last executing test programs: 1m57.969500358s ago: executing program 3 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m57.929531819s ago: executing program 3 (id=82): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0xd18}, {{0x0, 0x0, &(0x7f0000002d40)=[{0x0}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x10000}], 0x2, 0x600181a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 1m57.622032174s ago: executing program 3 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) 1m57.584891306s ago: executing program 32 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) 1m27.759356568s ago: executing program 33 (id=1144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) close(r1) 1m12.577014234s ago: executing program 0 (id=1762): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c0001"], 0x25c}}, 0x0) 1m12.384511168s ago: executing program 0 (id=1775): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0) 1m12.313350919s ago: executing program 0 (id=1778): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1m12.294026279s ago: executing program 0 (id=1781): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x8041) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000}) shutdown(r0, 0x1) 1m12.225501981s ago: executing program 0 (id=1785): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m12.113968533s ago: executing program 0 (id=1788): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x84}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="fa", 0x1, 0x0, &(0x7f00000002c0)={0x3a, 0x0, r2}, 0x14) 57.109140886s ago: executing program 34 (id=1788): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x84}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="fa", 0x1, 0x0, &(0x7f00000002c0)={0x3a, 0x0, r2}, 0x14) 50.148401561s ago: executing program 6 (id=2440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 50.085945152s ago: executing program 6 (id=2445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_error\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) 49.887506047s ago: executing program 6 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xd83d, 0x10000, 0x1, 0x384}, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 49.808754638s ago: executing program 6 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 49.789350949s ago: executing program 6 (id=2458): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) clock_getres(0x5, 0x0) 49.518076954s ago: executing program 6 (id=2467): r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 49.517913804s ago: executing program 35 (id=2467): r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 39.623741237s ago: executing program 1 (id=2772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 39.45790941s ago: executing program 1 (id=2785): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r2}, &(0x7f0000000000)=0x8) 38.575600847s ago: executing program 1 (id=2833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc567", 0x9e}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd", 0x1b}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 38.489162439s ago: executing program 1 (id=2827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 38.381871081s ago: executing program 1 (id=2832): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 38.177849805s ago: executing program 1 (id=2839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 38.150032056s ago: executing program 36 (id=2839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 36.027773927s ago: executing program 5 (id=2930): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x160341) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x79) 35.984421108s ago: executing program 5 (id=2918): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x1, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) 35.87812443s ago: executing program 5 (id=2924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000046c0)=@newtaction={0x48, 0x58, 0x284f, 0x0, 0x0, {}, [{0xe, 0x1, [@m_simple={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) 35.836571961s ago: executing program 5 (id=2926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 35.643053665s ago: executing program 5 (id=2933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 35.257892852s ago: executing program 5 (id=2942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 35.254029172s ago: executing program 37 (id=2942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 31.180826822s ago: executing program 3 (id=2944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 31.003336865s ago: executing program 3 (id=3074): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 29.270550399s ago: executing program 3 (id=3121): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 29.270400079s ago: executing program 38 (id=3121): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 795.345855ms ago: executing program 8 (id=4097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) uname(&(0x7f0000000040)=""/100) 765.438695ms ago: executing program 8 (id=4102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 713.557666ms ago: executing program 8 (id=4117): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x100) 676.567657ms ago: executing program 8 (id=4111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) 616.269098ms ago: executing program 9 (id=4113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000010101"], 0xbc}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000040) 584.333859ms ago: executing program 9 (id=4116): r0 = socket(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 516.70333ms ago: executing program 9 (id=4119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x3e, 0x400000000000005, 0x0) 488.574171ms ago: executing program 7 (id=4120): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) 483.981581ms ago: executing program 9 (id=4122): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 456.096041ms ago: executing program 9 (id=4124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000000), 0x10) 433.569602ms ago: executing program 9 (id=4125): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 433.429732ms ago: executing program 8 (id=4126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 358.108413ms ago: executing program 4 (id=4130): r0 = socket(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 357.358543ms ago: executing program 7 (id=4140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 321.984114ms ago: executing program 8 (id=4132): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26e1, 0x0) 321.418804ms ago: executing program 4 (id=4134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x5, 0xb, 0xfffff800, {0x3, 0x0, 0x10, 0x1390, 0x200}, {0x10, 0x2, 0x0, 0x1, 0x7, 0x7}, 0x9, 0xf9, 0x3}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x80}}, 0x0) 271.516795ms ago: executing program 2 (id=4137): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) 252.925415ms ago: executing program 2 (id=4138): signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x4]}, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000180)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x2f}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 233.801486ms ago: executing program 2 (id=4139): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) socket$tipc(0x1e, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 233.126176ms ago: executing program 4 (id=4141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpriority(0x1, 0x0) 216.674406ms ago: executing program 7 (id=4142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 199.504116ms ago: executing program 4 (id=4143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 179.435367ms ago: executing program 7 (id=4144): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2202) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 178.967127ms ago: executing program 2 (id=4145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x400, 0x8, 0x2}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 120.453718ms ago: executing program 7 (id=4146): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) 120.079728ms ago: executing program 7 (id=4147): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7f, @private1, 0x6}, {0xa, 0x4e22, 0x80000000, @remote, 0x1}, 0xffffffffffffffff, 0xb4ae}}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 23.91759ms ago: executing program 2 (id=4148): r0 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 23.77302ms ago: executing program 4 (id=4149): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) 23.06434ms ago: executing program 4 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000002000000000000000008fa60018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 0s ago: executing program 2 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e batadv_slave_1 (retrying later): interface not active [ 109.092002][ T3460] dummy0: left allmulticast mode [ 109.104630][ T3460] dummy0: left promiscuous mode [ 109.110652][ T3460] bridge0: port 3(dummy0) entered disabled state [ 109.120081][ T3460] bridge_slave_1: left allmulticast mode [ 109.126220][ T3460] bridge_slave_1: left promiscuous mode [ 109.133802][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.143099][ T3460] bridge_slave_0: left allmulticast mode [ 109.149860][ T3460] bridge_slave_0: left promiscuous mode [ 109.157129][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.229249][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.240171][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.251324][ T3460] bond0 (unregistering): Released all slaves [ 109.262888][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2437'. [ 109.288345][ T9426] hsr_slave_0: entered promiscuous mode [ 109.295911][ T9426] hsr_slave_1: entered promiscuous mode [ 109.303153][ T9426] debugfs: 'hsr0' already exists in 'hsr' [ 109.310099][ T9426] Cannot create hsr debugfs directory [ 109.317794][ T3460] tipc: Left network mode [ 109.325360][ T3460] hsr_slave_0: left promiscuous mode [ 109.333058][ T3460] hsr_slave_1: left promiscuous mode [ 109.337593][ T9448] netlink: zone id is out of range [ 109.340057][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.353551][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.364547][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.372989][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.384710][ T9451] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 109.452551][ T9455] loop6: detected capacity change from 0 to 512 [ 109.469225][ T9455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.490406][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 109.502826][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 109.512311][ T9455] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.540773][ T9455] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2445: corrupted inode contents [ 109.555521][ T9455] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2445: mark_inode_dirty error [ 109.572161][ T9455] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2445: corrupted inode contents [ 109.586614][ T9455] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2445: mark_inode_dirty error [ 109.588637][ T9459] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.617015][ T9464] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.662643][ T6352] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.844308][ T9492] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.853357][ T9492] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.930920][ T9426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.932964][ T9500] loop4: detected capacity change from 0 to 512 [ 109.947996][ T9426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.958698][ T9500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.974472][ T9500] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.988933][ T9426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.020565][ T3460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.033379][ T3460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.048477][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.062536][ T9426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.090489][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 110.090502][ T29] audit: type=1326 audit(1757311960.865:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.1.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3c00ebe9 code=0x7ffc0000 [ 110.125372][ T29] audit: type=1326 audit(1757311960.865:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.1.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f2a3c00ebe9 code=0x7ffc0000 [ 110.153978][ T29] audit: type=1326 audit(1757311960.865:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9509 comm="syz.1.