last executing test programs: 56.801816687s ago: executing program 4 (id=92): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r3, 0x2, 0x6}, &(0x7f0000000740)=0xc) 56.684320369s ago: executing program 4 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.550799122s ago: executing program 4 (id=103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 56.497874053s ago: executing program 4 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0) 56.430463094s ago: executing program 4 (id=110): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x514, &(0x7f0000000300)="$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") 56.270061277s ago: executing program 4 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 56.240660948s ago: executing program 32 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 50.659694085s ago: executing program 5 (id=219): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) 47.610755544s ago: executing program 5 (id=307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r1, 0x0, 0xbf5, 0x2000402) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 47.250374701s ago: executing program 5 (id=315): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.990868485s ago: executing program 5 (id=317): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 46.909065407s ago: executing program 5 (id=321): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x26004808) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 46.571436574s ago: executing program 5 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 46.539870944s ago: executing program 33 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 22.078266985s ago: executing program 6 (id=1131): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 22.044264356s ago: executing program 6 (id=1133): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1, 0x0, 0x0, 0x8044044}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x100}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={r3, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000040)=0x90) 21.180092592s ago: executing program 6 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000300)=r2) 21.115583394s ago: executing program 6 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 21.095054034s ago: executing program 6 (id=1170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20000804) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10}}]}}]}, 0x4c}}, 0x20004804) 20.968828716s ago: executing program 6 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 20.968232316s ago: executing program 34 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 20.473404616s ago: executing program 2 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) bind$phonet(r2, 0x0, 0x0) 20.437664897s ago: executing program 2 (id=1196): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 20.341148059s ago: executing program 2 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r3, &(0x7f0000000400), &(0x7f00000004c0)=""/65}, 0x20) 20.291827899s ago: executing program 2 (id=1200): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183442, 0x118) pwrite64(r1, &(0x7f0000000540)='2', 0xfdef, 0xe7c) 19.697255391s ago: executing program 2 (id=1217): prctl$PR_SET_NAME(0xf, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r1, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) eventfd(0x0) 19.492471005s ago: executing program 2 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 19.469797125s ago: executing program 35 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 16.556431121s ago: executing program 3 (id=1290): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 16.497999862s ago: executing program 3 (id=1292): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYRES32=r2], 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.423237954s ago: executing program 3 (id=1303): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 16.10182582s ago: executing program 3 (id=1299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183442, 0x118) pwrite64(r1, &(0x7f0000000540)='2', 0xfdef, 0xe7c) 15.476948062s ago: executing program 3 (id=1322): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 15.160855868s ago: executing program 3 (id=1333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 15.160267588s ago: executing program 36 (id=1333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.859813925s ago: executing program 9 (id=1734): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 1.410217673s ago: executing program 1 (id=1774): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 1.379410954s ago: executing program 8 (id=1775): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 963.573801ms ago: executing program 9 (id=1778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) 923.212172ms ago: executing program 7 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 868.707673ms ago: executing program 7 (id=1783): r0 = socket$inet(0x2, 0x3, 0xd) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 798.742155ms ago: executing program 7 (id=1785): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x40000504) 752.385896ms ago: executing program 7 (id=1786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 706.862506ms ago: executing program 7 (id=1787): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 667.159187ms ago: executing program 7 (id=1788): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 628.802938ms ago: executing program 9 (id=1789): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x4, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, 0x0, 0x0) 560.832999ms ago: executing program 1 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 494.9962ms ago: executing program 9 (id=1792): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x104, 0x1) getdents64(r2, 0x0, 0x0) 460.620641ms ago: executing program 9 (id=1793): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) lseek(r0, 0x5, 0x4) 460.207211ms ago: executing program 0 (id=1794): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close(r2) 438.762071ms ago: executing program 8 (id=1795): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 438.336821ms ago: executing program 0 (id=1796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000ac0), 0x8, r2}, 0x38) 376.362522ms ago: executing program 1 (id=1797): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 337.395054ms ago: executing program 0 (id=1798): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f00000009c0)=""/66, 0x42}], 0x2}, 0x81}], 0x1, 0x8040, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 332.250334ms ago: executing program 1 (id=1799): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 300.663394ms ago: executing program 1 (id=1800): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 223.687716ms ago: executing program 8 (id=1801): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000600)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@nobarrier}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 208.167126ms ago: executing program 0 (id=1802): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) 164.192757ms ago: executing program 1 (id=1803): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 123.656438ms ago: executing program 0 (id=1804): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 82.749568ms ago: executing program 0 (id=1805): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 82.576978ms ago: executing program 8 (id=1806): r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) 43.036229ms ago: executing program 8 (id=1807): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=@newtfilter={0x3c, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x1}}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.00613ms ago: executing program 8 (id=1808): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 0s ago: executing program 9 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.712091][ T4101] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.199: Allocating blocks 449-513 which overlap fs metadata [ 42.732274][ T4100] EXT4-fs (loop3): pa ffff888106e76620: logic 48, phys. 177, len 21 [ 42.740407][ T4100] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 42.771203][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.831392][ T4108] loop3: detected capacity change from 0 to 164 [ 42.846478][ T4108] Unable to read rock-ridge attributes [ 42.861899][ T4108] Unable to read rock-ridge attributes [ 42.867834][ T4108] syz.3.201: attempt to access beyond end of device [ 42.867834][ T4108] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 42.883225][ T4108] syz.3.201: attempt to access beyond end of device [ 42.883225][ T4108] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.942193][ C1] hrtimer: interrupt took 30766 ns [ 43.318656][ T4129] netlink: 'syz.2.209': attribute type 29 has an invalid length. [ 43.329119][ T4129] netlink: 'syz.2.209': attribute type 29 has an invalid length. [ 43.341124][ T4129] netlink: 'syz.2.209': attribute type 29 has an invalid length. [ 43.376324][ T4129] netlink: 'syz.2.209': attribute type 29 has an invalid length. [ 43.450381][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 43.450399][ T29] audit: type=1400 audit(1759461361.640:468): avc: denied { read } for pid=4136 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.522936][ T29] audit: type=1400 audit(1759461361.700:469): avc: denied { write } for pid=4136 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.682334][ T29] audit: type=1400 audit(1759461361.870:470): avc: denied { read } for pid=4144 comm="syz.5.219" path="socket:[7234]" dev="sockfs" ino=7234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.803341][ T4158] loop3: detected capacity change from 0 to 1024 [ 43.833460][ T4158] EXT4-fs: Ignoring removed orlov option [ 43.851401][ T4158] EXT4-fs: Ignoring removed nobh option [ 43.857105][ T4158] EXT4-fs: Ignoring removed bh option [ 43.916792][ T4158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.109441][ T29] audit: type=1400 audit(1759461362.290:471): avc: denied { create } for pid=4167 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.145511][ T29] audit: type=1400 audit(1759461362.320:472): avc: denied { setopt } for pid=4167 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.165028][ T29] audit: type=1400 audit(1759461362.320:473): avc: denied { bind } for pid=4167 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.184295][ T29] audit: type=1400 audit(1759461362.320:474): avc: denied { name_bind } for pid=4167 comm="syz.1.227" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.205926][ T29] audit: type=1400 audit(1759461362.320:475): avc: denied { node_bind } for pid=4167 comm="syz.1.227" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 44.227567][ T29] audit: type=1400 audit(1759461362.320:476): avc: denied { write } for pid=4167 comm="syz.1.227" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.248807][ T29] audit: type=1400 audit(1759461362.320:477): avc: denied { connect } for pid=4167 comm="syz.1.227" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.276004][ T4158] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.224: Allocating blocks 481-513 which overlap fs metadata [ 44.339690][ T4158] EXT4-fs (loop3): pa ffff888106e765b0: logic 352, phys. 465, len 3 [ 44.347796][ T4158] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 44.442635][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.498073][ T4189] loop9: detected capacity change from 0 to 7 [ 44.505292][ T4189] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.542597][ T4189] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.550734][ T4189] loop9: unable to read partition table [ 44.595235][ T4196] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.607625][ T4198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.241'. [ 44.617292][ T4198] unsupported nlmsg_type 40 [ 44.617831][ T4189] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.617831][ T4189] ) failed (rc=-5) [ 44.627978][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.652342][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.660799][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.679483][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.687739][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.695817][ T4196] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.716137][ T4196] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.809452][ T4206] netlink: 96 bytes leftover after parsing attributes in process `syz.2.246'. [ 45.012906][ T4225] netem: change failed [ 45.022837][ T4227] loop2: detected capacity change from 0 to 512 [ 45.038869][ T4227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.176175][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.198590][ T4241] loop2: detected capacity change from 0 to 128 [ 45.219786][ T4241] EXT4-fs: test_dummy_encryption option not supported [ 45.418930][ T4261] loop2: detected capacity change from 0 to 128 [ 45.431207][ T4261] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.444887][ T4261] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.474769][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.492452][ T4264] loop2: detected