mode [ 109.067093][ T8543] veth0_macvtap: entered promiscuous mode [ 109.074915][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 109.080316][ T8543] veth1_macvtap: entered promiscuous mode [ 109.121807][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1790'. [ 109.143734][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 109.158792][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.176949][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.187284][ T8847] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 109.195119][ T8847] netlink: 'syz.2.1789': attribute type 2 has an invalid length. [ 109.213254][ T4339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.237916][ T4339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.248154][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 109.276274][ T4339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.299618][ T4339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.679792][ T8908] loop3: detected capacity change from 0 to 1024 [ 109.696830][ T8908] EXT4-fs: Ignoring removed orlov option [ 109.709951][ T8908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.109604][ T8932] veth0_vlan: entered allmulticast mode [ 110.150483][ T8932] ªªªªªª: renamed from vlan0 [ 110.209944][ T8938] bridge: RTM_NEWNEIGH with invalid ether address [ 110.245144][ T8241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.324965][ T8954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.361375][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 110.372303][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 110.423526][ T8968] 9pnet: p9_errstr2errno: server reported unknown error [ 110.504033][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'. [ 110.526206][ T8984] loop3: detected capacity change from 0 to 1024 [ 110.564974][ T8984] EXT4-fs: Ignoring removed orlov option [ 110.574458][ T8984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.605882][ T8991] netlink: 'syz.8.1849': attribute type 1 has an invalid length. [ 110.630655][ T8991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.648667][ T8991] bond3 (unregistering): Released all slaves [ 110.802380][ T9007] loop8: detected capacity change from 0 to 128 [ 110.982747][ T8241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.026750][ T9030] loop1: detected capacity change from 0 to 128 [ 111.056875][ T9033] tipc: Started in network mode [ 111.061911][ T9033] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 111.069100][ T9033] tipc: Enabled bearer , priority 0 [ 111.436866][ T9062] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.475556][ T9065] syzkaller0: entered allmulticast mode [ 111.504161][ T9065] syzkaller0: entered promiscuous mode [ 111.521894][ T9065] syzkaller0 (unregistering): left allmulticast mode [ 111.528714][ T9065] syzkaller0 (unregistering): left promiscuous mode [ 111.893994][ T9104] loop0: detected capacity change from 0 to 512 [ 111.913393][ T9104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.927460][ T9104] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.991866][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.002356][ T9115] capability: warning: `syz.1.1903' uses 32-bit capabilities (legacy support in use) [ 112.011085][ T9119] 9pnet: Could not find request transport: 0xffffffffffffffff [ 112.060125][ T36] tipc: Node number set to 11578026 [ 112.146073][ T9141] $Hÿ: renamed from bond0 [ 112.177865][ T9141] $Hÿ: entered promiscuous mode [ 112.182998][ T9141] bond_slave_0: entered promiscuous mode [ 112.188965][ T9141] bond_slave_1: entered promiscuous mode [ 112.203295][ T9141] dummy0: entered promiscuous mode [ 112.432926][ T9171] loop1: detected capacity change from 0 to 512 [ 112.440376][ T9171] msdos: Bad value for 'uid' [ 112.445011][ T9171] msdos: Bad value for 'uid' [ 113.462231][ T9205] veth0_to_team: entered promiscuous mode [ 113.488708][ T9198] __nla_validate_parse: 2 callbacks suppressed [ 113.488727][ T9198] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1939'. [ 113.534915][ T9212] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1944'. [ 113.605988][ T9222] IPVS: stopping master sync thread 9223 ... [ 113.612072][ T9223] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 113.699315][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 113.699332][ T29] audit: type=1400 audit(2000000040.560:3149): avc: denied { read } for pid=9230 comm="syz.3.1952" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 113.731523][ T29] audit: type=1400 audit(2000000040.560:3150): avc: denied { open } for pid=9230 comm="syz.3.1952" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 113.756213][ T29] audit: type=1400 audit(2000000040.580:3151): avc: denied { ioctl } for pid=9230 comm="syz.3.1952" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 113.896488][ T9240] pim6reg1: entered promiscuous mode [ 113.901960][ T9240] pim6reg1: entered allmulticast mode [ 114.014017][ T9245] serio: Serial port ptm0 [ 114.197808][ T29] audit: type=1400 audit(2000000041.060:3152): avc: denied { create } for pid=9253 comm="syz.1.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.423105][ T9258] loop8: detected capacity change from 0 to 1024 [ 114.451348][ T29] audit: type=1400 audit(2000000041.060:3153): avc: denied { write } for pid=9251 comm="syz.8.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.470776][ T29] audit: type=1400 audit(2000000041.070:3154): avc: denied { setopt } for pid=9253 comm="syz.1.