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3c00ebe9 code=0x7ffc0000 [ 110.183230][ T9516] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2470'. [ 110.196370][ T3460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.208348][ T3460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.221652][ T9516] hsr_slave_0: left promiscuous mode [ 110.231312][ T9516] hsr_slave_1: left promiscuous mode [ 110.241233][ T9519] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2472'. [ 110.258542][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.274832][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.287789][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.295028][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.305617][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.314201][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.330541][ T3460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.342587][ T3460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.359525][ T9504] lo speed is unknown, defaulting to 1000 [ 110.371078][ T9426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.383397][ T9426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.410717][ T3460] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.423925][ T3460] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.494545][ T3460] bridge_slave_1: left allmulticast mode [ 110.501561][ T3460] bridge_slave_1: left promiscuous mode [ 110.508969][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.518385][ T3460] bridge_slave_0: left allmulticast mode [ 110.525918][ T3460] bridge_slave_0: left promiscuous mode [ 110.533835][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.600351][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.613551][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.624981][ T3460] bond0 (unregistering): Released all slaves [ 110.639019][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 110.669217][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.690799][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.700279][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.708558][ T9504] bridge_slave_0: entered allmulticast mode [ 110.717569][ T3460] IPVS: stopping master sync thread 7357 ... [ 110.717647][ T9504] bridge_slave_0: entered promiscuous mode [ 110.733603][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.742339][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.750588][ T9504] bridge_slave_1: entered allmulticast mode [ 110.759439][ T9504] bridge_slave_1: entered promiscuous mode [ 110.780200][ T3460] hsr_slave_0: left promiscuous mode [ 110.787864][ T3460] hsr_slave_1: left promiscuous mode [ 110.794737][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.803605][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.812352][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.821367][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.833126][ T3460] veth1_macvtap: left promiscuous mode [ 110.839293][ T3460] veth0_macvtap: left promiscuous mode [ 110.883570][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 110.897824][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 110.935899][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.946412][ T3384] infiniband syz1: ib_query_port failed (-19) [ 110.951627][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.977676][ T9545] smc: net device bond0 applied user defined pnetid SYZ0 [ 110.986493][ T9545] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.014909][ T9504] team0: Port device team_slave_0 added [ 111.042463][ T9504] team0: Port device team_slave_1 added [ 111.059515][ T9552] netlink: 100 bytes leftover after parsing attributes in process `¬í'. [ 111.097201][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.106167][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.137270][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.174900][ T9558] loop7: detected capacity change from 0 to 512 [ 111.185699][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.194247][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.227564][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.262805][ T9558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.284449][ T29] audit: type=1400 audit(1757311962.055:2991): avc: denied { setattr } for pid=9559 comm="syz.4.2479" name="secretmem" dev="secretmem" ino=25760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.315773][ T9504] hsr_slave_0: entered promiscuous mode [ 111.318106][ T9558] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.323442][ T9504] hsr_slave_1: entered promiscuous mode [ 111.342852][ T9504] debugfs: 'hsr0' already exists in 'hsr' [ 111.351723][ T9504] Cannot create hsr debugfs directory [ 111.396321][ T9426] veth0_vlan: entered promiscuous mode [ 111.404556][ T29] audit: type=1400 audit(1757311962.185:2992): avc: denied { setopt } for pid=9571 comm="syz.1.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.454713][ T9426] veth1_vlan: entered promiscuous mode [ 111.497641][ T29] audit: type=1400 audit(1757311962.255:2993): avc: denied { read write } for pid=9579 comm="syz.4.2484" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.526771][ T29] audit: type=1400 audit(1757311962.255:2994): avc: denied { open } for pid=9579 comm="syz.4.2484" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.559605][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.575786][ T9426] veth0_macvtap: entered promiscuous mode [ 111.592706][ T29] audit: type=1326 audit(1757311962.365:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.7.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 111.622332][ T29] audit: type=1326 audit(1757311962.365:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.7.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 111.636099][ T9504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 111.669380][ T9587] loop4: detected capacity change from 0 to 2048 [ 111.678063][ T29] audit: type=1326 audit(1757311962.435:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.7.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 111.681820][ T9426] veth1_macvtap: entered promiscuous mode [ 111.714775][ T9504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 111.725534][ T9504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 111.729407][ T9590] netlink: 'syz.7.2488': attribute type 2 has an invalid length. [ 111.741922][ T9590] netlink: 'syz.7.2488': attribute type 1 has an invalid length. [ 111.742410][ T9587] loop4: p1 < > p4 [ 111.750527][ T9590] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.2488'. [ 111.768366][ T9587] loop4: p4 size 8388608 extends beyond EOD, truncated [ 111.772303][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.785917][ T9504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 111.804333][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.830755][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.855450][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.875781][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.896307][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.931892][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.951152][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.953403][ T9602] netlink: zone id is out of range [ 111.962973][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.968185][ T9605] random: crng reseeded on system resumption [ 111.974483][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.011952][ T9504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.025605][ T9504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.047597][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.057095][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.155991][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.191765][ T9632] loop5: detected capacity change from 0 to 1024 [ 112.205166][ T9633] loop4: detected capacity change from 0 to 2048 [ 112.220268][ T9632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.241086][ T9633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.273028][ T9426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.381301][ T9504] veth0_vlan: entered promiscuous mode [ 112.409562][ T9504] veth1_vlan: entered promiscuous mode [ 112.441332][ T9662] netlink: 'syz.1.2507': attribute type 27 has an invalid length. [ 112.458123][ T9504] veth0_macvtap: entered promiscuous mode [ 112.472413][ T9504] veth1_macvtap: entered promiscuous mode [ 112.482470][ T9666] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2509'. [ 112.520697][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2512'. [ 112.525806][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.531505][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2512'. [ 112.558641][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.567299][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.599126][ T9678] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2514'. [ 112.606699][ T9662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.625221][ T9662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.674755][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.684850][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.697564][ T9669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.720784][ T3384] lo speed is unknown, defaulting to 1000 [ 112.732877][ T9673] bridge0: port 3(vlan0) entered blocking state [ 112.740260][ T9673] bridge0: port 3(vlan0) entered disabled state [ 112.747968][ T9673] vlan0: entered allmulticast mode [ 112.753974][ T9673] bridge0: entered allmulticast mode [ 112.760913][ T9673] vlan0: left allmulticast mode [ 112.766455][ T9673] bridge0: left allmulticast mode [ 112.779781][ T9678] batadv1: entered promiscuous mode [ 112.785473][ T9678] batadv1: entered allmulticast mode [ 112.803730][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.814229][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.826789][ T3387] lo speed is unknown, defaulting to 1000 [ 112.835014][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.843627][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.854593][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.864821][ T9679] lo speed is unknown, defaulting to 1000 [ 112.877063][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.901704][ T56] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.912078][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.969717][ T56] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.980071][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.014875][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.040458][ T56] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.053926][ T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.064833][ T56] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.217933][ T9715] loop5: detected capacity change from 0 to 128 [ 113.254215][ T9715] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.263428][ T9715] FAT-fs (loop5): Filesystem has been set read-only [ 113.269091][ T9723] loop7: detected capacity change from 0 to 512 [ 113.279386][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.279386][ T9715] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 113.301923][ T9715] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.311138][ T9715] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.338346][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.338346][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.357663][ T9721] netlink: 'syz.8.2532': attribute type 3 has an invalid length. [ 113.372299][ T9723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.391713][ T9729] pimreg: entered allmulticast mode [ 113.410134][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.410134][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.415357][ T9723] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.436941][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.436941][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.453798][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.453798][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.462279][ T9732] pimreg: left allmulticast mode [ 113.470942][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.470942][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.496785][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.496785][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.515606][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.515606][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.532486][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.532486][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.559448][ T9715] syz.5.2528: attempt to access beyond end of device [ 113.559448][ T9715] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.645137][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.717587][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 113.727608][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 113.769355][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 113.779353][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 113.840672][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 113.851433][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 114.045115][ T9787] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 114.070595][ T9787] dummy0: entered promiscuous mode [ 114.681452][ T9831] loop8: detected capacity change from 0 to 512 [ 114.704960][ T9831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.721371][ T9831] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.756259][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.768896][ T9840] SELinux: policydb version 3968 does not match my version range 15-35 [ 114.779195][ T9840] SELinux: failed to load policy [ 115.137729][ T9877] IPVS: Error connecting to the multicast addr [ 115.261619][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 115.261634][ T29] audit: type=1400 audit(1757311966.035:3115): avc: denied { create } for pid=9886 comm="syz.1.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.330083][ T29] audit: type=1400 audit(1757311966.035:3116): avc: denied { write } for pid=9886 comm="syz.1.