last executing test programs: 16.243048568s ago: executing program 0 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) 16.173584625s ago: executing program 0 (id=805): read(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000780)={@id={0x2, 0x0, @a}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(r1) 16.022538188s ago: executing program 0 (id=809): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(0x3) 15.844094045s ago: executing program 0 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, 0x0) 15.795549989s ago: executing program 0 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 15.729437675s ago: executing program 1 (id=819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 15.687671308s ago: executing program 1 (id=822): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.636983413s ago: executing program 1 (id=824): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000c0800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b7461"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.574768419s ago: executing program 0 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.531268732s ago: executing program 32 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.368230497s ago: executing program 1 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, 0x0) 15.349153779s ago: executing program 1 (id=831): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r1, r1, 0x0, 0x800000009) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) 15.082715783s ago: executing program 1 (id=834): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 15.082544572s ago: executing program 33 (id=834): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 14.881277041s ago: executing program 3 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) 14.786255309s ago: executing program 3 (id=839): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r3, 0x0, 0x10000}, 0x18) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 14.727099385s ago: executing program 3 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000040000001400018008000100", @ANYRES32=r4, @ANYBLOB="08000300"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.586074967s ago: executing program 3 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, 0x0) 14.55528316s ago: executing program 3 (id=842): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close(r0) 14.209937631s ago: executing program 3 (id=845): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x115}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.185072414s ago: executing program 34 (id=845): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x115}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.354827358s ago: executing program 6 (id=927): read$usbmon(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 7.318296282s ago: executing program 6 (id=929): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 7.176138784s ago: executing program 6 (id=931): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 6.99704027s ago: executing program 6 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 6.88659335s ago: executing program 6 (id=939): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 6.67139324s ago: executing program 6 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f00000001c0)) 6.670160789s ago: executing program 35 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f00000001c0)) 1.822275996s ago: executing program 4 (id=1045): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x3da}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x43bc, 0x0, 0x0, 0x0, 0x0) 1.737390014s ago: executing program 5 (id=1047): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 1.359329957s ago: executing program 5 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.335407079s ago: executing program 4 (id=1058): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.275018505s ago: executing program 4 (id=1060): r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0xd1af}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) 1.182354053s ago: executing program 5 (id=1062): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.167186215s ago: executing program 4 (id=1063): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.032393157s ago: executing program 5 (id=1067): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c854}, 0x40000d4) 910.875048ms ago: executing program 4 (id=1071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 841.758714ms ago: executing program 4 (id=1074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 741.744353ms ago: executing program 5 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r3]}}], 0x38}}], 0x1, 0x0) 724.582455ms ago: executing program 2 (id=1078): syz_read_part_table(0x104c, &(0x7f00000002c0)="$eJzsz7GpAkEUhtF/HrtPQZApQWOrGFNNjWzCEgRrMdAeRVkNNDEUFM7JhrnfhRu+yDXJ+N3n5PWxuuxGyX42z6H93aMyhK3muFxkWpPtMLYuObX/lNqne4T9c0eXzflztwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA77gFAAD///krCKU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 652.391691ms ago: executing program 5 (id=1080): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socketpair(0x17, 0x3, 0x4, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 588.472327ms ago: executing program 7 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 493.996055ms ago: executing program 8 (id=1082): timer_create(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32], 0x3f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x418) 400.691624ms ago: executing program 8 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0xe, 