capacity change from 0 to 128 [ 45.505716][ T4264] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.523763][ T4264] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.562595][ T4264] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.271: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 45.595841][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.876875][ T4293] loop1: detected capacity change from 0 to 512 [ 45.893638][ T4293] EXT4-fs: Ignoring removed bh option [ 45.912292][ T4293] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.924639][ T4293] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.940453][ T4293] EXT4-fs (loop1): 1 truncate cleaned up [ 45.946713][ T4293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.976784][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.667135][ T4351] loop5: detected capacity change from 0 to 1024 [ 46.679947][ T4351] EXT4-fs: Ignoring removed nobh option [ 46.685703][ T4351] EXT4-fs: inline encryption not supported [ 46.757263][ T4351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.785324][ T4355] loop2: detected capacity change from 0 to 1024 [ 46.809932][ T4355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.820814][ T4351] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.307: Allocating blocks 497-513 which overlap fs metadata [ 46.845956][ T4355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.870183][ T4351] EXT4-fs (loop5): pa ffff888106daf070: logic 16, phys. 129, len 24 [ 46.878239][ T4351] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 46.990646][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.031003][ T3814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.075803][ T4376] bridge0: entered promiscuous mode [ 47.101487][ T4376] macsec1: entered promiscuous mode [ 47.121276][ T4376] bridge0: port 3(macsec1) entered blocking state [ 47.127819][ T4376] bridge0: port 3(macsec1) entered disabled state [ 47.143049][ T4376] macsec1: entered allmulticast mode [ 47.148460][ T4376] bridge0: entered allmulticast mode [ 47.171805][ T4376] macsec1: left allmulticast mode [ 47.177083][ T4376] bridge0: left allmulticast mode [ 47.184261][ T4376] bridge0: left promiscuous mode [ 47.286112][ T4392] loop5: detected capacity change from 0 to 256 [ 47.338097][ T4396] ipvlan2: entered promiscuous mode [ 47.367738][ T4396] bridge0: port 3(ipvlan2) entered blocking state [ 47.374327][ T4396] bridge0: port 3(ipvlan2) entered disabled state [ 47.391844][ T4396] ipvlan2: entered allmulticast mode [ 47.397236][ T4396] bridge0: entered allmulticast mode [ 47.415297][ T4396] ipvlan2: left allmulticast mode [ 47.420564][ T4396] bridge0: left allmulticast mode [ 47.596882][ T4403] team_slave_0: entered promiscuous mode [ 47.602892][ T4403] team_slave_0: left promiscuous mode [ 47.669043][ T3643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.741731][ T3643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.793351][ T3643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.854011][ T3643] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.952359][ T3643] bridge_slave_1: left allmulticast mode [ 47.958171][ T3643] bridge_slave_1: left promiscuous mode [ 47.963971][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.989483][ T3643] bridge_slave_0: left allmulticast mode [ 47.995204][ T3643] bridge_slave_0: left promiscuous mode [ 48.000958][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.104014][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.114313][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.125385][ T3643] bond0 (unregistering): Released all slaves [ 48.191070][ T3643] hsr_slave_0: left promiscuous mode [ 48.196795][ T3643] hsr_slave_1: left promiscuous mode [ 48.202841][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.210345][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.222090][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.229786][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.244054][ T3643] veth1_macvtap: left promiscuous mode [ 48.259300][ T3643] veth0_macvtap: left promiscuous mode [ 48.265694][ T3643] veth1_vlan: left promiscuous mode [ 48.273160][ T3643] veth0_vlan: left promiscuous mode [ 48.412403][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 48.430360][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 48.565956][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 48.565974][ T29] audit: type=1326 audit(1759461366.750:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.625450][ T29] audit: type=1326 audit(1759461366.780:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.648758][ T29] audit: type=1326 audit(1759461366.780:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.672262][ T29] audit: type=1326 audit(1759461366.780:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.695523][ T29] audit: type=1326 audit(1759461366.780:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.718720][ T29] audit: type=1326 audit(1759461366.780:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.742150][ T29] audit: type=1326 audit(1759461366.780:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.765613][ T29] audit: type=1326 audit(1759461366.780:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.788919][ T29] audit: type=1326 audit(1759461366.780:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.812196][ T29] audit: type=1326 audit(1759461366.780:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d81a4eec9 code=0x7ffc0000 [ 48.915445][ T4476] __nla_validate_parse: 4 callbacks suppressed [ 48.915466][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 48.930645][ T4476] netlink: 'syz.2.353': attribute type 12 has an invalid length. [ 48.941787][ T4421] chnl_net:caif_netlink_parms(): no params data found [ 49.006194][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 49.015165][ T4476] netlink: 'syz.2.353': attribute type 12 has an invalid length. [ 49.023180][ T3647] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.032059][ T3647] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.062476][ T3647] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.075577][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.082885][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.131075][ T4421] bridge_slave_0: entered allmulticast mode [ 49.147977][ T4421] bridge_slave_0: entered promiscuous mode [ 49.173688][ T3647] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.188222][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.195372][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.207625][ T4421] bridge_slave_1: entered allmulticast mode [ 49.214370][ T4421] bridge_slave_1: entered promiscuous mode [ 49.237402][ T4421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.257899][ T4421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.280947][ T4501] loop1: detected capacity change from 0 to 4096 [ 49.289992][ T4421] team0: Port device team_slave_0 added [ 49.297177][ T4421] team0: Port device team_slave_1 added [ 49.297896][ T4501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.309558][ T4501] EXT4-fs: Ignoring removed i_version option [ 49.333794][ T4504] capability: warning: `syz.3.363' uses deprecated v2 capabilities in a way that may be insecure [ 49.346187][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.353304][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.379291][ T4421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.390114][ T4501] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.362: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 256(256) [ 49.390771][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.410494][ T4501] EXT4-fs error (device loop1): ext4_quota_enable:7137: comm syz.1.362: Bad quota inode: 4, type: 1 [ 49.415263][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.451991][ T4421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.469334][ T4501] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.509284][ T4421] hsr_slave_0: entered promiscuous mode [ 49.515579][ T4501] EXT4-fs (loop1): mount failed [ 49.515724][ T4421] hsr_slave_1: entered promiscuous mode [ 49.535637][ T4421] debugfs: 'hsr0' already exists in 'hsr' [ 49.541539][ T4421] Cannot create hsr debugfs directory [ 49.684297][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 49.714737][ T4530] team0 (unregistering): Port device team_slave_0 removed [ 49.715202][ T4533] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 49.731234][ T4530] team0 (unregistering): Port device team_slave_1 removed [ 49.741798][ T4421] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.750707][ T4421] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.761342][ T4421] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.776829][ T4533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.786747][ T4421] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.795660][ T4537] sd 0:0:1:0: device reset [ 49.823239][ T4535] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 49.835896][ T4535] bond1: (slave batadv1): making interface the new active one [ 49.847562][ T4535] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 49.857426][ T4543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 49.906570][ T4421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.936819][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 49.945393][ T4421] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.973190][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.980355][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.990375][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.997491][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.036812][ T4533] bond1 (unregistering): (slave batadv1): Releasing active interface [ 50.055077][ T4533] bond1 (unregistering): Released all slaves [ 50.156239][ T4571] pim6reg: entered allmulticast mode [ 50.175870][ T4571] pim6reg: left allmulticast mode [ 50.203009][ T4579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.388'. [ 50.224345][ T4421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.256968][ T4585] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.332981][ T4592] loop1: detected capacity change from 0 to 1024 [ 50.357383][ T4592] EXT4-fs: inline encryption not supported [ 50.381240][ T4592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.485864][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.530297][ T4421] veth0_vlan: entered promiscuous mode [ 50.550750][ T4614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 50.562128][ T4421] veth1_vlan: entered promiscuous mode [ 50.587215][ T4421] veth0_macvtap: entered promiscuous mode [ 50.602009][ T4421] veth1_macvtap: entered promiscuous mode [ 50.622702][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.650576][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.663096][ T3666] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.687971][ T3666] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.703496][ T3666] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.731434][ T3666] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.831991][ T4633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4633 comm=syz.6.405 [ 50.844553][ T4633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4633 comm=syz.6.405 [ 51.041675][ T4642] SELinux: Context system_u:object is not valid (left unmapped). [ 51.097122][ T2988] udevd[2988]: worker [3508] terminated by signal 33 (Unknown signal 33) [ 51.108824][ T1033] kernel write not supported for file /219/attr/prev (pid: 1033 comm: kworker/0:2) [ 51.334779][ T36] kernel write not supported for file /16/attr/prev (pid: 36 comm: kworker/1:1) [ 51.351029][ T4692] rdma_op ffff88811a8d2180 conn xmit_rdma 0000000000000000 [ 51.435232][ T4700] loop6: detected capacity change from 0 to 164 [ 51.445142][ T4700] syz.6.436: attempt to access beyond end of device [ 51.445142][ T4700] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.458999][ T4700] syz.6.436: attempt to access beyond end of device [ 51.458999][ T4700] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.722388][ T4735] loop3: detected capacity change from 0 to 512 [ 51.741629][ T4735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.789286][ T4735] EXT4-fs (loop3): 1 truncate cleaned up [ 51.815314][ T4735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.986470][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.057145][ T4771] sd 0:0:1:0: device reset [ 52.083331][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 52.095083][ T4775] netlink: 52 bytes leftover after parsing attributes in process `syz.6.468'. [ 52.119801][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 52.631649][ T4816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.640223][ T4816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.905832][ T4824] loop2: detected capacity change from 0 to 164 [ 52.914854][ T4824] syz.2.488: attempt to access beyond end of device [ 52.914854][ T4824] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 52.929075][ T4824] syz.2.488: attempt to access beyond end of device [ 52.929075][ T4824] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 53.211152][ T4856] netem: incorrect gi model size [ 53.216213][ T4856] netem: change