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.583010][ T29] audit: type=1400 audit(1757311966.355:3117): avc: denied { name_bind } for pid=9913 comm="syz.1.2615" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 115.712825][ T9926] lo speed is unknown, defaulting to 1000 [ 115.736065][ T29] audit: type=1400 audit(1757311966.505:3118): avc: denied { compute_member } for pid=9931 comm="syz.4.2626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 115.784577][ T9935] loop4: detected capacity change from 0 to 164 [ 115.800178][ T9935] rock: directory entry would overflow storage [ 115.807147][ T9935] rock: sig=0x66, size=4, remaining=3 [ 115.809972][ T9939] loop7: detected capacity change from 0 to 2048 [ 115.824995][ T9935] rock: directory entry would overflow storage [ 115.831811][ T9935] rock: sig=0x66, size=4, remaining=3 [ 115.838886][ T9935] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.850527][ T9939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.889869][ T9945] loop4: detected capacity change from 0 to 512 [ 115.912884][ T9945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.935114][ T9945] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.973542][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.051438][ T9960] loop4: detected capacity change from 0 to 1024 [ 116.060188][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.080084][ T9960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.094865][ T9960] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.131890][ T56] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.132225][ T9971] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.157991][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.171787][ T56] EXT4-fs (loop4): This should not happen!! Data will be lost [ 116.171787][ T56] [ 116.183998][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.223275][ T9978] lo speed is unknown, defaulting to 1000 [ 116.256585][ T9982] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 116.270763][ T9981] IPVS: stopping master sync thread 9982 ... [ 116.325283][ T9992] syzkaller1: entered promiscuous mode [ 116.332112][ T9992] syzkaller1: entered allmulticast mode [ 116.365751][ T9997] sctp: [Deprecated]: syz.7.2650 (pid 9997) Use of int in max_burst socket option. [ 116.365751][ T9997] Use struct sctp_assoc_value instead [ 116.410314][ T29] audit: type=1326 audit(1757311967.185:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 116.438250][ T29] audit: type=1326 audit(1757311967.185:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 116.473331][ T29] audit: type=1326 audit(1757311967.185:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 116.501890][ T29] audit: type=1326 audit(1757311967.185:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 116.530480][ T29] audit: type=1326 audit(1757311967.185:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 116.557926][ T29] audit: type=1326 audit(1757311967.185:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 116.651238][T10014] bridge0: port 3(vlan0) entered blocking state [ 116.659179][T10014] bridge0: port 3(vlan0) entered disabled state [ 116.674073][T10014] vlan0: entered allmulticast mode [ 116.680041][T10014] bridge0: entered allmulticast mode [ 116.690069][T10014] vlan0: left allmulticast mode [ 116.695653][T10014] bridge0: left allmulticast mode [ 116.723288][T10023] lo speed is unknown, defaulting to 1000 [ 116.820616][T10031] loop5: detected capacity change from 0 to 256 [ 116.881621][T10036] loop1: detected capacity change from 0 to 512 [ 116.899318][T10036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.914900][T10036] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.971856][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.028750][T10057] bridge0: port 3(vlan2) entered blocking state [ 117.036194][T10057] bridge0: port 3(vlan2) entered disabled state [ 117.046095][T10057] vlan2: entered allmulticast mode [ 117.051947][T10057] bridge0: entered allmulticast mode [ 117.060110][T10057] vlan2: left allmulticast mode [ 117.066025][T10057] bridge0: left allmulticast mode [ 117.359894][T10087] random: crng reseeded on system resumption [ 117.574969][T10105] __nla_validate_parse: 19 callbacks suppressed [ 117.574984][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.593796][T10105] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.603598][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.615561][T10105] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.628845][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.658616][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.668784][T10105] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.680341][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.691918][T10105] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.708072][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 117.780406][T10123] random: crng reseeded on system resumption [ 117.795268][T10125] loop7: detected capacity change from 0 to 1024 [ 117.811807][T10127] SELinux: failed to load policy [ 117.819071][T10125] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 117.832299][T10125] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 117.869283][T10130] lo speed is unknown, defaulting to 1000 [ 117.889777][T10125] JBD2: no valid journal superblock found [ 117.896183][T10125] EXT4-fs (loop7): Could not load journal inode [ 117.909716][T10136] tipc: Started in network mode [ 117.915213][T10136] tipc: Node identity ac14140f, cluster identity 4711 [ 117.927818][T10125] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 117.938852][T10136] tipc: New replicast peer: 255.255.255.255 [ 117.945857][T10136] tipc: Enabled bearer , priority 10 [ 118.204690][T10157] random: crng reseeded on system resumption [ 118.465673][T10192] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 118.467164][T10190] syzkaller1: entered promiscuous mode [ 118.481980][T10190] syzkaller1: entered allmulticast mode [ 118.825482][T10201] loop5: detected capacity change from 0 to 1024 [ 118.843134][T10202] random: crng reseeded on system resumption [ 118.858386][T10201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.881047][T10201] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.930624][ T56] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.953791][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 118.968361][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.968361][ T56] [ 118.989460][ T9426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.059512][T10227] lo speed is unknown, defaulting to 1000 [ 119.067486][ T3354] tipc: Node number set to 2886997007 [ 119.078250][T10234] random: crng reseeded on system resumption [ 119.110015][ T3460] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 119.773019][T10271] netlink: 'syz.1.2767': attribute type 1 has an invalid length. [ 119.790642][T10271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.807049][T10271] bond1: (slave geneve2): making interface the new active one [ 119.817931][T10271] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.828462][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.839402][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.850343][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.860955][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.902509][T10281] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 119.962078][T10292] netlink: 'syz.8.2776': attribute type 6 has an invalid length. [ 120.221367][T10341] loop4: detected capacity change from 0 to 1024 [ 120.249557][T10341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.272956][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 120.272972][ T29] audit: type=1400 audit(1757311971.045:3414): avc: denied { mount } for pid=10340 comm="syz.4.2801" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.308353][ T29] audit: type=1400 audit(1757311971.055:3415): avc: denied { create } for pid=10354 comm="syz.8.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.347954][T10355] netlink: 'syz.8.2807': attribute type 2 has an invalid length. [ 120.357756][T10355] netlink: 'syz.8.2807': attribute type 1 has an invalid length. [ 120.358852][ T29] audit: type=1400 audit(1757311971.135:3416): avc: denied { read write } for pid=10353 comm="syz.5.2806" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.395943][ T29] audit: type=1400 audit(1757311971.135:3417): avc: denied { open } for pid=10353 comm="syz.5.2806" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.425566][ T29] audit: type=1400 audit(1757311971.145:3418): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.450417][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.491553][ T29] audit: type=1400 audit(1757311971.265:3419): avc: denied { create } for pid=10363 comm="syz.7.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.543620][ T29] audit: type=1400 audit(1757311971.295:3420): avc: denied { read } for pid=10362 comm="syz.4.2809" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.571218][ T29] audit: type=1400 audit(1757311971.295:3421): avc: denied { open } for pid=10362 comm="syz.4.2809" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.599421][ T29] audit: type=1400 audit(1757311971.295:3422): avc: denied { ioctl } for pid=10362 comm="syz.4.2809" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.634028][ T29] audit: type=1326 audit(1757311971.315:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 120.667277][T10375] loop4: detected capacity change from 0 to 512 [ 120.738672][T10375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.755892][T10375] ext4 filesystem being mounted at /603/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.825327][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.982904][T10399] syzkaller1: entered promiscuous mode [ 120.989217][T10399] syzkaller1: entered allmulticast mode [ 121.032278][T10403] loop1: detected capacity change from 0 to 1024 [ 121.061532][T10403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.222686][T10420] rdma_op ffff88811a76f580 conn xmit_rdma 0000000000000000 [ 121.309533][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.472464][T10445] syzkaller1: entered promiscuous mode [ 121.478401][T10445] syzkaller1: entered allmulticast mode [ 121.506977][T10449] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.539558][T10451] vhci_hcd: invalid port number 96 [ 121.545382][T10451] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.595682][T10436] lo speed is unknown, defaulting to 1000 [ 121.828599][T10436] chnl_net:caif_netlink_parms(): no params data found [ 121.851408][T10493] loop8: detected capacity change from 0 to 1024 [ 121.870924][T10490] hsr_slave_0: left promiscuous mode [ 121.877686][T10493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.892273][T10490] hsr_slave_1: left promiscuous mode [ 121.906191][T10493] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2866: Allocating blocks 385-513 which overlap fs metadata [ 121.933108][T10493] EXT4-fs (loop8): pa ffff8881004ab930: logic 16, phys. 129, len 24 [ 121.942855][T10493] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 121.968193][T10436] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.977904][T10436] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.988374][T10436] bridge_slave_0: entered allmulticast mode [ 121.995751][T10436] bridge_slave_0: entered promiscuous mode [ 122.014264][T10502] pim6reg1: entered promiscuous mode [ 122.020842][T10502] pim6reg1: entered allmulticast mode [ 122.030338][T10436] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.031746][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.038935][T10436] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.061015][T10436] bridge_slave_1: entered allmulticast mode [ 122.068757][T10436] bridge_slave_1: entered promiscuous mode [ 122.101456][T10512] loop8: detected capacity change from 0 to 512 [ 122.119424][T10436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.138053][T10436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.159170][T10512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.173667][T10512] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.208199][T10436] team0: Port device team_slave_0 added [ 122.215568][T10436] team0: Port device team_slave_1 added [ 122.229541][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.256826][T10436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.265294][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.296548][T10436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.337568][T10436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.345657][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.376246][T10436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.409182][T10537] loop8: detected capacity change from 0 to 164 [ 122.424878][T10537] ISOFS: unable to read i-node block [ 122.431534][T10537] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 122.457122][T10436] hsr_slave_0: entered promiscuous mode [ 122.464182][T10436] hsr_slave_1: entered promiscuous mode [ 122.494421][T10548] sd 0:0:1:0: device reset [ 122.581371][T10559] macsec1: entered allmulticast mode [ 122.588383][T10559] bond0: entered allmulticast mode [ 122.594786][T10559] bond_slave_0: entered allmulticast mode [ 122.601568][T10559] bond_slave_1: entered allmulticast mode [ 122.611541][T10559] bond0: left allmulticast mode [ 122.617630][T10559] bond_slave_0: left allmulticast mode [ 