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.491107][ T29] audit: type=1326 audit(2000000041.070:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff104705ba7 code=0x7ffc0000 [ 114.514522][ T29] audit: type=1326 audit(2000000041.070:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1046aade9 code=0x7ffc0000 [ 114.537984][ T29] audit: type=1326 audit(2000000041.070:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff104705ba7 code=0x7ffc0000 [ 114.561329][ T29] audit: type=1326 audit(2000000041.070:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1046aade9 code=0x7ffc0000 [ 114.666916][ T9258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.732585][ T9258] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1963: Allocating blocks 465-513 which overlap fs metadata [ 114.769263][ T9258] EXT4-fs (loop8): pa ffff888106b30c40: logic 256, phys. 369, len 9 [ 114.777347][ T9258] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 114.788576][ T9271] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1968'. [ 114.798413][ T9258] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 114.822945][ T9271] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 114.862060][ T9271] bond0 (unregistering): Released all slaves [ 114.880756][ T9226] syz.2.1950 (9226) used greatest stack depth: 7336 bytes left [ 114.894509][ T6565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.991056][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1975'. [ 115.029850][ T9284] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 115.071306][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 115.088450][ T9291] ip6gre1: entered allmulticast mode [ 115.222245][ T9302] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1983'. [ 115.302209][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'. [ 115.356232][ T9334] netlink: 'syz.2.2008': attribute type 10 has an invalid length. [ 115.364299][ T9334] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2008'. [ 115.497901][ T9341] serio: Serial port ptm0 [ 115.798948][ T9372] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2015'. [ 115.811544][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2014'. [ 115.820598][ T9372] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 115.833659][ T9372] 0ªî{X¹¦: entered allmulticast mode [ 115.839645][ T9372] net_ratelimit: 2 callbacks suppressed [ 115.839660][ T9372] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 116.101172][ T9392] netlink: 'syz.8.2033': attribute type 10 has an invalid length. [ 116.178288][ T9396] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.272344][ T9396] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.392928][ T9396] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.482158][ T9396] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.536578][ T4359] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.547958][ T4359] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.563858][ T4359] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.094537][ T9439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.111153][ T9439] macvlan2: entered promiscuous mode [ 117.116547][ T9439] macvlan2: entered allmulticast mode [ 117.123203][ T9439] bond1: entered promiscuous mode [ 117.128471][ T9439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.137209][ T9439] bond1: left promiscuous mode [ 117.531306][ T9463] loop3: detected capacity change from 0 to 1024 [ 117.554050][ T9463] EXT4-fs: Ignoring removed nobh option [ 117.561568][ T9463] EXT4-fs: Ignoring removed bh option [ 117.588549][ T9463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.660528][ T9463] loop3: detected capacity change from 1024 to 64 [ 117.716254][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.751363][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.765390][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.779627][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.794801][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.809193][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.822847][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.836454][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.850274][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.863902][ T8241] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 118.002622][ T9401] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.028530][ T9488] serio: Serial port ptm0 [ 118.052018][ T8241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.067218][ T9467] kmmpd-loop3: attempt to access beyond end of device [ 118.067218][ T9467] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 118.080796][ T9467] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 118.090451][ T4297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.104490][ T9401] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.146596][ T4297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.181700][ T9401] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.223814][ T4297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.251042][ T4359] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.263711][ T4359] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.279804][ T4359] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.293811][ T4297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.310111][ T9503] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 118.317965][ T9503] 0ªî{X¹¦: entered allmulticast mode [ 118.323772][ T9503] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.339690][ T4359] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.451390][ T4297] bridge_slave_1: left allmulticast mode [ 118.457089][ T4297] bridge_slave_1: left promiscuous mode [ 118.462936][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.472889][ T4297] bridge_slave_0: left allmulticast mode [ 118.478661][ T4297] bridge_slave_0: left promiscuous mode [ 118.484466][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.585383][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.606875][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.619533][ T4297] bond0 (unregistering): Released all slaves [ 118.632322][ T9516] bridge_slave_1: left allmulticast mode [ 118.638011][ T9516] bridge_slave_1: left promiscuous mode [ 118.643808][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.652570][ T9516] bridge_slave_0: left allmulticast mode [ 118.658297][ T9516] bridge_slave_0: left promiscuous mode [ 118.664120][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.702159][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 118.702178][ T29] audit: type=1400 audit(2000000045.570:3294): avc: denied { create } for pid=9524 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.731297][ T29] audit: type=1400 audit(2000000045.590:3295): avc: denied { write } for pid=9524 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.773362][ T4297] tipc: Disabling bearer [ 118.778924][ T4297] tipc: Left network mode [ 118.786933][ T4297] hsr_slave_0: left promiscuous mode [ 118.792887][ T4297] hsr_slave_1: left promiscuous mode [ 118.800784][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.808216][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.827795][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.835271][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.842979][ T9530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9530 comm=syz.0.2075 [ 118.860303][ T4297] veth1_macvtap: left promiscuous mode [ 118.871276][ T4297] veth0_macvtap: left promiscuous mode [ 118.882200][ T4297] veth1_vlan: left promiscuous mode [ 118.902508][ T4297] veth0_vlan: left promiscuous mode [ 118.914643][ T29] audit: type=1326 audit(2000000045.780:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 118.938130][ T29] audit: type=1326 audit(2000000045.780:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 118.971893][ T29] audit: type=1326 audit(2000000045.780:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 118.995446][ T29] audit: type=1326 audit(2000000045.780:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 119.018891][ T29] audit: type=1326 audit(2000000045.780:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 119.042376][ T29] audit: type=1326 audit(2000000045.830:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 119.065871][ T29] audit: type=1326 audit(2000000045.830:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 119.089291][ T29] audit: type=1326 audit(2000000045.830:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9534 comm="syz.8.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fca31a4ebe9 code=0x7ffc0000 [ 119.165745][ T9543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.174028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.211689][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 119.223258][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 119.276952][ T9537] bridge: RTM_NEWNEIGH with invalid ether address [ 119.479016][ T9498] chnl_net:caif_netlink_parms(): no params data found [ 119.538316][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.545448][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.554067][ T9498] bridge_slave_0: entered allmulticast mode [ 119.560783][ T9498] bridge_slave_0: entered promiscuous mode [ 119.572268][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.579481][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.587798][ T9498] bridge_slave_1: entered allmulticast mode [ 119.595972][ T9498] bridge_slave_1: entered promiscuous mode [ 119.639586][ T9498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.656300][ T9498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.686894][ T9577] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 119.728903][ T9498] team0: Port device team_slave_0 added [ 119.753976][ T9580] loop1: detected capacity change from 0 to 512 [ 119.772517][ T9580] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2093: iget: bad extended attribute block 1 [ 119.785256][ T9580] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2093: couldn't read orphan inode 15 (err -117) [ 119.797878][ T9580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.811306][ T9498] team0: Port device team_slave_1 added [ 119.815780][ T9577] program syz.1.2093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.850869][ T8543] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.889320][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.896349][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.922310][ T9498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.933229][ T9589] bridge: RTM_NEWNEIGH with invalid ether address [ 119.940151][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.947118][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.973134][ T9498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.016095][ T9591] loop1: detected capacity change from 0 to 2048 [ 120.061119][ T9591] Alternate GPT is invalid, using primary GPT. [ 120.067472][ T9591] loop1: p1 p2 