0x200004) 390.563855ms ago: executing program 7 (id=1084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 357.739957ms ago: executing program 2 (id=1085): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1010051, &(0x7f00000000c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@barrier}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x557, &(0x7f00000014c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) iopl(0x72) 304.984042ms ago: executing program 8 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) 301.666653ms ago: executing program 7 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 246.923478ms ago: executing program 2 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 212.839201ms ago: executing program 8 (id=1089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffc0, 0x0, 0xe204, 0x5, 0x5, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x9004, 0xffffffff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) 168.851585ms ago: executing program 7 (id=1090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0xee, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 126.692598ms ago: executing program 2 (id=1091): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f3757f0086dd6317ce800000000000e0865a6596aff57b00000000000000000000000000ac"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 108.1532ms ago: executing program 7 (id=1092): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000800)=""/69, 0x45}], 0x2, 0x2, 0x5) 72.987693ms ago: executing program 8 (id=1093): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0xffffffff, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 69.441324ms ago: executing program 2 (id=1094): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 33.611277ms ago: executing program 8 (id=1095): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13.659399ms ago: executing program 7 (id=1096): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) 0s ago: executing program 2 (id=1097): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x7fffd8ee}, 0x10) close(r0) kernel console output (not intermixed with test programs): 23] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.581087][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.596163][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.607789][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.615213][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.636355][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.643603][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.652958][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.660032][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.678037][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.685250][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.696552][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.723167][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.746855][ T2234] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.754059][ T2234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.776239][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.786761][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.800041][ T897] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.807232][ T897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.830424][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.843258][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.880894][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.892336][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.910561][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.931885][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.939172][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.960243][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.967551][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.996581][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.031821][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.097662][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.144314][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.191653][ T3318] veth0_vlan: entered promiscuous mode [ 40.229088][ T3318] veth1_vlan: entered promiscuous mode [ 40.246481][ T3322] veth0_vlan: entered promiscuous mode [ 40.293732][ T3318] veth0_macvtap: entered promiscuous mode [ 40.300920][ T3322] veth1_vlan: entered promiscuous mode [ 40.313159][ T3320] veth0_vlan: entered promiscuous mode [ 40.321859][ T3318] veth1_macvtap: entered promiscuous mode [ 40.335080][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.356340][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.369696][ T3320] veth1_vlan: entered promiscuous mode [ 40.383382][ T2445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.392546][ T2445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.406804][ T2445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.415873][ T2445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425150][ T3323] veth0_vlan: entered promiscuous mode [ 40.445790][ T3324] veth0_vlan: entered promiscuous mode [ 40.453367][ T3323] veth1_vlan: entered promiscuous mode [ 40.473174][ T3322] veth0_macvtap: entered promiscuous mode [ 40.482886][ T3324] veth1_vlan: entered promiscuous mode [ 40.494112][ T3322] veth1_macvtap: entered promiscuous mode [ 40.502498][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.512609][ T3323] veth0_macvtap: entered promiscuous mode [ 40.534005][ T3320] veth0_macvtap: entered promiscuous mode [ 40.547512][ T3323] veth1_macvtap: entered promiscuous mode [ 40.564868][ T3320] veth1_macvtap: entered promiscuous mode [ 40.578284][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.597172][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.613018][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.621659][ T3324] veth0_macvtap: entered promiscuous mode [ 40.632422][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.651948][ T3324] veth1_macvtap: entered promiscuous mode [ 40.665804][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.674056][ T897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.686953][ T3492] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.693037][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.702393][ T3492] smc: net device bond0 erased user defined pnetid SYZ0 [ 40.714189][ T897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.734020][ T897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.753738][ T897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.774452][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 40.774470][ T29] audit: type=1400 audit(1766952528.684:104): avc: denied { mounton } for pid=3495 comm="syz.1.8" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.805563][ T897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816102][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.828059][ T897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.839489][ T897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.862720][ T29] audit: type=1400 audit(1766952528.774:105): avc: denied { append } for pid=3499 comm="syz.1.9" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.886517][ T29] audit: type=1400 audit(1766952528.774:106): avc: denied { open } for pid=3499 comm="syz.1.9" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.917133][ T897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.927178][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.942967][ T29] audit: type=1400 audit(1766952528.834:107): avc: denied { ioctl } for pid=3499 comm="syz.1.9" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.944374][ T897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.981151][ T897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.995919][ T897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.068636][ T897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.105541][ T897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.144429][ T897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.154610][ T2445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.181788][ T2445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.192592][ T29] audit: type=1400 audit(1766952529.094:108): avc: denied { allowed } for pid=3512 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.217965][ T3523] loop0: detected capacity change from 0 to 512 [ 41.246903][ T3523] EXT4-fs: Ignoring removed i_version option [ 41.253242][ T3523] EXT4-fs: Ignoring removed bh option [ 41.276241][ T29] audit: type=1400 audit(1766952529.174:109): avc: denied { create } for pid=3526 comm="syz.1.13" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.297632][ T29] audit: type=1400 audit(1766952529.184:110): avc: denied { lock } for pid=3526 comm="syz.1.13" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.348429][ T3533] loop3: detected capacity change from 0 to 1024 [ 41.389183][ T3533] ======================================================= [ 41.389183][ T3533] WARNING: The mand mount option has been deprecated and [ 41.389183][ T3533] and is ignored by this kernel. Remove the mand [ 41.389183][ T3533] option from the mount to silence this warning. [ 41.389183][ T3533] ======================================================= [ 41.441076][ T29] audit: type=1400 audit(1766952529.274:111): avc: denied { create } for pid=3534 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.460486][ T29] audit: type=1400 audit(1766952529.294:112): avc: denied { bind } for pid=3534 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.479760][ T29] audit: type=1400 audit(1766952529.294:113): avc: denied { setopt } for pid=3534 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.484628][ T3523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.527579][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.530624][ T3523] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.561686][ T3549] netem: incorrect gi model size [ 41.566978][ T3549] netem: change failed [ 41.616989][ T3533] EXT4-fs error (device loop3): ext4_xattr_set_entry:1669: inode #15: comm syz.3.15: corrupted xattr entries [ 41.634263][ T3533] EXT4-fs error (device loop3): ext4_xattr_block_set:2219: inode #15: comm syz.3.15: bad block 113 [ 41.725472][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.807436][ T3513] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.11: iget: bad i_size value: 2533274857506816 [ 41.865287][ T3572] SELinux: failed to load policy [ 41.873756][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.042427][ T3591] xt_TPROXY: Can be used only with -p tcp or -p udp [ 42.154820][ T3603] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.260742][ T3615] syzkaller1: entered promiscuous mode [ 42.266343][ T3615] syzkaller1: entered allmulticast mode [ 42.320979][ T3619] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 42.327662][ T3619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.335174][ T3619] vhci_hcd vhci_hcd.0: Device attached [ 42.360207][ T3621] vhci_hcd: connection closed [ 42.360499][ T12] vhci_hcd vhci_hcd.2: stop