122.624335][T10559] bond_slave_1: left allmulticast mode [ 122.682578][T10436] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 122.698947][T10571] netlink: 'syz.8.2901': attribute type 1 has an invalid length. [ 122.704813][T10436] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 122.729570][T10575] __nla_validate_parse: 24 callbacks suppressed [ 122.729585][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.730850][T10571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.736604][T10575] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.748927][T10436] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 122.754707][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.754722][T10575] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.793965][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.813743][T10571] bond1: (slave geneve2): making interface the new active one [ 122.815681][T10578] SELinux: ebitmap: truncated map [ 122.825417][T10571] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 122.828957][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.843284][T10578] SELinux: failed to load policy [ 122.848240][T10575] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.848261][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.848271][T10575] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.868209][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2902'. [ 122.912517][T10436] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 123.008807][T10436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.022346][T10436] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.033322][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.041594][ T1880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.057898][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.067050][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.128375][T10436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.219047][T10436] veth0_vlan: entered promiscuous mode [ 123.227537][T10436] veth1_vlan: entered promiscuous mode [ 123.243830][T10436] veth0_macvtap: entered promiscuous mode [ 123.252626][T10436] veth1_macvtap: entered promiscuous mode [ 123.264574][T10436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.277994][T10436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.290758][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.300602][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.310708][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.321960][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.425737][T10643] loop8: detected capacity change from 0 to 256 [ 123.468924][T10643] bio_check_eod: 12699 callbacks suppressed [ 123.468940][T10643] syz.8.2915: attempt to access beyond end of device [ 123.468940][T10643] loop8: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 123.499026][T10643] syz.8.2915: attempt to access beyond end of device [ 123.499026][T10643] loop8: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 123.573037][T10656] pim6reg: entered allmulticast mode [ 123.600824][T10656] pim6reg: left allmulticast mode [ 123.620487][T10658] netlink: 'syz.5.2924': attribute type 1 has an invalid length. [ 123.693666][T10662] loop5: detected capacity change from 0 to 1024 [ 123.757954][T10670] loop8: detected capacity change from 0 to 128 [ 123.777975][T10662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.817333][T10670] syz.8.2931: attempt to access beyond end of device [ 123.817333][T10670] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 123.857198][T10670] syz.8.2931: attempt to access beyond end of device [ 123.857198][T10670] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 123.896045][T10670] syz.8.2931: attempt to access beyond end of device [ 123.896045][T10670] loop8: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 123.910763][T10670] buffer_io_error: 22 callbacks suppressed [ 123.910778][T10670] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 123.948796][T10654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.953829][T10670] syz.8.2931: attempt to access beyond end of device [ 123.953829][T10670] loop8: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 124.007529][T10670] syz.8.2931: attempt to access beyond end of device [ 124.007529][T10670] loop8: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 124.042883][T10670] syz.8.2931: attempt to access beyond end of device [ 124.042883][T10670] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 124.059027][T10670] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 124.075770][T10670] syz.8.2931: attempt to access beyond end of device [ 124.075770][T10670] loop8: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 124.098836][T10670] syz.8.2931: attempt to access beyond end of device [ 124.098836][T10670] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 124.114645][T10670] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 124.125612][T10670] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 124.126535][ T3460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.168775][T10670] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 124.186697][T10670] Buffer I/O error on dev loop8, logical block 116, lost async page write [ 124.200912][T10670] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 124.210838][T10670] Buffer I/O error on dev loop8, logical block 108, lost async page write [ 124.222151][T10670] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 124.233048][T10670] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 124.247893][ T3460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.322184][ T3460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.372870][T10697] loop7: detected capacity change from 0 to 8192 [ 124.384746][ T3460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.474971][ T3460] bridge_slave_1: left allmulticast mode [ 124.482226][ T3460] bridge_slave_1: left promiscuous mode [ 124.489377][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.506419][ T3460] bridge_slave_0: left allmulticast mode [ 124.513035][ T3460] bridge_slave_0: left promiscuous mode [ 124.513146][T10731] loop9: detected capacity change from 0 to 128 [ 124.521174][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.551429][T10731] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.579570][T10731] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.592762][ T3460] bond1 (unregistering): (slave geneve2): Releasing active interface [ 124.599763][T10734] SELinux: failed to load policy [ 124.612387][T10731] EXT4-fs error (device loop9): ext4_validate_block_bitmap:423: comm syz.9.2955: bg 0: bad block bitmap checksum [ 124.641259][T10738] loop7: detected capacity change from 0 to 164 [ 124.651220][T10738] ISOFS: unable to read i-node block [ 124.651649][T10436] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.657515][T10738] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 124.689955][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.700551][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.711464][ T3460] bond0 (unregistering): Released all slaves [ 124.721815][ T3460] bond1 (unregistering): Released all slaves [ 124.769012][T10705] lo speed is unknown, defaulting to 1000 [ 124.802971][ T3460] hsr_slave_0: left promiscuous mode [ 124.814157][ T3460] hsr_slave_1: left promiscuous mode [ 124.827397][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.838488][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.859594][T10761] loop9: detected capacity change from 0 to 512 [ 124.868752][T10761] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 124.890622][T10761] EXT4-fs (loop9): 1 truncate cleaned up [ 124.900677][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 124.910320][T10761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.931556][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 124.953778][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.978051][ T36] lo speed is unknown, defaulting to 1000 [ 124.984701][ T36] infiniband syz0: ib_query_port failed (-19) [ 125.002205][T10769] SELinux: ebitmap: truncated map [ 125.011745][T10769] SELinux: failed to load policy [ 125.044367][T10771] loop7: detected capacity change from 0 to 2048 [ 125.093815][T10771] Alternate GPT is invalid, using primary GPT. [ 125.095523][T10705] chnl_net:caif_netlink_parms(): no params data found [ 125.100849][T10771] loop7: p2 p3 p7 [ 125.187716][T10705] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.195908][T10705] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.205627][T10705] bridge_slave_0: entered allmulticast mode [ 125.213030][T10705] bridge_slave_0: entered promiscuous mode [ 125.221881][T10705] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.230063][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.239465][T10705] bridge_slave_1: entered allmulticast mode [ 125.248480][T10705] bridge_slave_1: entered promiscuous mode [ 125.267714][T10794] tipc: Started in network mode [ 125.273529][T10794] tipc: Node identity ae611441ae35, cluster identity 4711 [ 125.282124][T10794] tipc: Enabled bearer , priority 0 [ 125.313329][T10705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.325438][T10793] tipc: Disabling bearer [ 125.333628][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 125.333642][ T29] audit: type=1400 audit(1757311976.115:3613): avc: denied { connect } for pid=10798 comm="syz.8.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.379655][T10705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.381022][ T29] audit: type=1400 audit(1757311976.115:3614): avc: denied { setopt } for pid=10798 comm="syz.8.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.418068][T10801] SELinux: ebitmap: truncated map [ 125.440572][T10801] SELinux: failed to load policy [ 125.461957][T10809] netlink: 'syz.7.2988': attribute type 21 has an invalid length. [ 125.479009][T10705] team0: Port device team_slave_0 added [ 125.486015][ T29] audit: type=1400 audit(1757311976.205:3615): avc: denied { read } for pid=10804 comm="syz.8.2986" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.502155][T10705] team0: Port device team_slave_1 added [ 125.514343][ T29] audit: type=1400 audit(1757311976.205:3616): avc: denied { open } for pid=10804 comm="syz.8.2986" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.550947][ T29] audit: type=1400 audit(1757311976.305:3617): avc: denied { ioctl } for pid=10804 comm="syz.8.2986" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.580734][ T29] audit: type=1400 audit(1757311976.335:3618): avc: denied { read } for pid=10814 comm="syz.9.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.637530][ T29] audit: type=1400 audit(1757311976.385:3619): avc: denied { write } for pid=10814 comm="syz.9.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.675948][ T3460] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.719186][ T29] audit: type=1400 audit(1757311976.474:3620): avc: denied { setopt } for pid=10821 comm="syz.4.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.742765][ T29] audit: type=1400 audit(1757311976.474:3621): avc: denied { write } for pid=10821 comm="syz.4.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.792283][ T3460] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.827915][T10705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.836481][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.866314][T10705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.896593][T10705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.905279][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.936279][T10705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.954801][ T3460] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.966849][T10840] loop8: detected capacity change from 0 to 512 [ 125.977547][T10840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.991777][ T29] audit: type=1400 audit(1757311976.754:3622): avc: denied { bind } for pid=10841 comm="syz.7.