failed [ 53.252554][ T4863] loop1: detected capacity change from 0 to 512 [ 53.279811][ T4863] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.297387][ T4863] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.509: bad orphan inode 13 [ 53.326828][ T4863] ext4_test_bit(bit=12, block=18) = 1 [ 53.332316][ T4863] is_bad_inode(inode)=0 [ 53.336507][ T4863] NEXT_ORPHAN(inode)=2130706432 [ 53.341500][ T4863] max_ino=32 [ 53.344716][ T4863] i_nlink=1 [ 53.348366][ T4863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.365028][ T4863] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 53.409885][ T4863] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 53.443895][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.574758][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 53.574776][ T29] audit: type=1326 audit(1759461371.760:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.604307][ T29] audit: type=1326 audit(1759461371.760:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.628102][ T29] audit: type=1326 audit(1759461371.760:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.651433][ T29] audit: type=1326 audit(1759461371.760:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.674748][ T29] audit: type=1326 audit(1759461371.760:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.698584][ T29] audit: type=1326 audit(1759461371.840:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.722020][ T29] audit: type=1326 audit(1759461371.840:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.745493][ T29] audit: type=1326 audit(1759461371.840:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.772755][ T29] audit: type=1326 audit(1759461371.880:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.796130][ T29] audit: type=1326 audit(1759461371.880:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 53.940728][ T4919] __nla_validate_parse: 2 callbacks suppressed [ 53.940747][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 54.015587][ T4927] bridge0: entered promiscuous mode [ 54.021954][ T4927] macvtap1: entered allmulticast mode [ 54.023720][ T4929] loop3: detected capacity change from 0 to 512 [ 54.027385][ T4927] bridge0: entered allmulticast mode [ 54.034195][ T4929] EXT4-fs: Ignoring removed oldalloc option [ 54.049680][ T4927] bridge0: left allmulticast mode [ 54.054818][ T4927] bridge0: left promiscuous mode [ 54.084573][ T4929] EXT4-fs (loop3): 1 truncate cleaned up [ 54.090840][ T4929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.235602][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.246565][ T4949] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 54.274306][ T4953] netlink: 96 bytes leftover after parsing attributes in process `syz.2.546'. [ 54.289605][ T4955] serio: Serial port ptm0 [ 54.313703][ T4959] loop1: detected capacity change from 0 to 164 [ 54.323702][ T4959] syz.1.547: attempt to access beyond end of device [ 54.323702][ T4959] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 54.338150][ T4959] syz.1.547: attempt to access beyond end of device [ 54.338150][ T4959] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.356631][ T4963] bridge0: entered promiscuous mode [ 54.384628][ T4963] macvtap1: entered allmulticast mode [ 54.390144][ T4963] bridge0: entered allmulticast mode [ 54.401169][ T4963] bridge0: left allmulticast mode [ 54.406267][ T4963] bridge0: left promiscuous mode [ 54.624986][ T5001] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 54.807197][ T5025] loop3: detected capacity change from 0 to 512 [ 54.827263][ T5025] EXT4-fs: Ignoring removed nobh option [ 54.853064][ T5025] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.573: corrupted inode contents [ 54.882459][ T5025] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.573: mark_inode_dirty error [ 54.895104][ T5025] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.573: corrupted inode contents [ 54.907078][ T5025] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.573: mark_inode_dirty error [ 54.930641][ T5025] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.573: Failed to acquire dquot type 0 [ 54.942695][ T5025] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.573: corrupted inode contents [ 54.945245][ T5036] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 54.954679][ T5025] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.573: mark_inode_dirty error [ 54.994808][ T5039] sd 0:0:1:0: device reset [ 55.004756][ T5025] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.573: corrupted inode contents [ 55.016972][ T5025] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.573: mark_inode_dirty error [ 55.017204][ T5041] netlink: 'syz.6.578': attribute type 10 has an invalid length. [ 55.040224][ T5041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.048615][ T5041] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 55.058592][ T5025] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.573: corrupted inode contents [ 55.068350][ T5041] netlink: 'syz.6.578': attribute type 10 has an invalid length. [ 55.078167][ T5041] netlink: 40 bytes leftover after parsing attributes in process `syz.6.578'. [ 55.087227][ T5041] batadv0: entered promiscuous mode [ 55.092525][ T5041] batadv0: entered allmulticast mode [ 55.099666][ T5041] bond0: (slave batadv0): Releasing backup interface [ 55.099914][ T5025] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 55.117666][ T5041] bridge0: port 3(batadv0) entered blocking state [ 55.124206][ T5041] bridge0: port 3(batadv0) entered disabled state [ 55.139631][ T5025] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.573: corrupted inode contents [ 55.168169][ T5025] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.573: mark_inode_dirty error [ 55.191500][ T5025] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 55.207584][ T5025] EXT4-fs (loop3): 1 truncate cleaned up [ 55.215824][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.229067][ T5025] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.266895][ T5025] syz.3.573 (5025) used greatest stack depth: 9760 bytes left [ 55.273064][ T5051] netlink: 96 bytes leftover after parsing attributes in process `syz.6.583'. [ 55.297359][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.324460][ T5060] bridge0: entered promiscuous mode [ 55.330887][ T5060] macvtap1: entered allmulticast mode [ 55.336420][ T5060] bridge0: entered allmulticast mode [ 55.345480][ T5060] bridge0: left allmulticast mode [ 55.350592][ T5060] bridge0: left promiscuous mode [ 55.511982][ T5090] netlink: 96 bytes leftover after parsing attributes in process `syz.6.601'. [ 55.609465][ T3647] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 55.618741][ T3647] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 55.707559][ T5088] netlink: 'syz.2.600': attribute type 13 has an invalid length. [ 55.715464][ T5088] netlink: 'syz.2.600': attribute type 17 has an invalid length. [ 55.727905][ T5088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.880694][ T5110] bridge0: entered promiscuous mode [ 55.889328][ T5110] macvtap1: entered allmulticast mode [ 55.894753][ T5110] bridge0: entered allmulticast mode [ 55.909575][ T5110] bridge0: left allmulticast mode [ 55.914687][ T5110] bridge0: left promiscuous mode [ 56.059788][ T5116] loop6: detected capacity change from 0 to 512 [ 56.067435][ T5116] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 56.082140][ T5116] EXT4-fs (loop6): 1 truncate cleaned up [ 56.088659][ T5116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.121540][ T4421] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.789587][ T5155] loop2: detected capacity change from 0 to 512 [ 56.819402][ T5155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.851516][ T5155] EXT4-fs (loop2): 1 truncate cleaned up [ 56.857744][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.889437][ T5153] mmap: syz.1.624 (5153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.976996][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.056475][ T5166] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 57.083190][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.092560][ T5166] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 57.112892][ T5166] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 57.120681][ T5166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.633'. [ 57.146723][ T5166] batadv0: entered promiscuous mode [ 57.152059][ T5166] batadv0: entered allmulticast mode [ 57.168554][ T5166] bond0: (slave batadv0): Releasing backup interface [ 57.179163][ T5166] bridge0: port 3(batadv0) entered blocking state [ 57.185696][ T5166] bridge0: port 3(batadv0) entered disabled state [ 57.609344][ T3677] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 57.618618][ T3677] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 57.745493][ T5217] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 57.794992][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.810056][ T5218] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 57.817920][ T5218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 57.843113][ T5217] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 57.869335][ T5218] batadv0: entered promiscuous mode [ 57.874736][ T5218] batadv0: entered allmulticast mode [ 57.901696][ T5218] bond0: (slave batadv0): Releasing backup interface [ 57.911898][ T5218] bridge0: port 3(batadv0) entered blocking state [ 57.918413][ T5218] bridge0: port 3(batadv0) entered disabled state [ 57.950416][ T3677] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 57.959820][ T3677] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 58.201086][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 58.218072][ T3690] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.227131][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 58.236104][ T3690] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.245020][ T3690] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.276456][ T3690] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.425928][ T5232] netlink: 'syz.1.657': attribute type 13 has an invalid length. [ 58.442398][ T5232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.458726][ T5273] loop3: detected capacity change from 0 to 1024 [ 58.465604][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 58.529792][ T5273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.556615][ T5273] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.677: bg 0: block 88: padding at end of block bitmap is not set [ 58.576888][ T5273] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 58.586277][ T5285] serio: Serial port ttyS3 [ 58.605226][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.740836][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 58.740893][ T29] audit: type=1400 audit(1759461376.930:994): avc: denied { bind } for pid=5311 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.766681][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.789370][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.793478][ T29] audit: type=1400 audit(1759461376.930:995): avc: denied { listen } for pid=5311 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.812037][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.846034][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.856048][ T29] audit: type=1400 audit(1759461377.040:996): avc: denied { write } for pid=5319 comm="syz.3.697" path="socket:[11116]" dev="sockfs" ino=11116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.886195][ T29] audit: type=1326 audit(1759461377.070:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 58.909798][ T29] audit: type=1326 audit(1759461377.070:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 58.933353][ T29] audit: type=1326 audit(1759461377.070:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 58.956755][ T29] audit: type=1326 audit(1759461377.070:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 58.980183][ T29] audit: type=1326 audit(1759461377.070:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 59.003565][ T29] audit: type=1326 audit(1759461377.070:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 59.032973][ T29] audit: type=1326 audit(1759461377.120:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab90aeec9 code=0x7ffc0000 [ 59.066382][ T5328] tipc: Started in network mode [ 59.071482][ T5328] tipc: Node identity ac14140f, cluster identity 4711 [ 59.080306][ T5328] tipc: New replicast peer: 255.255.255.255 [ 59.086481][ T5328] tipc: Enabled bearer , priority 10 [ 59.109389][ T5330] loop1: detected capacity change from 0 to 4096 [ 59.122871][ T5330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.139095][ T5330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.175040][ T5343] __nla_validate_parse: 4 callbacks suppressed [ 59.175064][ T5343] netlink: 3 bytes leftover after parsing attributes in process `syz.0.708'. [ 59.215356][ T5348] netlink: 96 bytes leftover after parsing attributes in process `syz.2.710'. [ 59.231034][ T5343] batadv1: entered promiscuous mode [ 59.236297][ T5343] batadv1: entered allmulticast mode [ 59.303073][ T5353] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 59.328565][ T5355] loop2: detected capacity