threads [ 42.370663][ T12] vhci_hcd vhci_hcd.2: release socket [ 42.376073][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 42.537368][ T3635] ALSA: seq fatal error: cannot create timer (-19) [ 42.709335][ T3656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 42.895378][ T3676] loop3: detected capacity change from 0 to 512 [ 42.921795][ T3676] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.945748][ T3676] EXT4-fs (loop3): mount failed [ 43.007544][ T3684] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 43.235649][ T3724] netlink: 'syz.0.82': attribute type 15 has an invalid length. [ 43.336267][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 43.354190][ T3724] netlink: 'syz.0.82': attribute type 15 has an invalid length. [ 43.354207][ T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 43.361937][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 43.404273][ T3724] Zero length message leads to an empty skb [ 43.481204][ T3729] loop4: detected capacity change from 0 to 512 [ 43.490721][ T31] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 43.519167][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 43.528033][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 43.571830][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.597449][ T3744] loop1: detected capacity change from 0 to 512 [ 43.615428][ T3729] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.640062][ T3746] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 43.648370][ T3729] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 43.675633][ T3744] EXT4-fs (loop1): 1 truncate cleaned up [ 43.682291][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.694877][ T3729] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 43.707162][ T3729] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.707162][ T3729] [ 43.717335][ T3729] EXT4-fs (loop4): Total free blocks count 0 [ 43.723778][ T3729] EXT4-fs (loop4): Free/Dirty block details [ 43.729811][ T3729] EXT4-fs (loop4): free_blocks=65280 [ 43.735354][ T3729] EXT4-fs (loop4): dirty_blocks=2 [ 43.740640][ T3729] EXT4-fs (loop4): Block reservation details [ 43.746671][ T3729] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 43.753415][ T3750] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 43.767994][ T3744] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.90: invalid indirect mapped block 234881024 (level 0) [ 43.795835][ T3729] syz.4.85 (3729) used greatest stack depth: 10120 bytes left [ 43.831976][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.854621][ T3756] hub 9-0:1.0: USB hub found [ 43.867546][ T3756] hub 9-0:1.0: 8 ports detected [ 43.907109][ T3761] ALSA: seq fatal error: cannot create timer (-19) [ 43.923806][ T3763] usb usb1: usbfs: process 3763 (syz.3.98) did not claim interface 0 before use [ 44.005460][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 44.013031][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.020619][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.028040][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.036077][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.043588][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.052002][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.059518][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.067027][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 44.074544][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.083948][ T3413] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 44.117582][ T3780] loop1: detected capacity change from 0 to 512 [ 44.124834][ T3780] EXT4-fs: dax option not supported [ 44.200430][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 44.224592][ T3781] fido_id[3781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.465720][ T3805] netlink: 'syz.4.116': attribute type 3 has an invalid length. [ 44.576219][ T3813] loop2: detected capacity change from 0 to 512 [ 44.587100][ T3813] EXT4-fs: Ignoring removed bh option [ 44.603900][ T3813] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 44.618282][ T3815] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 44.626072][ T3815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.120'. [ 44.643240][ T3813] EXT4-fs (loop2): 1 truncate cleaned up [ 44.656490][ T3813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.698317][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.728448][ T3823] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.124'. [ 44.845461][ T3840] syz.3.131 uses obsolete (PF_INET,SOCK_PACKET) [ 45.104963][ T3855] serio: Serial port ttyS3 [ 45.166490][ T3860] bond1: entered promiscuous mode [ 45.171882][ T3860] bond1: entered allmulticast mode [ 45.177403][ T3860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.198646][ T3860] bond1 (unregistering): Released all slaves [ 45.617014][ T3898] netlink: 'syz.2.152': attribute type 3 has an invalid length. [ 45.625226][ T3898] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 45.633498][ T3898] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.152'. [ 45.733176][ T3908] loop3: detected capacity change from 0 to 512 [ 45.793461][ T3908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.812410][ T3921] loop2: detected capacity change from 0 to 256 [ 45.820179][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 45.820195][ T29] audit: type=1400 audit(1766952533.734:368): avc: denied { bind } for pid=3918 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.822336][ T3921] FAT-fs (loop2): bogus number of FAT sectors [ 45.852440][ T3921] FAT-fs (loop2): Can't find a valid FAT filesystem [ 45.869063][ T3908] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.912222][ T29] audit: type=1400 audit(1766952533.824:369): avc: denied { write open } for pid=3907 comm="syz.3.158" path="/26/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.010735][ T3927] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 46.024824][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.036914][ T29] audit: type=1400 audit(1766952533.854:370): avc: denied { append } for pid=3907 comm="syz.3.158" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.059351][ T29] audit: type=1400 audit(1766952533.854:371): avc: denied { ioctl } for pid=3907 comm="syz.3.158" path="/26/file1/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.094393][ T3927] bond1: (slave lo): Enslaving as an active interface with an up link [ 46.109404][ T3927] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 46.343411][ T29] audit: type=1400 audit(1766952534.244:372): avc: denied { create } for pid=3937 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.469845][ T29] audit: type=1400 audit(1766952534.374:373): avc: denied { read write } for pid=3956 comm="syz.1.176" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.493629][ T29] audit: type=1400 audit(1766952534.374:374): avc: denied { open } for pid=3956 comm="syz.1.176" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.549629][ T29] audit: type=1400 audit(1766952534.454:375): avc: denied { execmem } for pid=3958 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.569129][ T29] audit: type=1400 audit(1766952534.454:376): avc: denied { execute } for pid=3958 comm="syz.2.179" path="/31/cpuacct.usage_percpu" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.619618][ T29] audit: type=1326 audit(1766952534.514:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2eafaf749 code=0x7ffc0000 [ 47.265633][ T4002] loop0: detected capacity change from 0 to 1024 [ 47.289575][ T4002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.298156][ T4002] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 47.312066][ T4002] System zones: 0-1, 3-36 [ 47.319090][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.338619][ T4002] capability: warning: `syz.0.193' uses 32-bit capabilities (legacy support in use) [ 47.369247][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.449371][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 47.507032][ T4009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.704225][ T4022] sch_fq: defrate 4294967295 ignored. [ 47.833699][ T4035] loop4: detected capacity change from 0 to 512 [ 47.884477][ T4035] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.919386][ T4035] EXT4-fs (loop4): mount failed [ 47.993453][ T4044] loop0: detected capacity change from 0 to 512 [ 48.179905][ T4050] netlink: 'syz.2.212': attribute type 29 has an invalid length. [ 48.231154][ T4052] ALSA: seq fatal error: cannot create timer (-19) [ 48.334148][ T4044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.385490][ T4044] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.515416][ T4065] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.718733][ T4075] loop2: detected capacity change from 0 to 164 [ 48.727589][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.735509][ T3985] syz.3.187 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 48.750939][ T3985] CPU: 0 UID: 0 PID: 3985 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.751028][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.751050][ T3985] Call Trace: [ 48.751061][ T3985] [ 48.751069][ T3985] __dump_stack+0x1d/0x30 [ 48.751103][ T3985] dump_stack_lvl+0x95/0xd0 [ 48.751135][ T3985] dump_stack+0x15/0x1b [ 48.751163][ T3985] dump_header+0x81/0x240 [ 48.751238][ T3985] oom_kill_process+0x295/0x350 [ 48.751368][ T3985] out_of_memory+0x97b/0xb80 [ 48.751396][ T3985] try_charge_memcg+0x610/0xa10 [ 48.751435][ T3985] obj_cgroup_charge_pages+0xa6/0x150 [ 48.751521][ T3985] __memcg_kmem_charge_page+0x9f/0x170 [ 48.751559][ T3985] __alloc_frozen_pages_noprof+0x18f/0x360 [ 48.751651][ T3985] alloc_pages_mpol+0xb3/0x260 [ 48.751695][ T3985] alloc_pages_noprof+0x90/0x130 [ 48.751738][ T3985] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 48.751867][ T3985] __kvmalloc_node_noprof+0x492/0x6b0 [ 48.751903][ T3985] ? ip_set_alloc+0x24/0x30 [ 48.751945][ T3985] ? ip_set_alloc+0x24/0x30 [ 48.752052][ T3985] ? __slab_alloc+0x25/0x50 [ 48.752083][ T3985] ip_set_alloc+0x24/0x30 [ 48.752125][ T3985] hash_netiface_create+0x282/0x740 [ 48.752172][ T3985] ? __pfx_hash_netiface_create+0x10/0x10 [ 48.752347][ T3985] ip_set_create+0x3cc/0x970 [ 48.752379][ T3985] ? __nla_parse+0x40/0x60 [ 48.752473][ T3985] nfnetlink_rcv_msg+0x4c6/0x590 [ 48.752552][ T3985] netlink_rcv_skb+0x123/0x220 [ 48.752625][ T3985] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 48.752667][ T3985] nfnetlink_rcv+0x167/0x16c0 [ 48.752697][ T3985] ? kmem_cache_free+0xe3/0x3a0 [ 48.752731][ T3985] ? __kfree_skb+0x109/0x150 [ 48.752880][ T3985] ? nlmon_xmit+0x4f/0x60 [ 48.752906][ T3985] ? consume_skb+0x49/0x150 [ 48.752931][ T3985] ? nlmon_xmit+0x4f/0x60 [ 48.752993][ T3985] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 48.753065][ T3985] ? __dev_queue_xmit+0x138d/0x1ec0 [ 48.753102][ T3985] ? __dev_queue_xmit+0x148/0x1ec0 [ 48.753182][ T3985] ? ref_tracker_free+0x37d/0x3e0 [ 48.753269][ T3985] ? __netlink_deliver_tap+0x4dc/0x500 [ 48.753318][ T3985] netlink_unicast+0x5c0/0x690 [ 48.753414][ T3985] netlink_sendmsg+0x58b/0x6b0 [ 48.753524][ T3985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.753557][ T3985] __sock_sendmsg+0x145/0x180 [ 48.753640][ T3985] ____sys_sendmsg+0x31e/0x4a0 [ 48.753679][ T3985] ___sys_sendmsg+0x17b/0x1d0 [ 48.753733][ T3985] __x64_sys_sendmsg+0xd4/0x160 [ 48.753779][ T3985] x64_sys_call+0x17ba/0x3000 [ 48.753841][ T3985] do_syscall_64+0xca/0x2b0 [ 48.753901][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.753985][ T3985] RIP: 0033:0x7fcb0be8f749 [ 48.754001][ T3985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.754043][ T3985] RSP: 002b:00007fcb0a8ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.754070][ T3985] RAX: ffffffffffffffda RBX: 00007fcb0c0e5fa0 RCX: 00007fcb0be8f749 [ 48.754087][ T3985] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 48.754104][ T3985] RBP: 00007fcb0bf13f91 R08: 0000000000000000 R09: 0000000000000000 [ 48.754126][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.754138][ T3985] R13: 00007fcb0c0e6038 R14: 00007fcb0c0e5fa0 R15: 00007ffcff1fd088 [ 48.754157][ T3985] [ 48.754164][ T3985] memory: usage 307200kB, limit 307200kB, failcnt 352 [ 49.093368][ T3985] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 49.101522][ T3985] kmem: usage 303332kB, limit 9007199254740988kB, failcnt 0 [ 49.109447][ T3985] Memory cgroup stats for /syz3: [ 49.113354][ T3985] cache 0 [ 49.114291][ T4075] process 'syz.2.223' launched '/dev/fd/3' with NULL argv: empty string added [ 49.118409][ T3985] rss 3960832 [ 49.118420][ T3985] shmem 0 [ 49.118430][ T3985] mapped_file 0 [ 49.140382][ T3985] dirty 0 [ 49.143424][ T3985] writeback 0 [ 49.146738][ T3985] workingset_refault_anon 59 [ 49.151481][ T3985] workingset_refault_file 123 [ 49.156449][ T3985] swap 290816 [ 49.159797][ T3985] swapcached 0 [ 49.163223][ T3985] pgpgin 8971 [ 49.166714][ T3985] pgpgout 8004 [ 49.169917][ T4075] syz.2.223: attempt to access beyond end of device [ 49.169917][ T4075] loop2: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 49.170263][ T3985] pgfault 18871 [ 49.187718][ T3985] pgmajfault 41 [ 49.191248][ T3985] inactive_anon 0 [ 49.195094][ T3985] active_anon 0 [ 49.198767][ T3985] inactive_file 3960832 [ 49.203083][ T3985] active_file 0 [ 49.206805][ T3985] unevictable 0 [ 49.210323][ T3985] hierarchical_memory_limit 314572800 [ 49.212597][ T4075] syz.2.223: attempt to access beyond end of device [ 49.212597][ T4075] loop2: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 49.215840][ T3985] hierarchical_memsw_limit 9223372036854771712 [ 49.215855][ T3985] total_cache 0 [ 49.215865][ T3985] total_rss 3960832 [ 49.239364][ T4077] ALSA: seq fatal error: cannot create timer (-19) [ 49.249968][ T3985] total_shmem 0 [ 49.253508][ T3985] total_mapped_file 0 [ 49.257513][ T3985] total_dirty 0 [ 49.261050][ T3985] total_writeback 0 [ 49.265062][ T3985] total_workingset_refault_anon 59 [ 49.270295][ T3985] total_workingset_refault_file 123 [ 49.275624][ T3985] total_swap 290816 [ 49.279498][ T3985] total_swapcached 0 [ 49.283414][ T3985] total_pgpgin 8971 [ 49.287254][ T3985] total_pgpgout 8004 [ 49.291211][ T3985] total_pgfault 18871 [ 49.295392][ T3985] total_pgmajfault 41 [ 49.299522][ T3985] total_inactive_anon 0 [ 49.303835][ T3985] total_active_anon 0 [ 49.307853][ T3985] total_inactive_file 3960832 [ 49.312581][ T3985] total_active_file 0 [ 49.316647][ T3985] total_unevictable 0 [ 49.320729][ T3985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.187,pid=3984,uid=0 [ 49.335697][ T3985] Memory cgroup out of memory: Killed process 3984 (syz.3.187) total-vm:96016kB, anon-rss:4976kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 49.444279][ T959] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 49.671171][ T4106] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 4106 comm: syz.1.235) [ 49.855420][ T4116] program syz.1.239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.001992][ T4128] : renamed from vlan0 (while UP) [ 50.025597][ T9] hid_parser_main: 19 callbacks suppressed [ 50.025620][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.039037][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.046521][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.054147][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.061611][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.069067][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.076686][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.084169][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.091714][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.099179][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.113425][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz1 [ 50.133235][ T3994] syz.3.187 (3994) used greatest stack depth: 9608 bytes left [ 50.153095][ T3985] syz.3.187 (3985) used greatest stack depth: 6408 bytes left [ 50.154240][ T4131] fido_id[4131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.313808][ T4140] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 50.341824][ T4140] SELinux: failed to load policy [ 50.387493][ T4151] loop4: detected capacity change from 0 to 512 [ 50.415995][ T4151] EXT4-fs: Ignoring removed nobh option [ 50.472145][ T4151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.507509][ T4151] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.745487][ T4186] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 50.801033][ T4186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.869837][ T4192] bond2: (slave geneve2): making interface the new active one [ 50.889333][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 