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.008456][T10840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.032385][T10840] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.069188][ T3460] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.087182][T10705] hsr_slave_0: entered promiscuous mode [ 126.096506][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.112867][T10705] hsr_slave_1: entered promiscuous mode [ 126.120184][T10705] debugfs: 'hsr0' already exists in 'hsr' [ 126.127106][T10705] Cannot create hsr debugfs directory [ 126.180678][ T3460] bridge_slave_1: left allmulticast mode [ 126.188018][ T3460] bridge_slave_1: left promiscuous mode [ 126.194712][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.205079][T10851] SELinux: ebitmap: truncated map [ 126.215269][T10851] SELinux: failed to load policy [ 126.230266][ T3460] bridge_slave_0: left allmulticast mode [ 126.237013][ T3460] bridge_slave_0: left promiscuous mode [ 126.243188][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.374666][T10879] loop7: detected capacity change from 0 to 512 [ 126.388370][T10879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.402657][T10879] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.419433][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.439072][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.456399][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.457547][ T3460] bond0 (unregistering): Released all slaves [ 126.506008][T10885] usb usb1: usbfs: process 10885 (syz.7.3018) did not claim interface 4 before use [ 126.539164][ T3460] tipc: Disabling bearer [ 126.545840][ T3460] tipc: Left network mode [ 126.576940][ T3460] hsr_slave_0: left promiscuous mode [ 126.592502][ T3460] hsr_slave_1: left promiscuous mode [ 126.599464][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.608220][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.617655][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.627127][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.655264][ T3460] veth1_macvtap: left promiscuous mode [ 126.661997][ T3460] veth0_macvtap: left promiscuous mode [ 126.669216][ T3460] veth1_vlan: left promiscuous mode [ 126.684594][ T3460] veth0_vlan: left promiscuous mode [ 126.696463][T10905] loop9: detected capacity change from 0 to 512 [ 126.704779][T10905] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 126.739108][T10905] EXT4-fs (loop9): 1 orphan inode deleted [ 126.745399][T10905] EXT4-fs (loop9): 1 truncate cleaned up [ 126.755348][T10905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.778487][T10905] EXT4-fs error (device loop9): ext4_lookup:1787: inode #16: comm syz.9.3024: iget: bad extra_isize 46 (inode size 256) [ 126.798068][T10905] EXT4-fs (loop9): Remounting filesystem read-only [ 126.830235][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 126.830550][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.851248][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 127.020771][T10944] loop4: detected capacity change from 0 to 512 [ 127.028096][T10944] EXT4-fs: Ignoring removed nobh option [ 127.039519][T10944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.126090][T10958] netlink: 'syz.9.3040': attribute type 1 has an invalid length. [ 127.162983][T10963] loop8: detected capacity change from 0 to 512 [ 127.171767][T10966] loop9: detected capacity change from 0 to 128 [ 127.185694][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.198349][T10963] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3042: bg 0: block 248: padding at end of block bitmap is not set [ 127.227914][T10963] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3042: Failed to acquire dquot type 1 [ 127.255158][T10963] EXT4-fs (loop8): 1 truncate cleaned up [ 127.287914][T10963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.312188][T10705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.332943][T10705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.361912][T10963] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.391153][T10705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.404427][T10705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.435646][T10963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.485370][T11020] loop7: detected capacity change from 0 to 764 [ 127.553025][T11032] loop8: detected capacity change from 0 to 512 [ 127.554081][T11030] loop7: detected capacity change from 0 to 512 [ 127.582409][T10705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.588305][T11030] EXT4-fs: Ignoring removed orlov option [ 127.601838][T11032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.609704][T10705] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.636195][T11030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.653566][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.661575][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.685859][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.695393][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.705444][T11030] EXT4-fs (loop7): orphan cleanup on readonly fs [ 127.711828][T10705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.726361][T10705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.742322][T11030] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3057: bg 0: block 248: padding at end of block bitmap is not set [ 127.783428][T11030] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3057: Failed to acquire dquot type 1 [ 127.808112][T11030] EXT4-fs (loop7): 1 truncate cleaned up [ 127.820587][T11030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.847171][T11046] veth1_to_bond: entered allmulticast mode [ 127.856506][T11030] EXT4-fs: Ignoring removed orlov option [ 127.867071][T11030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.872492][T11046] veth1_to_bond: entered promiscuous mode [ 127.887033][T11030] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 127.903345][T11045] veth1_to_bond: left promiscuous mode [ 127.910239][T11045] veth1_to_bond: left allmulticast mode [ 127.930823][T10705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.937998][T11030] EXT4-fs error (device loop7): __ext4_remount:6740: comm syz.7.3057: Abort forced by user [ 127.969632][T11030] EXT4-fs (loop7): Remounting filesystem read-only [ 127.977377][T11030] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 128.025380][T11030] ext4 filesystem being remounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.081369][T10705] veth0_vlan: entered promiscuous mode [ 128.099206][T11075] loop7: detected capacity change from 0 to 128 [ 128.112138][T10705] veth1_vlan: entered promiscuous mode [ 128.122058][T11075] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.135626][T11062] loop9: detected capacity change from 0 to 8192 [ 128.165960][T10705] veth0_macvtap: entered promiscuous mode [ 128.174466][T11062] loop9: p1 p2 p4 < > [ 128.179268][T11062] loop9: partition table partially beyond EOD, truncated [ 128.192609][T11062] loop9: p1 start 16777224 is beyond EOD, truncated [ 128.201100][T11062] loop9: p2 size 515840 extends beyond EOD, truncated [ 128.203527][T10705] veth1_macvtap: entered promiscuous mode [ 128.210251][T11062] loop9: p4 start 16777216 is beyond EOD, truncated [ 128.242520][T10705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.253342][T10705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.267104][ T1880] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.293388][ T1880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.325968][ T1880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.346636][ T1880] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.373497][T11101] __nla_validate_parse: 12 callbacks suppressed [ 128.373515][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3066'. [ 128.375631][T11100] loop3: detected capacity change from 0 to 1024 [ 128.521227][T11123] tipc: Started in network mode [ 128.527154][T11123] tipc: Node identity 36eb7371bdd6, cluster identity 4711 [ 128.535704][T11123] tipc: Enabled bearer , priority 0 [ 128.563506][T11123] tipc: Disabling bearer [ 128.633170][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3080'. [ 128.646581][T11143] netlink: 'syz.4.3081': attribute type 3 has an invalid length. [ 128.979859][T11209] tipc: Started in network mode [ 128.985353][T11209] tipc: Node identity c26cc8c34e2c, cluster identity 4711 [ 128.993067][T11209] tipc: Enabled bearer , priority 0 [ 129.003058][T11209] tipc: Disabling bearer [ 129.082023][T11227] loop8: detected capacity change from 0 to 764 [ 129.121994][T11232] loop7: detected capacity change from 0 to 2048 [ 129.179200][T11232] loop7: p1 < > p4 [ 129.185510][T11244] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3101'. [ 129.196200][T11232] loop7: p4 size 8388608 extends beyond EOD, truncated [ 129.819805][T11276] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3107'. [ 129.836067][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3107'. [ 129.908116][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3110'. [ 129.986412][T11288] syzkaller1: entered promiscuous mode [ 129.993785][T11288] syzkaller1: entered allmulticast mode [ 130.021347][T11292] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3116'. [ 130.185169][ T1880] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.389019][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 130.389032][ T29] audit: type=1400 audit(1757311981.154:3718): avc: denied { name_connect } for pid=11321 comm="syz.8.3127" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 130.524424][ T29] audit: type=1400 audit(1757311981.284:3719): avc: denied { setopt } for pid=11333 comm="syz.7.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.577745][T11315] chnl_net:caif_netlink_parms(): no params data found [ 130.659844][T11315] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.668394][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.678724][T11315] bridge_slave_0: entered allmulticast mode [ 130.686615][T11315] bridge_slave_0: entered promiscuous mode [ 130.695479][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.703817][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.712724][T11315] bridge_slave_1: entered allmulticast mode [ 130.720184][T11315] bridge_slave_1: entered promiscuous mode [ 130.888421][T11315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.918298][T11315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.952216][T11315] team0: Port device team_slave_0 added [ 130.959364][T11315] team0: Port device team_slave_1 added [ 130.974519][T11315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.984479][T11315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.014773][T11315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.029349][T11315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.037805][T11315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.067442][T11315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.094458][T11315] hsr_slave_0: entered promiscuous mode [ 131.101664][T11315] hsr_slave_1: entered promiscuous mode [ 131.108299][T11315] debugfs: 'hsr0' already exists in 'hsr' [ 131.115542][T11315] Cannot create hsr debugfs directory [ 131.347641][T11315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.359430][T11315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.370501][T11315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.381707][T11315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.426095][T11315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.442076][T11315] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.454637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.462559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.484624][T11315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.497447][T11315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.518492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.525876][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.580210][T11315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.653982][T11315] veth0_vlan: entered promiscuous mode [ 131.664442][T11315] veth1_vlan: entered promiscuous mode [ 131.683358][T11315] veth0_macvtap: entered promiscuous mode [ 131.693052][T11315] veth1_macvtap: entered promiscuous mode [ 131.705105][T11315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.718689][T11315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.731534][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.748714][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.776985][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.811827][ T29] audit: type=1326 audit(1757311982.574:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.839016][ T29] audit: type=1326 audit(1757311982.574:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.839296][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.867529][ T29] audit: type=1326 audit(1757311982.574:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.905365][ T29] audit: type=1326 audit(1757311982.574:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.937580][ T29] audit: type=1326 audit(1757311982.574:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.965141][ T29] audit: type=1326 audit(1757311982.574:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.969261][T11449] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3136'. [ 131.993570][ T29] audit: type=1326 audit(1757311982.574:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 131.993607][ T29] audit: type=1326 audit(1757311982.574:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 132.087984][ T1880] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.125951][T11466] loop7: detected capacity change from 0 to 128 [ 132.137375][T11457] loop4: detected capacity change from 0 to 512 [ 132.147919][T11449] hsr_slave_0: left promiscuous mode [ 132.154567][T11466] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 132.165589][T11457] EXT4-fs: Ignoring removed orlov option [ 132.174006][T11449] hsr_slave_1: left promiscuous mode [ 132.198878][T11457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.226579][T11466] FAT-fs (loop7): FAT read failed (blocknr 128) [ 132.235635][ T1880] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.251212][T11457] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.272197][T11457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3139: bg 0: block 248: padding at end of block bitmap is not set [ 132.291602][T11457] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3139: Failed to acquire dquot type 1 [ 132.319815][ T1880] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.337281][T11457] EXT4-fs (loop4): 1 truncate cleaned up [ 132.347510][T11457] EXT4-fs mount: 6 callbacks suppressed [ 132.347587][T11457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.372484][T11457] EXT4-fs: Ignoring removed orlov option [ 132.379227][T11457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.441140][T11457] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 