p3 [ 120.074879][ T9498] hsr_slave_0: entered promiscuous mode [ 120.091853][ T9498] hsr_slave_1: entered promiscuous mode [ 120.097764][ T9498] debugfs: 'hsr0' already exists in 'hsr' [ 120.103546][ T9498] Cannot create hsr debugfs directory [ 120.106476][ T9593] netlink: 'syz.8.2098': attribute type 13 has an invalid length. [ 120.175659][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.182966][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.390662][ T51] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.460363][ T51] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.484272][ T51] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.518264][ T51] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.546749][ T9613] __nla_validate_parse: 6 callbacks suppressed [ 120.546769][ T9613] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2105'. [ 120.850673][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'. [ 120.936835][ T9498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.946073][ T9498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.955168][ T9498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.966556][ T9498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.013055][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.025576][ T9498] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.035331][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.042533][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.053927][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.060998][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.137050][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.207373][ T9498] veth0_vlan: entered promiscuous mode [ 121.215448][ T9498] veth1_vlan: entered promiscuous mode [ 121.230527][ T9498] veth0_macvtap: entered promiscuous mode [ 121.237823][ T9498] veth1_macvtap: entered promiscuous mode [ 121.248709][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.259597][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.270493][ T4311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.279671][ T4311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.291936][ T4311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.303118][ T4311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.367189][ T9647] bridge: RTM_NEWNEIGH with invalid ether address [ 121.480405][ T9661] IPv4: Oversized IP packet from 127.202.26.0 [ 121.514284][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 121.526992][ T9665] bridge_slave_1: left allmulticast mode [ 121.532892][ T9665] bridge_slave_1: left promiscuous mode [ 121.538859][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.592178][ T9665] bridge_slave_0: left allmulticast mode [ 121.597884][ T9665] bridge_slave_0: left promiscuous mode [ 121.603703][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.681959][ T9674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9674 comm=syz.2.2123 [ 121.812902][ T9683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9683 comm=syz.2.2127 [ 122.371069][ T9694] veth0_to_team: entered promiscuous mode [ 122.690383][ T9723] team0: No ports can be present during mode change [ 122.871841][ T9732] netlink: zone id is out of range [ 122.877058][ T9732] netlink: zone id is out of range [ 122.882548][ T9732] netlink: zone id is out of range [ 122.887684][ T9732] netlink: zone id is out of range [ 122.893345][ T9732] netlink: zone id is out of range [ 122.898473][ T9732] netlink: zone id is out of range [ 122.903878][ T9732] netlink: zone id is out of range [ 122.909001][ T9732] netlink: zone id is out of range [ 122.914369][ T9732] netlink: zone id is out of range [ 123.048355][ T9739] ================================================================== [ 123.056474][ T9739] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 123.063455][ T9739] [ 123.065781][ T9739] read-write to 0xffff88811b1932ac of 4 bytes by task 9738 on cpu 1: [ 123.073841][ T9739] fifo_open+0x86/0x5d0 [ 123.078003][ T9739] do_dentry_open+0x649/0xa20 [ 123.082698][ T9739] vfs_open+0x37/0x1e0 [ 123.086779][ T9739] path_openat+0x1c5e/0x2170 [ 123.091371][ T9739] do_filp_open+0x109/0x230 [ 123.095901][ T9739] do_sys_openat2+0xa6/0x110 [ 123.100505][ T9739] __x64_sys_openat+0xf2/0x120 [ 123.105296][ T9739] x64_sys_call+0x2e9c/0x2ff0 [ 123.109978][ T9739] do_syscall_64+0xd2/0x200 [ 123.114496][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.120419][ T9739] [ 123.122751][ T9739] read to 0xffff88811b1932ac of 4 bytes by task 9739 on cpu 0: [ 123.130353][ T9739] wait_for_partner+0xb5/0x1c0 [ 123.135132][ T9739] fifo_open+0x462/0x5d0 [ 123.139385][ T9739] do_dentry_open+0x649/0xa20 [ 123.144086][ T9739] vfs_open+0x37/0x1e0 [ 123.148181][ T9739] path_openat+0x1c5e/0x2170 [ 123.152784][ T9739] do_filp_open+0x109/0x230 [ 123.157286][ T9739] do_sys_openat2+0xa6/0x110 [ 123.161896][ T9739] __x64_sys_open+0xe6/0x110 [ 123.166511][ T9739] x64_sys_call+0x1457/0x2ff0 [ 123.171198][ T9739] do_syscall_64+0xd2/0x200 [ 123.175717][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.181627][ T9739] [ 123.183953][ T9739] value changed: 0x00000001 -> 0x00000002 [ 123.189714][ T9739] [ 123.192059][ T9739] Reported by Kernel Concurrency Sanitizer on: [ 123.198238][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.1.2151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.208060][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.218139][ T9739] ==================================================================