change from 0 to 512 [ 59.369405][ T5355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.418555][ T5355] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.443775][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.519884][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.549855][ T5381] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 59.595798][ T5379] SELinux: ebitmap: truncated map [ 59.602113][ T5379] SELinux: failed to load policy [ 59.676191][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 59.714438][ T5393] netem: change failed [ 59.924896][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.743'. [ 60.201706][ T3463] tipc: Node number set to 2886997007 [ 60.278963][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 60.317704][ T5462] validate_nla: 5 callbacks suppressed [ 60.317719][ T5462] netlink: 'syz.2.760': attribute type 13 has an invalid length. [ 60.494545][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.501915][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.701022][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.714989][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.848941][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 60.862621][ T5488] netlink: 96 bytes leftover after parsing attributes in process `syz.6.767'. [ 60.871669][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 60.881632][ T3690] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.890805][ T3690] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.932707][ T3690] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.941763][ T3690] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.952329][ T3690] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.961322][ T3690] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.975198][ T3690] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.984221][ T3690] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.995120][ T5509] netlink: 80 bytes leftover after parsing attributes in process `syz.1.774'. [ 61.005725][ T5509] netlink: 80 bytes leftover after parsing attributes in process `syz.1.774'. [ 61.121216][ T5518] geneve2: entered promiscuous mode [ 61.126504][ T5518] geneve2: entered allmulticast mode [ 61.474203][ T5549] loop2: detected capacity change from 0 to 512 [ 62.329657][ T5645] loop0: detected capacity change from 0 to 256 [ 62.482294][ T5657] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.845201][ T5686] macvtap0: refused to change device tx_queue_len [ 63.105657][ T5712] netlink: 'syz.6.859': attribute type 13 has an invalid length. [ 63.152947][ T5708] infiniband syz0: set down [ 63.157523][ T5708] infiniband syz0: added bond_slave_0 [ 63.186670][ T5708] RDS/IB: syz0: added [ 63.235866][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.243147][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.304388][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.316888][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.404102][ T3647] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.429638][ T3647] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.451467][ T3647] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.469295][ T3647] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.556408][ T5739] netlink: 'syz.6.871': attribute type 1 has an invalid length. [ 63.641543][ T5739] bond1: (slave gretap1): making interface the new active one [ 63.649783][ T5739] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 63.701994][ T5739] syz.6.871 (5739) used greatest stack depth: 9584 bytes left [ 63.813904][ T5748] IPVS: Error connecting to the multicast addr [ 63.872771][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 63.872789][ T29] audit: type=1326 audit(1759461382.060:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 63.905007][ T29] audit: type=1326 audit(1759461382.060:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 63.928548][ T29] audit: type=1400 audit(1759461382.060:1661): avc: denied { append } for pid=5753 comm="syz.6.878" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 63.952333][ T29] audit: type=1326 audit(1759461382.090:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 63.975845][ T29] audit: type=1326 audit(1759461382.090:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 63.999191][ T29] audit: type=1326 audit(1759461382.090:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 64.022924][ T29] audit: type=1326 audit(1759461382.140:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 64.046416][ T29] audit: type=1326 audit(1759461382.140:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 64.070028][ T29] audit: type=1326 audit(1759461382.140:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 64.093370][ T29] audit: type=1326 audit(1759461382.140:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.2.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f447440eec9 code=0x7ffc0000 [ 64.263774][ T5768] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 64.279074][ T5768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.296716][ T5766] __nla_validate_parse: 15 callbacks suppressed [ 64.296732][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 64.300106][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.321787][ T5766] netlink: 312 bytes leftover after parsing attributes in process `syz.3.885'. [ 64.322560][ T5768] bond1: (slave batadv1): making interface the new active one [ 64.330806][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 64.348818][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 64.350249][ T5768] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 64.395199][ T5774] program syz.3.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.408779][ T5776] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 64.417859][ T5771] bond1 (unregistering): (slave batadv1): Releasing active interface [ 64.427813][ T5771] bond1 (unregistering): Released all slaves [ 64.734683][ T5813] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 64.779748][ T5813] bond1: (slave gretap1): making interface the new active one [ 64.797907][ T5813] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 64.872676][ T5820] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 64.934296][ T5822] loop1: detected capacity change from 0 to 512 [ 64.973831][ T5822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.990416][ T5822] ext4 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.053526][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.127846][ T5846] loop1: detected capacity change from 0 to 4096 [ 65.160544][ T5846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.224134][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.241413][ T5859] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 65.336902][ T5870] netlink: 3 bytes leftover after parsing attributes in process `syz.3.925'. [ 65.364775][ T5870] batadv1: entered promiscuous mode [ 65.370130][ T5870] batadv1: entered allmulticast mode [ 65.399275][ T5876] syzkaller1: entered promiscuous mode [ 65.404807][ T5876] syzkaller1: entered allmulticast mode [ 65.468124][ T5884] netlink: 664 bytes leftover after parsing attributes in process `syz.6.932'. [ 65.549067][ T5894] macsec1: entered promiscuous mode [ 65.554410][ T5894] bridge0: entered promiscuous mode [ 65.562799][ T5894] bridge0: port 4(macsec1) entered blocking state [ 65.569420][ T5894] bridge0: port 4(macsec1) entered disabled state [ 65.576264][ T5894] macsec1: entered allmulticast mode [ 65.581883][ T5894] bridge0: entered allmulticast mode [ 65.588247][ T5894] macsec1: left allmulticast mode [ 65.593313][ T5894] bridge0: left allmulticast mode [ 65.598890][ T5894] bridge0: left promiscuous mode [ 65.636791][ T5897] netlink: 'syz.3.938': attribute type 4 has an invalid length. [ 65.650648][ T5897] netlink: 'syz.3.938': attribute type 4 has an invalid length. [ 65.793152][ T5902] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 65.814788][ T5902] bond1: (slave gretap1): making interface the new active one [ 65.822760][ T5902] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 65.853030][ T5907] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 66.144832][ T5917] netlink: 'syz.6.946': attribute type 13 has an invalid length. [ 66.152676][ T5917] netlink: 'syz.6.946': attribute type 17 has an invalid length. [ 66.163637][ T5917] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.238137][ T5920] netlink: 'syz.0.957': attribute type 13 has an invalid length. [ 66.251408][ T5922] netlink: 3 bytes leftover after parsing attributes in process `syz.6.947'. [ 66.297339][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.304576][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.377251][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.389398][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.498430][ T5922] batadv1: entered promiscuous mode [ 66.503756][ T5922] batadv1: entered allmulticast mode [ 66.522165][ T3647] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.531121][ T3647] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.552118][ T3647] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.561185][ T3647] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.580101][ T3647] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.589053][ T3647] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.598162][ T3647] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.607119][ T3647] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.690121][ T5934] serio: Serial port ttyS3 [ 66.706141][ T5936] netlink: 96 bytes leftover after parsing attributes in process `syz.1.953'. [ 66.832380][ T5952] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 66.841005][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.848942][ T5952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 66.867999][ T5952] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 66.868044][ T5955] serio: Serial port ttyS3 [ 66.880512][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.959'. [ 66.889693][ T5952] batadv0: entered promiscuous mode [ 66.894950][ T5952] batadv0: entered allmulticast mode [ 66.901405][ T5952] bond0: (slave batadv0): Releasing backup interface [ 66.918188][ T5952] bridge0: port 3(batadv0) entered blocking state [ 66.924786][ T5952] bridge0: port 3(batadv0) entered disabled state [ 66.962557][ T5960] pim6reg: entered allmulticast mode [ 66.971515][ T5960] pim6reg: left allmulticast mode [ 67.030333][ T5972] netlink: 96 bytes leftover after parsing attributes in process `syz.2.967'. [ 67.217569][ T5986] serio: Serial port ttyS3 [ 67.399329][ T3672] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 67.408650][ T3672] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 68.217033][ T6043] loop2: detected capacity change from 0 to 128 [ 68.228088][ T6043] vfat: Unknown parameter '' [ 68.271300][ T6049] loop0: detected capacity change from 0 to 1024 [ 68.291808][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.313865][ T6049] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1001: Allocating blocks 497-513 which overlap fs metadata [ 68.351061][ T6048] EXT4-fs (loop0): pa ffff888106daf230: logic 16, phys. 129, len 24 [ 68.359281][ T6048] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 68.381202][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.403178][ T6063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6063 comm=syz.0.1007 [ 68.443945][ T6067] netlink: 'syz.2.1008': attribute type 30 has an invalid length. [ 68.459460][ T3686] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.468319][ T3686] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.477179][ T3686] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.486157][ T3686] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.570977][ T6079] loop0: detected capacity change from 0 to 128 [ 68.577865][ T6079] vfat: Unknown parameter '' [ 68.702277][ T6096] loop2: detected capacity change from 0 to 512 [ 68.710666][ T6096] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.722457][ T6096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.747642][ T6096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 68.756234][ T6096] System zones: 1-12 [ 68.761313][ T6096] EXT4-fs (loop2): 1 truncate cleaned up [ 68.777794][ T6096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.812298][ T6108] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 68.821732][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.866059][ T6117] loop1: detected capacity change from 0 to 512 [ 68.883976][ T6121] loop0: detected capacity change from 0 to 256 [ 68.892195][ T6117] EXT4-fs: Ignoring removed i_version option [ 68.898253][ T6117] EXT4-fs: Ignoring removed bh option [ 68.911773][ T6121] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 68.920608][ T6121] FAT-fs (loop0): Filesystem has been set read-only [ 68.932569][ T6121] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 68.941454][ T6121] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 68.951261][ T6121] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 68.961134][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.973998][ T6117] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.989328][ T6121] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 69.004076][ T6135] loop2: detected capacity change from 0 to 256 [ 69.028999][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.074285][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 69.074352][ T29] audit: type=1400 audit(1759461387.260:1844): avc: denied { write } for pid=6143 comm="syz.1.1049" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.156101][ T6150] vhci_hcd: default hub control req: 0316 v0089 i0000 l0 [ 69.212256][ T6157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6157 comm=syz.1.1044 [ 69.224906][ T6157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6157 comm=syz.1.1044 [ 69.299764][ T6167] __nla_validate_parse: 6 callbacks suppressed [ 69.299850][ T6167] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 69.315172][ T6167] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 69.394927][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1053'. [ 69.565077][ T29] audit: type=1326 audit(1759461387.750:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f859b0c5d67 code=0x7ffc0000 [ 69.619389][ T29] audit: type=1326 audit(1759461387.750:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859b06af79 code=0x7ffc0000 [ 69.642838][ T29] audit: type=1326 audit(1759461387.750:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f859b0c5d67 code=0x7ffc0000 [ 69.666340][ T29] audit: type=1326 audit(1759461387.750:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f859b06af79 code=0x7ffc0000 [ 69.689702][ T29] audit: type=1326 audit(1759461387.750:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b0ceec9 code=0x7ffc0000 [ 69.713260][ T29] audit: type=1326 audit(1759461387.750:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b0ceec9 code=0x7ffc0000 [ 69.714171][ T6188] can0: slcan on ttyS3. [ 69.736702][ T29] audit: type=1326 audit(1759461387.750:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f859b0ceec9 code=0x7ffc0000 [ 69.736743][ T29] audit: type=1326 audit(1759461387.750:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b0ceec9 code=0x7ffc0000 [ 69.787756][ T29] audit: type=1326 audit(1759461387.750:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b0ceec9 code=0x7ffc0000 [ 69.823504][ T6191] loop6: detected capacity change from 0 to 1024 [ 69.848200][ T6188] can0 (unregistered): slcan off ttyS3. [ 69.858734][ T6191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.887867][ T4421] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.957744][ T6201] all: renamed from lo [ 69.966200][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 70.200568][ T6217] syz_tun: entered allmulticast mode [ 70.213518][ T6216] syz_tun: left allmulticast mode [ 70.268631][ T6223] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1075'. [ 70.294905][ T6232] loop1: detected capacity change from 0 to 1024 [ 70.334838][ T6232] EXT4-fs: Ignoring removed orlov option [ 70.360237][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.379486][ T6232] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.431706][ T6232] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.492652][ T6232] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 70.505064][ T6232] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.505064][ T6232] [ 70.523836][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.540974][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.569200][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.625748][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.668153][ T6231] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.691610][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.734181][ T6231] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.795708][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 70.814685][ T6265] sd 0:0:1:0: device reset [ 70.884171][ T6268] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1092'. [ 70.906027][ T6244] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1079: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.089679][ T6273] loop2: detected capacity change from 0 to 512 [ 71.104504][ T6278] loop6: detected capacity change from 0 to 1024 [ 71.111799][ T6278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.118516][ T6278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.182091][ T6278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.224247][ T6278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.242608][ T6273] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.257598][ T6273] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.265652][ T6273] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1094: corrupted inode contents [ 71.278193][ T6273] EXT4-fs (loop2): Remounting filesystem read-only [ 71.285221][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.294500][ T6273] EXT4-fs (loop2): 1 truncate cleaned up [ 71.300462][ T3660] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.311058][ T3660] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.321791][ T3660] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.334768][ T6285] loop0: detected capacity change from 0 to 512 [ 71.341690][ T6285] msdos: Bad value for 'errors' [ 71.347248][ T6273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.360687][ T4421] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.380720][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.544630][ T6307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6307 comm=syz.1.1107 [ 71.695950][ T6321] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 71.804665][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.811973][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.886767][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.901947][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.970148][ T3667] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.979146][ T3667] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.998126][ T6346] vlan2: entered allmulticast mode [ 72.019001][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 72.035303][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.043005][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.052511][ T3667] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.061531][ T3667] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.073096][ T3667] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.082287][ T3667] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.091800][ T3667] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.100741][ T3667] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.360568][ T6383] syz0: rxe_newlink: already configured on bond_slave_0 [ 72.660545][ T6403] SELinux: ebitmap: truncated map [ 72.666151][ T6403] SELinux: failed to load policy [ 72.784383][ T6411] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1150'. [ 72.809046][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 72.818293][ T6414] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1151'. [ 72.918804][ T6427] loop2: detected capacity change from 0 to 1024 [ 72.927454][ T6427] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.941132][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.958070][ T6427] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 72.973530][ T6427] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.985818][ T6427] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.985818][ T6427] [ 72.995502][ T6427] EXT4-fs (loop2): Total free blocks count 0 [ 73.001570][ T6427] EXT4-fs (loop2): Free/Dirty block details [ 73.007490][ T6427] EXT4-fs (loop2): free_blocks=68451041280 [ 73.013358][ T6427] EXT4-fs (loop2): dirty_blocks=80 [ 73.018556][ T6427] EXT4-fs (loop2): Block reservation details [ 73.024590][ T6427] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 73.039649][ T6438] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 73.316114][ T6472] loop0: detected capacity change from 0 to 512 [ 73.340112][ T6472] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.348193][ T6472] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.416017][ T6472] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1180: corrupted inode contents [ 73.438459][ T6472] EXT4-fs (loop0): Remounting filesystem read-only [ 73.451677][ T6472] EXT4-fs (loop0): 1 truncate cleaned up [ 73.461064][ T3643] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.471721][ T3643] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.486981][ T3643] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.497902][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.529610][ T3659] bridge0: port 3(batadv0) entered disabled state [ 73.547445][ T3659] bridge_slave_1: left allmulticast mode [ 73.553181][ T3659] bridge_slave_1: left promiscuous mode [ 73.558962][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.590336][ T3659] bridge_slave_0: left allmulticast mode [ 73.596192][ T3659] bridge_slave_0: left promiscuous mode [ 73.602088][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.621515][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.643348][ T3659] bond1 (unregistering): (slave gretap1): Releasing active interface [ 73.707882][ T6503] SELinux: policydb table sizes (589827,720895) do not match mine (8,7) [ 73.727528][ T6503] SELinux: failed to load policy [ 73.771634][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.797446][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.820407][ T3659] bond0 (unregistering): Released all slaves [ 73.829041][ T3659] bond1 (unregistering): Released all slaves [ 73.833914][ T6515] loop3: detected capacity change from 0 to 1024 [ 73.860466][ T6515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.925730][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.958257][ T3659] hsr_slave_0: left promiscuous mode [ 73.960932][ T6524] loop2: detected capacity change from 0 to 512 [ 73.970337][ T6524] EXT4-fs: Ignoring removed oldalloc option [ 73.976544][ T6524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.986932][ T3659] hsr_slave_1: left promiscuous mode [ 74.000032][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.030539][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.036503][ T6524] EXT4-fs (loop2): 1 truncate cleaned up [ 74.066028][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.113744][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 74.125533][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 74.137990][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 74.138070][ T29] audit: type=1400 audit(1759461392.320:1876): avc: denied { mounton } for pid=6523 comm="syz.2.1200" path="/275/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.181365][ T29] audit: type=1326 audit(1759461392.370:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1055eec9 code=0x7ffc0000 [ 74.205103][ T29] audit: type=1326 audit(1759461392.370:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1f1055eec9 code=0x7ffc0000 [ 74.228597][ T29] audit: type=1326 audit(1759461392.370:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1055eec9 code=0x7ffc0000 [ 74.238694][ T6550] loop0: detected capacity change from 0 to 1024 [ 74.252042][ T29] audit: type=1326 audit(1759461392.370:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f1f1055eec9 code=0x7ffc0000 [ 74.259316][ T6550] EXT4-fs: Ignoring removed orlov option [ 74.281834][ T29] audit: type=1326 audit(1759461392.370:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1055eec9 code=0x7ffc0000 [ 74.315882][ T6560] macvtap0: refused to change device tx_queue_len [ 74.325077][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 74.339006][ T6550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.359595][ T6524] loop2: detected capacity change from 512 to 64 [ 74.366991][ T29] audit: type=1400 audit(1759461392.550:1882): avc: denied { append } for pid=6523 comm="syz.2.1200" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.424202][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.431396][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.438778][ T6476] bridge_slave_0: entered allmulticast mode [ 74.445539][ T6476] bridge_slave_0: entered promiscuous mode [ 74.452708][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.459938][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.467210][ T6476] bridge_slave_1: entered allmulticast mode [ 74.473857][ T6476] bridge_slave_1: entered promiscuous mode [ 74.474538][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.495242][ T29] audit: type=1400 audit(1759461392.680:1883): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.515738][ T3310] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -12) [ 74.525231][ T29] audit: type=1400 audit(1759461392.700:1884): avc: denied { unlink } for pid=3310 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.528525][ T3310] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 74.562580][ T3310] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 74.583557][ T29] audit: type=1400 audit(1759461392.710:1885): avc: denied { rmdir } for pid=3310 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.629839][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.642146][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.667607][ T6476] team0: Port device