132.448783][T11499] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3150'. [ 132.464383][ T1880] bridge_slave_1: left allmulticast mode [ 132.472966][ T1880] bridge_slave_1: left promiscuous mode [ 132.479433][ T1880] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.497457][T11499] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3150'. [ 132.519119][T11457] EXT4-fs error (device loop4): __ext4_remount:6740: comm syz.4.3139: Abort forced by user [ 132.531254][ T1880] bridge_slave_0: left allmulticast mode [ 132.538685][ T1880] bridge_slave_0: left promiscuous mode [ 132.544760][ T1880] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.555959][T11457] EXT4-fs (loop4): Remounting filesystem read-only [ 132.563796][T11457] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 132.585934][T11457] ext4 filesystem being remounted at /661/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.657920][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.730576][ T1880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.742747][ T1880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.758929][ T1880] bond0 (unregistering): Released all slaves [ 132.781379][T11519] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 132.786390][T11543] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.802920][T11543] vhci_hcd: invalid port number 253 [ 132.840665][ T1880] hsr_slave_0: left promiscuous mode [ 132.859042][ T1880] hsr_slave_1: left promiscuous mode [ 132.865874][ T1880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.874441][ T1880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.904525][ T1880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.912525][ T1880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.980352][T11576] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.008749][ T1880] veth1_macvtap: left promiscuous mode [ 133.014973][ T1880] veth0_macvtap: left promiscuous mode [ 133.021320][ T1880] veth1_vlan: left promiscuous mode [ 133.049271][ T1880] veth0_vlan: left promiscuous mode [ 133.254841][T11602] SELinux: failed to load policy [ 133.273267][ T1880] team0 (unregistering): Port device team_slave_1 removed [ 133.286823][ T1880] team0 (unregistering): Port device team_slave_0 removed [ 133.439257][T11618] batadv_slave_1: entered promiscuous mode [ 133.478366][T11618] __nla_validate_parse: 8 callbacks suppressed [ 133.478380][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 133.495888][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.518680][T11618] batadv_slave_1 (unregistering): left promiscuous mode [ 133.561869][T11618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.703303][T11654] loop8: detected capacity change from 0 to 1024 [ 133.711971][T11654] EXT4-fs: Ignoring removed orlov option [ 133.729679][T11654] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.770601][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.915756][T11692] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 134.087954][T11722] ref_ctr_offset mismatch. inode: 0xdae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 134.484839][T11759] loop7: detected capacity change from 0 to 1024 [ 134.492107][T11759] EXT4-fs: Ignoring removed orlov option [ 134.508997][T11759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.524847][T11759] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.545887][T11759] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 134.566194][T11759] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 134.581538][T11759] EXT4-fs (loop7): This should not happen!! Data will be lost [ 134.581538][T11759] [ 134.593605][T11759] EXT4-fs (loop7): Total free blocks count 0 [ 134.600789][T11759] EXT4-fs (loop7): Free/Dirty block details [ 134.608179][T11759] EXT4-fs (loop7): free_blocks=4293918720 [ 134.614841][T11759] EXT4-fs (loop7): dirty_blocks=16 [ 134.620652][T11759] EXT4-fs (loop7): Block reservation details [ 134.627715][T11759] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 134.661705][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.751183][T11786] loop9: detected capacity change from 0 to 512 [ 134.768254][T11786] EXT4-fs error (device loop9): ext4_quota_enable:7128: inode #4: comm syz.9.3246: iget: bogus i_mode (4200) [ 134.782955][T11786] EXT4-fs error (device loop9): ext4_quota_enable:7131: comm syz.9.3246: Bad quota inode: 4, type: 1 [ 134.797404][T11786] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.818209][T11786] EXT4-fs (loop9): mount failed [ 134.853937][T11796] loop7: detected capacity change from 0 to 164 [ 135.001939][T11812] loop9: detected capacity change from 0 to 1024 [ 135.031549][T11812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.067359][T11822] loop8: detected capacity change from 0 to 512 [ 135.069374][T11812] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.3258: Allocating blocks 449-513 which overlap fs metadata [ 135.074710][T11822] EXT4-fs: Ignoring removed nobh option [ 135.093150][T11820] pim6reg: entered allmulticast mode [ 135.111373][T11820] pim6reg: left allmulticast mode [ 135.118448][T11822] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3262: corrupted inode contents [ 135.132664][T11822] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.3262: mark_inode_dirty error [ 135.132728][T11811] EXT4-fs (loop9): pa ffff8881004aba10: logic 48, phys. 177, len 21 [ 135.147162][T11822] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3262: corrupted inode contents [ 135.155013][T11811] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 135.170344][T11822] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3262: mark_inode_dirty error [ 135.195400][T11822] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3262: Failed to acquire dquot type 0 [ 135.210712][T11822] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3262: corrupted inode contents [ 135.226247][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.232950][T11822] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.3262: mark_inode_dirty error [ 135.250823][T11822] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3262: corrupted inode contents [ 135.266804][T11822] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3262: mark_inode_dirty error [ 135.281720][T11826] loop7: detected capacity change from 0 to 512 [ 135.290403][T11822] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3262: corrupted inode contents [ 135.305768][T11822] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 135.316102][T11822] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3262: corrupted inode contents [ 135.324041][T11826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.330664][T11822] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.3262: mark_inode_dirty error [ 135.349413][T11826] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.364768][T11822] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 135.418514][T11822] EXT4-fs (loop8): 1 truncate cleaned up [ 135.425167][T11822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.440031][T11822] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.475110][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 135.475211][ T29] audit: type=1326 audit(1757311986.234:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.527877][ T29] audit: type=1326 audit(1757311986.234:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.555439][ T29] audit: type=1326 audit(1757311986.234:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.582361][ T29] audit: type=1326 audit(1757311986.244:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.609467][ T29] audit: type=1326 audit(1757311986.244:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.637720][ T29] audit: type=1326 audit(1757311986.244:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.664629][ T29] audit: type=1326 audit(1757311986.244:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.693151][ T29] audit: type=1400 audit(1757311986.274:3860): avc: denied { ioctl } for pid=11825 comm="syz.7.3264" path="/234/file1/file1" dev="loop7" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.723546][ T29] audit: type=1326 audit(1757311986.284:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f643f4b14a5 code=0x7ffc0000 [ 135.754210][ T29] audit: type=1326 audit(1757311986.454:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f643f47ebe9 code=0x7ffc0000 [ 135.755707][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.808349][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.891198][T11858] openvswitch: netlink: Message has 6 unknown bytes. [ 136.293410][T11906] loop4: detected capacity change from 0 to 764 [ 136.303766][T11906] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 136.317661][T11906] Symlink component flag not implemented [ 136.324102][T11906] Symlink component flag not implemented (7) [ 136.421280][T11915] loop7: detected capacity change from 0 to 128 [ 136.438490][T11915] msdos: Unknown parameter 'dot–' [ 136.535989][T11923] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.678157][T11940] loop4: detected capacity change from 0 to 512 [ 136.698315][T11940] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 136.727941][T11940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 136.747064][T11940] System zones: 1-12 [ 136.751753][T11940] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.786270][T11940] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3316: bg 0: block 361: padding at end of block bitmap is not set [ 136.853603][T11940] EXT4-fs (loop4): Remounting filesystem read-only [ 136.862610][T11940] EXT4-fs (loop4): 1 truncate cleaned up [ 136.869669][T11940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 136.979880][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 136.991765][T11977] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3332'. [ 137.092580][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3336'. [ 137.139455][T11996] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.162059][T11996] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 137.531033][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3354'. [ 137.581097][T12010] loop8: detected capacity change from 0 to 32768 [ 137.607408][T12030] netlink: 'syz.7.3355': attribute type 7 has an invalid length. [ 137.638996][T12010] loop8: p1 p3 < > [ 137.675209][T12034] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 137.684798][T12034] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 137.769851][T12039] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 137.792800][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 137.873879][T12060] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.874343][T12056] loop8: detected capacity change from 0 to 256 [ 138.022081][T12086] loop4: detected capacity change from 0 to 256 [ 138.057343][T12086] Invalid ELF header magic: != ELF [ 138.411239][T12129] smc: net device bond0 applied user defined pnetid SYZ0 [ 138.437334][T12129] smc: net device bond0 erased user defined pnetid SYZ0 [ 138.549932][T12137] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.584381][T12139] loop4: detected capacity change from 0 to 2048 [ 138.627234][T12139] loop4: p1 < > p4 [ 138.634736][T12139] loop4: p4 size 8388608 extends beyond EOD, truncated [ 138.646974][T12137] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.683119][T12150] vlan0: entered allmulticast mode [ 138.693787][T12150] dummy0: entered allmulticast mode [ 138.723850][T12137] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.800922][T12137] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.830425][T12161] loop9: detected capacity change from 0 to 1024 [ 138.889272][T12161] EXT4-fs: Ignoring removed bh option [ 138.895616][T12161] EXT4-fs: inline encryption not supported [ 138.898427][ T41] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.907036][T12161] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.947549][ T1880] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.957952][ T1880] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.976882][T12161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 139.004448][T12161] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.3417: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.030825][T12179] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 139.045149][T12161] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3417: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.071163][T12161] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3417: Failed to acquire dquot type 0 [ 139.092381][ T1880] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.118223][T12186] loop8: detected capacity change from 0 to 512 [ 139.125786][T12161] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.139493][T12161] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3417: mark_inode_dirty error [ 139.153719][T12161] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 139.166025][T12161] EXT4-fs (loop9): 1 orphan inode deleted [ 139.173524][T12161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.174440][T12186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.194153][ T31] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.224080][T12192] ref_ctr_offset mismatch. inode: 0xf00 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 139.224260][ T31] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 139.252049][T12186] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.280474][ T3750] kernel write not supported for file bpf-prog (pid: 3750 comm: kworker/0:4) [ 139.290078][T12161] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.311331][T12200] netlink: 'syz.2.3434': attribute type 2 has an invalid length. [ 139.319546][T12200] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 139.328867][T12200] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3434'. [ 139.365290][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.380721][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.423968][T12203] vhci_hcd: invalid port number 96 [ 139.430202][T12203] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 139.508916][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3441'. [ 139.560915][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3441'. [ 139.573882][T12220] netlink: 'syz.8.3442': attribute type 7 has an invalid length. [ 139.583737][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3441'. [ 139.620498][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3441'. [ 139.637120][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3441'. [ 139.682888][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3441'. [ 139.797717][T12249] loop9: detected capacity change from 0 to 128 [ 139.816069][T12249] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3453'. [ 139.833417][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3453'. [ 139.845905][T12255] netlink: 'syz.8.3456': attribute type 10 has an invalid length. [ 139.854825][T12255] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3456'. [ 139.886832][T12255] dummy0: entered promiscuous mode [ 140.033254][T12282] netlink: 'syz.4.3468': attribute type 7 has an invalid length. [ 140.045101][T12284] loop9: detected capacity change from 0 to 512 [ 140.071185][T12284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.096694][T12284] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.135478][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.209911][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.218135][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.262607][T12307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.301268][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.316313][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.328299][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.341972][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.431034][T12327] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 140.440594][T12327] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 140.527672][T12338] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 140.720815][T12352] vlan1: entered allmulticast mode [ 140.728708][T12352] dummy0: entered allmulticast mode [ 140.852233][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 140.852249][ T29] audit: type=1326 audit(1757311991.614:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 140.906659][ T29] audit: type=1326 audit(1757311991.614:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 140.934137][ T29] audit: type=1326 audit(1757311991.634:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 140.961599][ T29] audit: type=1326 audit(1757311991.634:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 140.988899][ T29] audit: type=1326 audit(1757311991.634:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 141.015352][ T29] audit: type=1326 audit(1757311991.634:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 141.043311][ T29] audit: type=1326 audit(1757311991.634:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.7.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 141.223575][T12393] syzkaller1: entered promiscuous mode [ 141.230228][T12393] syzkaller1: entered allmulticast mode [ 141.463714][T12416] loop7: detected capacity change from 0 to 128 [ 141.472275][T12416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 141.482062][T12416] System zones: 1-3, 19-19, 35-36 [ 141.490623][T12416] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.505181][T12416] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.561026][ T8866] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.855593][ T29] audit: type=1400 audit(1757311992.614:4176): avc: denied { map } for pid=12457 comm="syz.4.3537" path="socket:[36141]" dev="sockfs" ino=36141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.882789][ T29] audit: type=1400 audit(1757311992.614:4177): avc: denied { read } for pid=12457 comm="syz.4.3537" path="socket:[36141]" dev="sockfs" ino=36141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.107687][T12478] SELinux: failed to load policy [ 142.152722][T12480] SELinux: ebitmap start bit (1952802677) is not a multiple of the map unit size (64) [ 142.164929][T12480] SELinux: failed to load policy [ 142.361941][ T29] audit: type=1400 audit(1757311993.124:4178): avc: denied { wake_alarm } for pid=12495 comm="syz.7.3555" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.472061][T12504] vlan0: entered allmulticast mode [ 142.478769][T12504] dummy0: entered allmulticast mode [ 142.797884][T12524] program syz.8.3566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.012252][T12558] vlan2: entered allmulticast mode [ 143.018978][T12558] dummy0: entered allmulticast mode [ 143.386555][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.400274][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.497294][T12611] loop8: detected capacity change from 0 to 8192 [ 143.505311][T12615] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 143.558973][T12619] bridge0: port 3(batadv1) entered blocking state [ 143.566372][T12619] bridge0: port 3(batadv1) entered disabled state [ 143.578406][T12619] batadv1: entered allmulticast mode [ 143.585505][T12619] batadv1: entered promiscuous mode [ 143.617048][T12631] loop8: detected capacity change from 0 to 512 [ 143.649132][T12631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.663511][T12631] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.690817][T12631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.066871][ T1880] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 144.078102][ T1880] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 144.604772][T12662] loop9: detected capacity change from 0 to 512 [ 144.617816][T12668] loop8: detected capacity change from 0 to 512 [ 144.632050][T12670] vlan2: entered allmulticast mode [ 144.653371][T12670] dummy0: entered allmulticast mode [ 144.664785][T12668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.683790][T12662] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.702371][T12668] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.714875][T12662] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.750996][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.768430][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.794506][T12684] __nla_validate_parse: 14 callbacks suppressed [ 144.794520][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3626'. [ 144.811991][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3626'. [ 144.836854][T12684] wireguard0: entered promiscuous mode [ 144.842879][T12684] wireguard0: entered allmulticast mode [ 144.908158][T12689] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3629'. [ 145.220049][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.227754][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.271436][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.284279][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.319686][ T56] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.336881][ T56] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.360184][ T56] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.384444][ T56] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.595110][T12716] loop8: detected capacity change from 0 to 128 [ 145.651787][T12721] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3642'. [ 146.001449][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 146.001463][ T29] audit: type=1326 audit(1757311996.764:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15ad6ebe9 code=0x7ffc0000 [ 146.082280][T12749] pimreg: entered allmulticast mode [ 146.088775][ T29] audit: type=1326 audit(1757311996.804:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fb15ad6ebe9 code=0x7ffc0000 [ 146.094575][T12749] pimreg: left allmulticast mode [ 146.116889][ T29] audit: type=1326 audit(1757311996.804:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15ad6ebe9 code=0x7ffc0000 [ 146.116916][ T29] audit: type=1326 audit(1757311996.804:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15ad6ebe9 code=0x7ffc0000 [ 146.191390][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3661'. [ 146.259209][ T29] audit: type=1326 audit(1757311997.024:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.8.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50efdebe9 code=0x7ffc0000 [ 146.286394][ T29] audit: type=1326 audit(1757311997.024:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.8.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50efdebe9 code=0x7ffc0000 [ 146.355826][T12757] debugfs: 'netdev@ffff88810431d550' already exists in 'ref_tracker' [ 146.368383][ T29] audit: type=1326 audit(1757311997.084:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.8.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff50efdebe9 code=0x7ffc0000 [ 146.369166][T12765] syzkaller1: entered promiscuous mode [ 146.397079][ T29] audit: type=1326 audit(1757311997.084:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.8.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50efdebe9 code=0x7ffc0000 [ 146.403882][T12765] syzkaller1: entered allmulticast mode [ 146.436755][ T29] audit: type=1326 audit(1757311997.084:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.8.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50efdebe9 code=0x7ffc0000 [ 146.466526][ T29] audit: type=1326 audit(1757311997.084:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.8.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff50efdebe9 code=0x7ffc0000 [ 146.572888][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.581255][T12778] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.650812][T12778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.663167][T12778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.668830][T12796] loop9: detected capacity change from 0 to 512 [ 146.691473][T12796] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 146.711850][T12796] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 146.748300][ T3460] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.767176][ T3460] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.807422][ T3460] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.817455][ T3460] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.616539][T12918] pimreg: entered allmulticast mode [ 147.634381][T12918] pimreg: left allmulticast mode [ 147.667016][T12920] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.719085][T12920] FAT-fs (loop9): unable to read boot sector [ 147.874253][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.882467][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.937307][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.950086][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.999158][T12870] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.029898][T12870] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.042040][T12870] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.065751][T12870] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.104925][T12953] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 148.104925][T12953] program syz.8.3714 not setting count and/or reply_len properly [ 148.210244][T12970] loop8: detected capacity change from 0 to 512 [ 148.229586][T12970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.245226][T12970] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.321184][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.352004][T12982] loop8: detected capacity change from 0 to 256 [ 148.391281][T12982] FAT-fs (loop8): Directory bread(block 64) failed [ 148.406638][T12982] FAT-fs (loop8): Directory bread(block 65) failed [ 148.414236][T12982] FAT-fs (loop8): Directory bread(block 66) failed [ 148.424251][T12982] FAT-fs (loop8): Directory bread(block 67) failed [ 148.431524][T12982] FAT-fs (loop8): Directory bread(block 68) failed [ 148.439303][T12982] FAT-fs (loop8): Directory bread(block 69) failed [ 148.447348][T12982] FAT-fs (loop8): Directory bread(block 70) failed [ 148.455110][T12982] FAT-fs (loop8): Directory bread(block 71) failed [ 148.464215][T12982] FAT-fs (loop8): Directory bread(block 72) failed [ 148.473151][T12982] FAT-fs (loop8): Directory bread(block 73) failed [ 148.531590][T12982] bio_check_eod: 44 callbacks suppressed [ 148.531615][T12982] syz.8.3725: attempt to access beyond end of device [ 148.531615][T12982] loop8: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 148.650850][T12868] kworker/u8:53: attempt to access beyond end of device [ 148.650850][T12868] loop8: rw=1, sector=1232, nr_sectors = 600 limit=256 [ 148.709357][T12868] kworker/u8:53: attempt to access beyond end of device [ 148.709357][T12868] loop8: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 148.822557][T13008] loop7: detected capacity change from 0 to 512 [ 148.853548][T13008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.019711][T13020] macvtap0: refused to change device tx_queue_len [ 149.315584][T13043] loop8: detected capacity change from 