team_slave_0 added [ 74.679577][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.689783][ T6476] team0: Port device team_slave_1 added [ 74.721343][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.728368][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.754328][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.804068][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.811226][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.837203][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.854500][ T6576] __nla_validate_parse: 4 callbacks suppressed [ 74.854518][ T6576] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 74.895764][ T3659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.937317][ T3659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.965672][ T6476] hsr_slave_0: entered promiscuous mode [ 74.972214][ T6476] hsr_slave_1: entered promiscuous mode [ 74.978374][ T6476] debugfs: 'hsr0' already exists in 'hsr' [ 74.984239][ T6476] Cannot create hsr debugfs directory [ 75.011356][ T3659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.080638][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 75.116327][ T3659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.155140][ T6476] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.180655][ T6476] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.198124][ T6476] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.228834][ T3659] bridge0: port 3(batadv0) entered disabled state [ 75.236012][ T3659] bridge_slave_1: left allmulticast mode [ 75.241839][ T3659] bridge_slave_1: left promiscuous mode [ 75.247582][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.257919][ T3659] bridge_slave_0: left promiscuous mode [ 75.263837][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.289301][ T3659] bond1 (unregistering): (slave gretap1): Releasing active interface [ 75.342777][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.355857][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.369969][ T3659] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 75.379948][ T3659] bond0 (unregistering): Released all slaves [ 75.391997][ T3659] bond1 (unregistering): Released all slaves [ 75.402593][ T6476] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.427094][ T6615] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 75.473968][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.506662][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.518944][ T3659] hsr_slave_0: left promiscuous mode [ 75.529701][ T3659] hsr_slave_1: left promiscuous mode [ 75.540937][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.557306][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.603675][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 75.615400][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 75.705863][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.713044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.753094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.760236][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.855545][ T6476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.866089][ T6476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.961989][ T6585] chnl_net:caif_netlink_parms(): no params data found [ 76.048607][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.116335][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.123596][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.136865][ T6585] bridge_slave_0: entered allmulticast mode [ 76.147878][ T6671] infiniband syz0: set down [ 76.152491][ T6671] infiniband syz0: added bond_slave_0 [ 76.159009][ T6585] bridge_slave_0: entered promiscuous mode [ 76.166066][ T6671] RDS/IB: syz0: added [ 76.171539][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.178675][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.186062][ T6585] bridge_slave_1: entered allmulticast mode [ 76.192687][ T6585] bridge_slave_1: entered promiscuous mode [ 76.233089][ T6585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.253790][ T6585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.306386][ T6585] team0: Port device team_slave_0 added [ 76.327389][ T6585] team0: Port device team_slave_1 added [ 76.374079][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.381147][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.407234][ T6585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.417987][ T6697] loop3: detected capacity change from 0 to 1024 [ 76.432706][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.439783][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.442244][ T6697] EXT4-fs: Ignoring removed orlov option [ 76.465784][ T6585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.525966][ T6585] hsr_slave_0: entered promiscuous mode [ 76.526271][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.532577][ T6585] hsr_slave_1: entered promiscuous mode [ 76.550098][ T6585] debugfs: 'hsr0' already exists in 'hsr' [ 76.555976][ T6585] Cannot create hsr debugfs directory [ 76.570480][ T6476] veth0_vlan: entered promiscuous mode [ 76.579825][ T6476] veth1_vlan: entered promiscuous mode [ 76.637719][ T6476] veth0_macvtap: entered promiscuous mode [ 76.671881][ T6476] veth1_macvtap: entered promiscuous mode [ 76.699288][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.733315][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.762093][ T3648] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.775003][ T3648] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810925][ T6585] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 76.822481][ T6585] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 76.840213][ T3648] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.860969][ T3667] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.871932][ T6585] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 76.882386][ T6585] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 76.940989][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.953200][ T6724] netlink: 'syz.7.1179': attribute type 1 has an invalid length. [ 77.017170][ T5496] Process accounting resumed [ 77.033044][ T6585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.082246][ T6585] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.100432][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.107631][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.118666][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.125803][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.217566][ T6740] loop0: detected capacity change from 0 to 8192 [ 77.274753][ T6754] geneve2: entered promiscuous mode [ 77.280194][ T6754] geneve2: entered allmulticast mode [ 77.304533][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.482957][ T6585] veth0_vlan: entered promiscuous mode [ 77.498286][ T6585] veth1_vlan: entered promiscuous mode [ 77.521991][ T6585] veth0_macvtap: entered promiscuous mode [ 77.529445][ T6585] veth1_macvtap: entered promiscuous mode [ 77.542780][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.560953][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.572441][ T3643] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.585989][ T3643] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.598322][ T3643] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.614620][ T3660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.678322][ T6793] loop3: detected capacity change from 0 to 8192 [ 77.726354][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1291'. [ 77.736611][ T6800] netlink: 'syz.8.1291': attribute type 5 has an invalid length. [ 77.782104][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 77.795735][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 77.854272][ T6806] geneve2: entered promiscuous mode [ 77.859647][ T6806] geneve2: entered allmulticast mode [ 78.004509][ T6814] loop3: detected capacity change from 0 to 128 [ 78.006006][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1296'. [ 78.022315][ T6814] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.034927][ T6814] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.138589][ T6821] lo speed is unknown, defaulting to 1000 [ 78.146862][ T6821] lo speed is unknown, defaulting to 1000 [ 78.154058][ T6821] lo speed is unknown, defaulting to 1000 [ 78.160452][ T6821] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.161813][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.168197][ T6821] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.207488][ T6821] lo speed is unknown, defaulting to 1000 [ 78.243520][ T6821] lo speed is unknown, defaulting to 1000 [ 78.252426][ T6827] loop3: detected capacity change from 0 to 512 [ 78.263043][ T6821] lo speed is unknown, defaulting to 1000 [ 78.269781][ T6821] lo speed is unknown, defaulting to 1000 [ 78.276039][ T6821] lo speed is unknown, defaulting to 1000 [ 78.317360][ T6827] EXT4-fs: Ignoring removed oldalloc option [ 78.329152][ T6827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.344076][ T6827] EXT4-fs (loop3): 1 truncate cleaned up [ 78.385838][ T6827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.429465][ T6827] loop3: detected capacity change from 512 to 64 [ 78.438238][ T6850] pim6reg: entered allmulticast mode [ 78.454667][ T6827] syz.3.1299: attempt to access beyond end of device [ 78.454667][ T6827] loop3: rw=2049, sector=74, nr_sectors = 6 limit=64 [ 78.468046][ T6827] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 37) [ 78.479261][ T6827] Buffer I/O error on device loop3, logical block 37 [ 78.485953][ T6827] Buffer I/O error on device loop3, logical block 38 [ 78.492657][ T6827] Buffer I/O error on device loop3, logical block 39 [ 78.529368][ T6850] pim6reg: left allmulticast mode [ 78.560076][ T6827] syz.3.1299: attempt to access beyond end of device [ 78.560076][ T6827] loop3: rw=2049, sector=84, nr_sectors = 2 limit=64 [ 78.573469][ T6827] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 42) [ 78.584765][ T6827] Buffer I/O error on device loop3, logical block 42 [ 78.598600][ T6827] syz.3.1299: attempt to access beyond end of device [ 78.598600][ T6827] loop3: rw=2049, sector=94, nr_sectors = 6 limit=64 [ 78.612097][ T6827] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 47) [ 78.623428][ T6827] Buffer I/O error on device loop3, logical block 47 [ 78.630201][ T6827] Buffer I/O error on device loop3, logical block 48 [ 78.636896][ T6827] Buffer I/O error on device loop3, logical block 49 [ 78.643902][ T6827] syz.3.1299: attempt to access beyond end of device [ 78.643902][ T6827] loop3: rw=2049, sector=102, nr_sectors = 2 limit=64 [ 78.657573][ T6827] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 51) [ 78.668809][ T6827] Buffer I/O error on device loop3, logical block 51 [ 78.676550][ T6827] syz.3.1299: attempt to access beyond end of device [ 78.676550][ T6827] loop3: rw=2049, sector=112, nr_sectors = 6 limit=64 [ 78.689941][ T6827] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 56) [ 78.701193][ T6827] Buffer I/O error on device loop3, logical block 56 [ 78.707888][ T6827] Buffer I/O error on device loop3, logical block 57 [ 78.716607][ T6827] syz.3.1299: attempt to access beyond end of device [ 78.716607][ T6827] loop3: rw=2049, sector=120, nr_sectors = 2 limit=64 [ 78.730049][ T6827] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 60) [ 78.769431][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -12) [ 78.787929][ T3296] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 78.814059][ T3296] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 78.828694][ T6875] macvtap0: refused to change device tx_queue_len [ 79.024665][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.037071][ T3638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.112375][ T3638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.140585][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 79.140632][ T29] audit: type=1400 audit(1759461397.320:2076): avc: denied { read } for pid=6901 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.168244][ T29] audit: type=1400 audit(1759461397.320:2077): avc: denied { open } for pid=6901 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.191704][ T29] audit: type=1400 audit(1759461397.320:2078): avc: denied { mounton } for pid=6901 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.246311][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1339'. [ 79.246631][ T29] audit: type=1400 audit(1759461397.410:2079): avc: denied { execute } for pid=6904 comm="syz.8.1337" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 79.286783][ T3638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.328428][ T29] audit: type=1326 audit(1759461397.490:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b00eec9 code=0x7ffc0000 [ 79.352164][ T29] audit: type=1326 audit(1759461397.490:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b00eec9 code=0x7ffc0000 [ 79.375781][ T29] audit: type=1326 audit(1759461397.490:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9b00eec9 code=0x7ffc0000 [ 79.399290][ T29] audit: type=1326 audit(1759461397.490:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b00eec9 code=0x7ffc0000 [ 79.422745][ T29] audit: type=1326 audit(1759461397.490:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9b00eec9 code=0x7ffc0000 [ 79.446296][ T29] audit: type=1326 audit(1759461397.510:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9b00eec9 code=0x7ffc0000 [ 79.470648][ T6911] veth1_to_bond: entered promiscuous mode [ 79.476461][ T6911] veth1_to_bond: entered allmulticast mode [ 79.503270][ T3638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.622638][ T3638] bridge0: port 3(batadv0) entered disabled state [ 79.658188][ T3638] bridge_slave_1: left allmulticast mode [ 79.663958][ T3638] bridge_slave_1: left promiscuous mode [ 79.669674][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.689429][ T3638] bridge_slave_0: left promiscuous mode [ 79.695203][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.744622][ T3638] bond1 (unregistering): (slave gretap1): Releasing active interface [ 79.816614][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.828265][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.844336][ T3638] bond0 (unregistering): Released all slaves [ 79.854502][ T3638] bond1 (unregistering): Released all slaves [ 79.866509][ T6901] lo speed is unknown, defaulting to 1000 [ 79.900549][ T3638] tipc: Disabling bearer [ 79.905633][ T3638] tipc: Left network mode [ 79.935983][ T6957] loop8: detected capacity change from 0 to 1024 [ 79.984004][ T6957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.012110][ T3638] hsr_slave_0: left promiscuous mode [ 80.033288][ T3638] hsr_slave_1: left promiscuous mode [ 80.046416][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.053991][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.072930][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.080437][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.090965][ T3638] veth1_macvtap: left promiscuous mode [ 80.096561][ T3638] veth0_macvtap: left promiscuous mode [ 80.103695][ T3638] veth1_vlan: left promiscuous mode [ 80.108994][ T3638] veth0_vlan: left promiscuous mode [ 80.163162][ T6585] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.258672][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1365'. [ 80.290499][ T6901] chnl_net:caif_netlink_parms(): no params data found [ 80.342466][ T6979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.367117][ T6979] bond1: (slave veth3): Enslaving as an active interface with an up link [ 80.406920][ T6979] bond1 (unregistering): (slave veth3): Releasing backup interface [ 80.435593][ T6979] bond1 (unregistering): Released all slaves [ 80.463827][ T7000] netlink: 'syz.0.1373': attribute type 83 has an invalid length. [ 80.502395][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.509764][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.527179][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1377'. [ 80.536588][ T6901] bridge_slave_0: entered allmulticast mode [ 80.544010][ T6901] bridge_slave_0: entered promiscuous mode [ 80.552457][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.559629][ T7012] siw: device registration error -23 [ 80.559656][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.572660][ T6901] bridge_slave_1: entered allmulticast mode [ 80.579402][ T6901] bridge_slave_1: entered promiscuous mode [ 80.620015][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.681040][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.711533][ T6901] team0: Port device team_slave_0 added [ 80.718407][ T6901] team0: Port device team_slave_1 added [ 80.748883][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.755995][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.782149][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.808261][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.815389][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.841465][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.932101][ T6901] hsr_slave_0: entered promiscuous mode [ 80.941835][ T6901] hsr_slave_1: entered promiscuous mode [ 80.948025][ T6901] debugfs: 'hsr0' already exists in 'hsr' [ 80.953878][ T6901] Cannot create hsr debugfs directory [ 81.056456][ T7046] loop8: detected capacity change from 0 to 164 [ 81.102406][ T7046] syz.8.1392: attempt to access beyond end of device [ 81.102406][ T7046] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.105129][ T6901] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 81.123637][ T7046] syz.8.1392: attempt to access beyond end of device [ 81.123637][ T7046] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.139495][ T6901] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 81.148748][ T6901] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 81.161289][ T6901] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 81.211584][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.225883][ T6901] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.254842][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.262012][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.284566][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.291719][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.312500][ T6901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.322965][ T6901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.335569][ T7075] syz0: rxe_newlink: already configured on bond_slave_0 [ 81.384568][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.451070][ T7090] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 81.458889][ T7090] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.1408'. [ 81.664649][ T6901] veth0_vlan: entered promiscuous mode [ 81.691973][ T6901] veth1_vlan: entered promiscuous mode [ 81.723093][ T6901] veth0_macvtap: entered promiscuous mode [ 81.741745][ T6901] veth1_macvtap: entered promiscuous mode [ 81.761038][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.782543][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.793762][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.804235][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.817890][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.836239][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.921023][ T7128] pim6reg: entered allmulticast mode [ 81.929510][ T7128] pim6reg: left allmulticast mode [ 81.961216][ T7134] loop1: detected capacity change from 0 to 1024 [ 81.968134][ T7134] EXT4-fs: Ignoring removed bh option [ 81.986747][ T7134] EXT4-fs: inline encryption not supported [ 82.008238][ T7134] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.039930][ T7134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 82.053681][ T7134] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1420: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.103975][ T7134] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1420: lblock 0 mapped to illegal pblock 48 (length 1) [ 82.106173][ T7143] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.132601][ T7143] SELinux: failed to load policy [ 82.162416][ T7134] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.1420: Failed to acquire dquot type 0 [ 82.174056][ T7134] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 82.197691][ T7134] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1420: mark_inode_dirty error [ 82.210991][ T7134] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 82.222101][ T7134] EXT4-fs (loop1): 1 orphan inode deleted [ 82.228295][ T7134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.241529][ T3667] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.266421][ T3667] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:37: Failed to release dquot type 0 [ 82.280445][ T7134] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 82.308399][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.308615][ T7154] netlink: 'syz.8.1427': attribute type 56 has an invalid length. [ 82.325396][ T7154] netlink: 'syz.8.1427': attribute type 1 has an invalid length. [ 82.626337][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1438'. [ 82.652088][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1438'. [ 82.727378][ T7181] loop9: detected capacity change from 0 to 512 [ 82.740200][ T7181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.758783][ T5480] IPVS: starting estimator thread 0... [ 82.766478][ T7181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.779832][ T7181] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.820149][ T7181] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 82.844037][ T7193] tipc: Started in network mode [ 82.848977][ T7193] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.858236][ T7184] IPVS: using max 2400 ests per chain, 120000 per kthread [ 82.866433][ T7181] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 82.867516][ T7193] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 82.882779][ T7181] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 82.883931][ T7193] tipc: Enabled bearer , priority 10 [ 82.903380][ T7181] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 82.912902][ T7181] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 82.948577][ T6901] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.993297][ T7207] netlink: 'syz.7.1452': attribute type 30 has an invalid length. [ 83.106548][ T7218] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 83.115056][ T7217] netlink: 'syz.7.1456': attribute type 56 has an invalid length. [ 83.123004][ T7217] netlink: 'syz.7.1456': attribute type 1 has an invalid length. [ 83.184971][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 83.194010][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 83.280332][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 83.289329][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 83.298369][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 83.395850][ T7259] loop7: detected capacity change from 0 to 1024 [ 83.403003][ T7259] EXT4-fs: Ignoring removed bh option [ 83.408496][ T7259] EXT4-fs: inline encryption not supported [ 83.415807][ T7259] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.427943][ T7259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 83.439371][ T7259] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1474: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.453765][ T7259] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1474: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.468473][ T7259] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.1474: Failed to acquire dquot type 0 [ 83.480122][ T7259] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 83.490165][ T7259] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1474: mark_inode_dirty error [ 83.502938][ T7259] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 83.517634][ T7259] EXT4-fs (loop7): 1 orphan inode deleted [ 83.524164][ T7259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.542745][ T3660] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.570739][ T3660] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:30: Failed to release dquot type 0 [ 83.583422][ T7259] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.603387][ T6476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.740563][ T7270] pim6reg: entered allmulticast mode [ 83.748692][ T7270] pim6reg: left allmulticast mode [ 83.865112][ T7284] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 83.973690][ T7293] vlan2: entered allmulticast mode [ 83.999345][ T5480] tipc: Node number set to 1 [ 84.161811][ T7304] loop7: detected capacity change from 0 to 512 [ 84.214580][ T7304] __quota_error: 178 callbacks suppressed [ 84.214596][ T7304] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 84.254031][ T7304] EXT4-fs warning (device loop7): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.289444][ T7304] EXT4-fs (loop7): mount failed [ 84.312559][ T7304] loop7: detected capacity change from 0 to 512 [ 84.319084][ T7304] EXT4-fs: Ignoring removed nobh option [ 84.381375][ T7304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.1494: corrupted inode contents [ 84.398724][ T7304] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.1494: mark_inode_dirty error [ 84.449407][ T7304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.1494: corrupted inode contents [ 84.470175][ T7304] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.1494: mark_inode_dirty error [ 84.513263][ T29] audit: type=1400 audit(1759461402.670:2258): avc: denied { setopt } for pid=7295 comm="syz.1.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.532727][ T29] audit: type=1400 audit(1759461402.680:2259): avc: denied { override_creds } for pid=7316 comm="syz.0.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.599681][ T29] audit: type=1400 audit(1759461402.750:2260): avc: denied { getopt } for pid=7315 comm="syz.9.