0 to 512 [ 149.337292][T13043] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 149.354417][T13043] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 149.418425][T13050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3754'. [ 149.429737][T13050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3754'. [ 149.455730][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3755'. [ 149.469042][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3755'. [ 149.486470][ T10] kernel write not supported for file /187/attr/exec (pid: 10 comm: kworker/0:1) [ 149.600844][T13065] 9pnet: Could not find request transport: 0xffffffffffffffff [ 149.640700][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.711560][T13084] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3770'. [ 149.811350][T13093] loop7: detected capacity change from 0 to 512 [ 149.828069][T13093] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 149.866895][T13093] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 149.940697][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3780'. [ 150.099565][T13124] netlink: 'syz.2.3787': attribute type 1 has an invalid length. [ 150.145517][T13133] loop9: detected capacity change from 0 to 512 [ 150.170579][T13133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.193826][T13133] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.235663][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3797'. [ 150.249551][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3797'. [ 150.261470][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3797'. [ 150.272099][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3797'. [ 150.284348][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.038293][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 151.038309][ T29] audit: type=1400 audit(1757312001.804:4451): avc: denied { ioctl } for pid=13161 comm="syz.7.3813" path="socket:[39253]" dev="sockfs" ino=39253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.087022][T13166] SELinux: Context system_u:object is not valid (left unmapped). [ 151.089976][ T29] audit: type=1400 audit(1757312001.844:4452): avc: denied { bind } for pid=13162 comm="syz.9.3804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.117189][ T29] audit: type=1400 audit(1757312001.854:4453): avc: denied { mac_admin } for pid=13163 comm="syz.4.3803" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.141341][ T29] audit: type=1400 audit(1757312001.854:4454): avc: denied { relabelto } for pid=13163 comm="syz.4.3803" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 151.171905][ T29] audit: type=1400 audit(1757312001.854:4455): avc: denied { associate } for pid=13163 comm="syz.4.3803" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 151.219358][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.224266][ T29] audit: type=1400 audit(1757312001.984:4456): avc: denied { read write } for pid=13172 comm="syz.9.3807" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.257010][ T29] audit: type=1400 audit(1757312001.984:4457): avc: denied { open } for pid=13172 comm="syz.9.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.257751][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.285368][ T29] audit: type=1400 audit(1757312001.984:4458): avc: denied { ioctl } for pid=13172 comm="syz.9.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.357377][ T29] audit: type=1326 audit(1757312002.124:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.7.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 151.383653][ T29] audit: type=1326 audit(1757312002.124:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.7.3810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06197febe9 code=0x7ffc0000 [ 151.471185][T13185] loop7: detected capacity change from 0 to 128 [ 151.535698][T13191] loop8: detected capacity change from 0 to 512 [ 151.546655][T13191] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3817: casefold flag without casefold feature [ 151.561558][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3819'. [ 151.571378][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3819'. [ 151.582080][T13191] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3817: couldn't read orphan inode 15 (err -117) [ 151.595671][T13191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.648279][ T9504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.663252][T13201] netlink: 'syz.4.3820': attribute type 13 has an invalid length. [ 151.673735][T13201] netlink: 'syz.4.3820': attribute type 17 has an invalid length. [ 151.691243][T13201] gretap0: refused to change device tx_queue_len [ 151.698969][T13201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.813517][T13220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.822801][T13220] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.835781][T13220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.894712][T13230] loop7: detected capacity change from 0 to 512 [ 151.908617][T13230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.924023][T13230] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.020586][T13245] loop9: detected capacity change from 0 to 1024 [ 152.057687][T13245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.069435][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.084509][T13245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.132603][T13261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.152178][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.165107][T13261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.182005][T13272] loop7: detected capacity change from 0 to 1024 [ 152.209228][T13272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.294132][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 152.304367][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 152.309311][T13272] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3854: Allocating blocks 449-513 which overlap fs metadata [ 152.402439][T13271] EXT4-fs (loop7): pa ffff8881004abb60: logic 48, phys. 177, len 21 [ 152.411738][T13271] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 152.430348][T13295] hub 8-0:1.0: USB hub found [ 152.443935][T13295] hub 8-0:1.0: 8 ports detected [ 152.460284][ T8866] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.102426][T13342] loop9: detected capacity change from 0 to 8192 [ 153.124016][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 154.018027][T13410] Falling back ldisc for ttyS3. [ 154.660404][T13473] SELinux: failed to load policy [ 155.659196][T13513] macvtap1: entered allmulticast mode [ 155.666049][T13513] bridge0: entered allmulticast mode [ 155.673731][T13513] bridge0: port 3(macvtap1) entered blocking state [ 155.681227][T13513] bridge0: port 3(macvtap1) entered disabled state [ 155.708146][T13513] bridge0: left allmulticast mode [ 155.784034][T13523] SELinux: failed to load policy [ 155.867674][T13529] __nla_validate_parse: 1 callbacks suppressed [ 155.867690][T13529] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3969'. [ 155.950456][T13544] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3977'. [ 156.074175][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 156.074188][ T29] audit: type=1400 audit(1757312006.834:4748): avc: denied { append } for pid=13562 comm="syz.8.3987" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.133897][T13568] SELinux: failed to load policy [ 156.152157][ T29] audit: type=1326 audit(1757312006.904:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.2.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 156.180854][ T29] audit: type=1326 audit(1757312006.904:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.2.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 156.207067][ T29] audit: type=1326 audit(1757312006.904:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.2.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 156.234322][ T29] audit: type=1326 audit(1757312006.904:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.2.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 156.262594][ T29] audit: type=1326 audit(1757312006.914:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.2.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f42ebe9 code=0x7ffc0000 [ 156.293049][T13570] random: crng reseeded on system resumption [ 156.301876][ T29] audit: type=1400 audit(1757312007.054:4754): avc: denied { append } for pid=13569 comm="syz.9.3990" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.330735][ T29] audit: type=1400 audit(1757312007.054:4755): avc: denied { open } for pid=13569 comm="syz.9.3990" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.364800][T13570] Restarting kernel threads ... [ 156.385201][T13570] Done restarting kernel threads. [ 156.411977][ T29] audit: type=1400 audit(1757312007.064:4756): avc: denied { firmware_load } for pid=12826 comm="kworker/u8:20" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 156.439981][ T29] audit: type=1400 audit(1757312007.124:4757): avc: denied { ioctl } for pid=13569 comm="syz.9.3990" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.606297][T13601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13601 comm=syz.7.4004 [ 156.683149][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4009'. [ 156.696630][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4009'. [ 156.909756][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4025'. [ 156.919913][T13644] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4025'. [ 156.930888][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4025'. [ 156.943606][T13644] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4025'. [ 156.958280][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4025'. [ 157.066673][T13661] hub 9-0:1.0: USB hub found [ 157.087084][T13661] hub 9-0:1.0: 8 ports detected [ 158.147496][T13737] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4068'. [ 158.289458][T13744] program syz.9.4071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.380819][T13753] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 158.612915][T13784] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 158.627625][T13788] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.645825][T13788] vhci_hcd: invalid port number 253 [ 158.652255][T13788] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 158.672641][ T3750] kernel write not supported for file /1911/attr/exec (pid: 3750 comm: kworker/0:4) [ 158.851695][ T36] hid_parser_main: 18 callbacks suppressed [ 158.851776][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 158.867137][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.876357][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.885224][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.894001][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.956253][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.964180][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.972453][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.981054][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 158.989216][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.035418][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.088475][T13858] loop9: detected capacity change from 0 to 512 [ 159.096280][T13858] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.104490][T13858] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 159.128967][T13858] EXT4-fs (loop9): 1 truncate cleaned up [ 159.135483][T13858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.417981][T13907] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.429366][T13907] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 159.517555][T13881] ================================================================== [ 159.527394][T13881] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 159.536068][T13881] [ 159.538752][T13881] write to 0xffff888116061d68 of 8 bytes by task 13858 on cpu 1: [ 159.547074][T13881] filemap_splice_read+0x4f4/0x740 [ 159.552726][T13881] ext4_file_splice_read+0x8f/0xb0 [ 159.559303][T13881] splice_direct_to_actor+0x26c/0x680 [ 159.565706][T13881] do_splice_direct+0xda/0x150 [ 159.570916][T13881] do_sendfile+0x380/0x650 [ 159.575809][T13881] __x64_sys_sendfile64+0x105/0x150 [ 159.582265][T13881] x64_sys_call+0x2bb0/0x2ff0 [ 159.587403][T13881] do_syscall_64+0xd2/0x200 [ 159.594100][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.601999][T13881] [ 159.606055][T13881] write to 0xffff888116061d68 of 8 bytes by task 13881 on cpu 0: [ 159.615512][T13881] filemap_splice_read+0x4f4/0x740 [ 159.621880][T13881] ext4_file_splice_read+0x8f/0xb0 [ 159.627556][T13881] splice_direct_to_actor+0x26c/0x680 [ 159.634027][T13881] do_splice_direct+0xda/0x150 [ 159.639318][T13881] do_sendfile+0x380/0x650 [ 159.644751][T13881] __x64_sys_sendfile64+0x105/0x150 [ 159.652499][T13881] x64_sys_call+0x2bb0/0x2ff0 [ 159.658234][T13881] do_syscall_64+0xd2/0x200 [ 159.663211][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.669992][T13881] [ 159.672748][T13881] value changed: 0x00000000000072ba -> 0x00000000000072f1 [ 159.680493][T13881] [ 159.683077][T13881] Reported by Kernel Concurrency Sanitizer on: [ 159.690292][T13881] CPU: 0 UID: 0 PID: 13881 Comm: syz.9.4125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.701925][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.714859][T13881] ================================================================== [ 160.055391][T10436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.