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.641940][ T7304] Quota error (device loop7): write_blk: dquota write failed [ 84.661503][ T7304] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 84.689274][ T7304] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.1494: Failed to acquire dquot type 0 [ 84.695896][ T7318] lo speed is unknown, defaulting to 1000 [ 84.709530][ T7304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1494: corrupted inode contents [ 84.730510][ T7304] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.1494: mark_inode_dirty error [ 84.783650][ T7304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1494: corrupted inode contents [ 84.870620][ T7304] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.1494: mark_inode_dirty error [ 84.971550][ T7304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1494: corrupted inode contents [ 84.993957][ T7304] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 85.026897][ T7304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1494: corrupted inode contents [ 85.049276][ T7304] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.1494: mark_inode_dirty error [ 85.099249][ T7304] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 85.118399][ T29] audit: type=1326 audit(1759461403.300:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz.9.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a2c195d67 code=0x7ffc0000 [ 85.141847][ T29] audit: type=1326 audit(1759461403.300:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz.9.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a2c13af79 code=0x7ffc0000 [ 85.142535][ T7304] EXT4-fs (loop7): 1 truncate cleaned up [ 85.165307][ T29] audit: type=1326 audit(1759461403.300:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz.9.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a2c195d67 code=0x7ffc0000 [ 85.194482][ T29] audit: type=1326 audit(1759461403.300:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz.9.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a2c13af79 code=0x7ffc0000 [ 85.220255][ T7304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.233781][ T7304] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.303321][ T7296] syz.1.1491 (7296) used greatest stack depth: 7480 bytes left [ 85.333772][ T6476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.399830][ T7352] loop7: detected capacity change from 0 to 128 [ 85.444472][ T7352] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 85.467999][ T7357] ip6gretap0: entered allmulticast mode [ 85.478888][ T7352] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.568103][ T6476] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.647957][ T7371] tipc: Started in network mode [ 85.652971][ T7371] tipc: Node identity 00000000000000000000000000000001, cluster identity 6 [ 85.661865][ T7371] tipc: Enabling of bearer rejected, failed to enable media [ 85.753966][ T7390] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 85.821669][ T7396] loop9: detected capacity change from 0 to 512 [ 85.838799][ T7396] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1534: casefold flag without casefold feature [ 85.859485][ T7396] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1534: couldn't read orphan inode 15 (err -117) [ 85.872156][ T7396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.056517][ T7411] bridge0: entered promiscuous mode [ 86.062360][ T7411] macsec1: entered promiscuous mode [ 86.071075][ T7411] bridge0: port 3(macsec1) entered blocking state [ 86.077618][ T7411] bridge0: port 3(macsec1) entered disabled state [ 86.109381][ T7411] macsec1: entered allmulticast mode [ 86.114748][ T7411] bridge0: entered allmulticast mode [ 86.130037][ T7411] macsec1: left allmulticast mode [ 86.135191][ T7411] bridge0: left allmulticast mode [ 86.159865][ T7411] bridge0: left promiscuous mode [ 86.225049][ T6901] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.362015][ T7433] SELinux: failed to load policy [ 86.469663][ T7443] __nla_validate_parse: 8 callbacks suppressed [ 86.469680][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1554'. [ 86.492039][ T7443] hsr0: entered promiscuous mode [ 86.704874][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'. [ 86.846611][ T7473] lo speed is unknown, defaulting to 1000 [ 86.979998][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 87.125960][ T7511] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 87.200250][ T7524] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 87.213935][ T7524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.697642][ T7579] netlink: 1684 bytes leftover after parsing attributes in process `syz.7.1614'. [ 87.742775][ T7582] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 87.797011][ T7588] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 87.936291][ T7602] syzkaller0: entered allmulticast mode [ 87.942845][ T7602] syzkaller0: entered promiscuous mode [ 87.949303][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 87.959136][ T7602] syzkaller0 (unregistering): left allmulticast mode [ 87.966014][ T7602] syzkaller0 (unregistering): left promiscuous mode [ 88.411781][ T7633] SELinux: failed to load policy [ 88.529078][ T7644] loop7: detected capacity change from 0 to 512 [ 88.536213][ T7644] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 88.551264][ T7644] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1644: invalid indirect mapped block 4294967295 (level 0) [ 88.565519][ T7644] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1644: invalid indirect mapped block 4294967295 (level 1) [ 88.580194][ T7644] EXT4-fs (loop7): 1 orphan inode deleted [ 88.585998][ T7644] EXT4-fs (loop7): 1 truncate cleaned up [ 88.592677][ T7644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.618507][ T6476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.780099][ T7653] loop7: detected capacity change from 0 to 32768 [ 88.811524][ T7653] loop7: p1 p2 p3 < > [ 88.818103][ T7653] loop7: p2 size 39627 extends beyond EOD, truncated [ 88.818524][ T7664] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 88.924570][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1655'. [ 88.942643][ T7672] hsr0: entered promiscuous mode [ 89.140724][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1665'. [ 89.309314][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 89.309332][ T29] audit: type=1400 audit(1759461407.490:2533): avc: denied { create } for pid=7713 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.335143][ T29] audit: type=1400 audit(1759461407.490:2534): avc: denied { read } for pid=7713 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.383869][ T29] audit: type=1400 audit(1759461407.550:2535): avc: denied { write } for pid=7713 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.312454][ T29] audit: type=1400 audit(1759461408.500:2536): avc: denied { kexec_image_load } for pid=7849 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 90.345966][ T29] audit: type=1400 audit(1759461408.530:2537): avc: denied { mounton } for pid=7847 comm="syz.9.1674" path="/47/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.415321][ T7856] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1676'. [ 90.427165][ T29] audit: type=1400 audit(1759461408.610:2538): avc: denied { read write } for pid=7857 comm="syz.7.1677" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.427393][ T7860] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 90.450663][ T29] audit: type=1400 audit(1759461408.610:2539): avc: denied { open } for pid=7857 comm="syz.7.1677" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.482414][ T7856] batadv0: entered promiscuous mode [ 90.487659][ T7856] batadv0: entered allmulticast mode [ 90.515359][ T7862] loop7: detected capacity change from 0 to 2048 [ 90.524859][ T29] audit: type=1400 audit(1759461408.710:2540): avc: denied { create } for pid=7863 comm="syz.9.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.544954][ T29] audit: type=1400 audit(1759461408.710:2541): avc: denied { bind } for pid=7863 comm="syz.9.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.564850][ T29] audit: type=1400 audit(1759461408.710:2542): avc: denied { write } for pid=7863 comm="syz.9.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.603018][ T7869] tipc: Failed to remove unknown binding: 66,1,1/0:571198148/571198150 [ 90.611442][ T7869] tipc: Failed to remove unknown binding: 66,1,1/0:571198148/571198150 [ 90.656622][ T7875] loop7: detected capacity change from 0 to 2048 [ 90.702050][ T7875] Alternate GPT is invalid, using primary GPT. [ 90.708351][ T7875] loop7: p1 p2 p3 [ 90.712119][ T7875] loop7: partition table partially beyond EOD, truncated [ 90.757365][ T7879] lo speed is unknown, defaulting to 1000 [ 90.798064][ T7885] vlan2: entered allmulticast mode [ 90.895958][ T7902] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.198242][ T7934] hsr0: left promiscuous mode [ 91.219551][ T5475] lo speed is unknown, defaulting to 1000 [ 91.449740][ T7983] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 91.456414][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.463958][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 91.477894][ T7984] vhci_hcd: connection closed [ 91.478157][ T3694] vhci_hcd: stop threads [ 91.487365][ T3694] vhci_hcd: release socket [ 91.491909][ T3694] vhci_hcd: disconnect device [ 91.697507][ T8016] : renamed from bond0 (while UP) [ 92.128942][ T8026] loop8: detected capacity change from 0 to 32768 [ 92.191928][ T8026] loop8: p1 p3 < > [ 92.638917][ T8060] vhci_hcd: default hub control req: 000c v0303 i0006 l0 [ 92.707694][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1771'. [ 92.716844][ T8064] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1771'. [ 92.734336][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1771'. [ 92.743581][ T8064] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1771'. [ 92.752665][ T8064] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1771'. [ 92.874834][ T8020] syz.8.1753 (8020) used greatest stack depth: 7224 bytes left [ 93.838568][ T8118] loop9: detected capacity change from 0 to 4096 [ 93.846939][ T8118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.880031][ T8118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.907609][ T8126] netlink: 'syz.8.1795': attribute type 13 has an invalid length. [ 93.915740][ T8126] netlink: 'syz.8.1795': attribute type 17 has an invalid length. [ 93.973373][ T8132] loop1: detected capacity change from 0 to 512 [ 93.980288][ T8126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.014380][ T8132] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.055438][ T8132] EXT4-fs (loop1): mount failed [ 94.064560][ T8139] loop8: detected capacity change from 0 to 2048 [ 94.072242][ T8139] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.097623][ T8139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.114978][ T8139] Invalid ELF header magic: != ELF [ 94.121125][ T8145] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1803'. [ 94.138055][ T8145] batadv2: entered promiscuous mode [ 94.143674][ T8145] batadv2: entered allmulticast mode [ 94.152267][ T6585] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.240873][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1808'. [ 94.268457][ T6901] ================================================================== [ 94.276584][ T6901] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 94.277428][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.283990][ T6901] [ 94.284001][ T6901] read-write to 0xffff88811a21dd90 of 8 bytes by task 3685 on cpu 0: [ 94.284022][ T6901] __xa_clear_mark+0xf5/0x1e0 [ 94.284052][ T6901] __folio_end_writeback+0xf7/0x410 [ 94.284080][ T6901] folio_end_writeback+0x71/0x3d0 [ 94.315966][ T6901] ext4_finish_bio+0x459/0x8c0 [ 94.320758][ T6901] ext4_release_io_end+0x9f/0x1f0 [ 94.325808][ T6901] ext4_end_io_end+0x18d/0x240 [ 94.330606][ T6901] ext4_end_io_rsv_work+0x151/0x1e0 [ 94.335825][ T6901] process_scheduled_works+0x4cb/0x9d0 [ 94.341308][ T6901] worker_thread+0x582/0x770 [ 94.345926][ T6901] kthread+0x486/0x510 [ 94.350006][ T6901] ret_from_fork+0x11f/0x1b0 [ 94.354612][ T6901] ret_from_fork_asm+0x1a/0x30 [ 94.359412][ T6901] [ 94.361741][ T6901] read to 0xffff88811a21dd90 of 8 bytes by task 6901 on cpu 1: [ 94.369300][ T6901] xas_find_marked+0x218/0x620 [ 94.374077][ T6901] find_get_entry+0x5d/0x380 [ 94.378685][ T6901] filemap_get_folios_tag+0x13b/0x210 [ 94.384076][ T6901] filemap_fdatawait_keep_errors+0x6c/0x180 [ 94.390009][ T6901] sync_inodes_sb+0x39c/0x440 [ 94.394706][ T6901] sync_filesystem+0x102/0x190 [ 94.399488][ T6901] generic_shutdown_super+0x44/0x210 [ 94.404795][ T6901] kill_block_super+0x2a/0x70 [ 94.409485][ T6901] ext4_kill_sb+0x42/0x80 [ 94.413823][ T6901] deactivate_locked_super+0x75/0x1c0 [ 94.419209][ T6901] deactivate_super+0x97/0xa0 [ 94.423932][ T6901] cleanup_mnt+0x269/0x2e0 [ 94.428388][ T6901] __cleanup_mnt+0x19/0x20 [ 94.432826][ T6901] task_work_run+0x12e/0x1a0 [ 94.437466][ T6901] exit_to_user_mode_loop+0xed/0x110 [ 94.442774][ T6901] do_syscall_64+0x1d6/0x200 [ 94.447376][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.453285][ T6901] [ 94.455609][ T6901] value changed: 0xffffffffffffffff -> 0xffffffffffffc000 [ 94.462717][ T6901] [ 94.465048][ T6901] Reported by Kernel Concurrency Sanitizer on: [ 94.471210][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.481146][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.491208][ T6901] ================================================================== [ 94.515609][ T6901] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.550458][ T8159] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1809'.