50.889347][ T29] audit: type=1400 audit(1766952538.804:461): avc: denied { append } for pid=4195 comm="syz.2.272" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.941276][ T29] audit: type=1400 audit(1766952538.844:462): avc: denied { ioctl } for pid=4195 comm="syz.2.272" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.963315][ T4192] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 50.970183][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.094836][ T4206] Driver unsupported XDP return value 0 on prog (id 198) dev N/A, expect packet loss! [ 51.176721][ T29] audit: type=1400 audit(1766952539.084:463): avc: denied { kexec_image_load } for pid=4215 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 51.267771][ T29] audit: type=1400 audit(1766952539.174:464): avc: denied { bind } for pid=4222 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.287158][ T29] audit: type=1400 audit(1766952539.174:465): avc: denied { name_bind } for pid=4222 comm="syz.2.285" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.309121][ T29] audit: type=1400 audit(1766952539.174:466): avc: denied { node_bind } for pid=4222 comm="syz.2.285" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 51.325163][ T4224] netlink: 'syz.2.285': attribute type 4 has an invalid length. [ 51.369202][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 51.397612][ T29] audit: type=1326 audit(1766952539.304:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0de0f749 code=0x7ffc0000 [ 51.421325][ T29] audit: type=1326 audit(1766952539.304:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0de0f749 code=0x7ffc0000 [ 51.518497][ T29] audit: type=1326 audit(1766952539.304:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a0de0f749 code=0x7ffc0000 [ 51.542122][ T29] audit: type=1326 audit(1766952539.304:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0de0f749 code=0x7ffc0000 [ 51.576326][ T4219] loop4: detected capacity change from 0 to 8192 [ 51.657492][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 51.786953][ T4257] netlink: 188 bytes leftover after parsing attributes in process `syz.0.301'. [ 52.071058][ T3008] udevd[3008]: worker [3924] terminated by signal 33 (Unknown signal 33) [ 52.079748][ T3008] udevd[3008]: worker [3924] failed while handling '/devices/virtual/block/loop3' [ 52.172957][ T4294] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 52.204540][ T4303] usb usb1: usbfs: process 4303 (syz.0.321) did not claim interface 0 before use [ 52.274898][ T9] kernel read not supported for file /ppp (pid: 9 comm: kworker/0:0) [ 52.400061][ T4318] netlink: 596 bytes leftover after parsing attributes in process `syz.0.328'. [ 52.452186][ T4322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4322 comm=syz.3.331 [ 52.568619][ T4330] loop2: detected capacity change from 0 to 8192 [ 52.619563][ T4304] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 52.624815][ T4304] loop2: partition table partially beyond EOD, truncated [ 52.638795][ T4304] loop2: p1 start 100663296 is beyond EOD, truncated [ 52.645598][ T4304] loop2: p2 size 134217732 extends beyond EOD, truncated [ 52.656058][ T4304] loop2: p4 size 14876672 extends beyond EOD, truncated [ 52.664566][ T4304] loop2: p5 size 134217732 extends beyond EOD, truncated [ 52.672627][ T4304] loop2: p6 size 14876672 extends beyond EOD, truncated [ 52.697594][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 52.706737][ T4341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'. [ 52.715963][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 52.724834][ T4341] netlink: 2 bytes leftover after parsing attributes in process `syz.0.340'. [ 52.735271][ T4341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'. [ 52.750803][ T4330] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 52.756102][ T4330] loop2: partition table partially beyond EOD, truncated [ 52.773344][ T4330] loop2: p1 start 100663296 is beyond EOD, truncated [ 52.780430][ T4330] loop2: p2 size 134217732 extends beyond EOD, truncated [ 52.789818][ T4330] loop2: p4 size 14876672 extends beyond EOD, truncated [ 52.797850][ T4344] loop4: detected capacity change from 0 to 1024 [ 52.806742][ T4344] EXT4-fs: inline encryption not supported [ 52.825143][ T4344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.846587][ T4330] loop2: p5 size 134217732 extends beyond EOD, truncated [ 52.855068][ T4330] loop2: p6 size 14876672 extends beyond EOD, truncated [ 52.879665][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.010032][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 53.021779][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 53.023078][ T3577] udevd[3577]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 53.034517][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 53.056224][ T4366] udevd[4366]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 53.125989][ T4371] loop2: detected capacity change from 0 to 512 [ 53.144283][ T4371] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 53.189678][ T4375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 53.242517][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 53.257041][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 53.258348][ T3577] udevd[3577]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 53.357760][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 53.620485][ T4413] loop2: detected capacity change from 0 to 512 [ 53.662795][ T4413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.671545][ T4413] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.718215][ T4413] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.366: Allocating blocks 41-42 which overlap fs metadata [ 53.735475][ T4413] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.366: Allocating blocks 41-42 which overlap fs metadata [ 53.750048][ T4413] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.366: Failed to acquire dquot type 1 [ 53.763092][ T4421] syz.4.370 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.779727][ T4413] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.794405][ T4413] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.366: corrupted inode contents [ 53.806484][ T4413] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.366: mark_inode_dirty error [ 53.818364][ T4413] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.366: corrupted inode contents [ 53.830983][ T4413] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.366: mark_inode_dirty error [ 53.875384][ T4413] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.366: corrupted inode contents [ 53.891064][ T4413] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 53.900467][ T4413] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.366: corrupted inode contents [ 53.913710][ T4413] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.366: mark_inode_dirty error [ 53.927476][ T4413] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 53.936904][ T4413] EXT4-fs (loop2): 1 truncate cleaned up [ 53.943553][ T4413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.089886][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.122689][ T4443] loop2: detected capacity change from 0 to 1024 [ 54.150794][ T4443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.195736][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.313713][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.335473][ T4460] xt_hashlimit: max too large, truncated to 1048576 [ 54.585459][ T4480] SELinux: ebitmap: truncated map [ 54.623631][ T4480] SELinux: failed to load policy [ 54.742199][ T4500] loop1: detected capacity change from 0 to 512 [ 54.768946][ T4500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.782188][ T4500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.820310][ T4500] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.899308][ T4500] EXT4-fs (loop1): 1 truncate cleaned up [ 54.905627][ T4500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.001145][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.174872][ T4540] loop4: detected capacity change from 0 to 1024 [ 55.191382][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.268795][ T4546] loop3: detected capacity change from 0 to 512 [ 55.308188][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.320210][ T4546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.365552][ T4550] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 55.394198][ T4546] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.425: invalid indirect mapped block 4294967295 (level 0) [ 55.415693][ T4550] dummy0: entered promiscuous mode [ 55.426555][ T4550] bridge0: port 3(dummy0) entered blocking state [ 55.433025][ T4550] bridge0: port 3(dummy0) entered disabled state [ 55.439690][ T4550] dummy0: entered allmulticast mode [ 55.445771][ T4550] bridge0: port 3(dummy0) entered blocking state [ 55.452176][ T4550] bridge0: port 3(dummy0) entered forwarding state [ 55.462938][ T4546] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.425: invalid indirect mapped block 4294967295 (level 1) [ 55.495304][ T4546] EXT4-fs (loop3): 1 orphan inode deleted [ 55.502300][ T4546] EXT4-fs (loop3): 1 truncate cleaned up [ 55.522516][ T4546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.541946][ T4546] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 55.542523][ T4555] loop0: detected capacity change from 0 to 128 [ 55.602891][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.639585][ T4555] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 55.738417][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.747136][ T123] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 55.799063][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.945781][ T4592] capability: warning: `syz.2.446' uses deprecated v2 capabilities in a way that may be insecure [ 56.012380][ T4599] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.037684][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 56.037703][ T29] audit: type=1400 audit(1766952543.944:606): avc: denied { lock } for pid=4600 comm="syz.2.452" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.071654][ T4603] SELinux: Context is not valid (left unmapped). [ 56.099113][ T29] audit: type=1400 audit(1766952543.994:607): avc: denied { cpu } for pid=4604 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.162461][ T4614] loop1: detected capacity change from 0 to 1024 [ 56.171692][ T4614] EXT4-fs: Ignoring removed orlov option [ 56.195056][ T4614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.239227][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.303765][ T29] audit: type=1400 audit(1766952544.214:608): avc: denied { name_bind } for pid=4627 comm="syz.1.460" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.325802][ T29] audit: type=1400 audit(1766952544.214:609): avc: denied { node_bind } for pid=4627 comm="syz.1.460" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.350505][ T4625] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.363592][ T29] audit: type=1400 audit(1766952544.274:610): avc: denied { ioctl } for pid=4629 comm="syz.4.462" path="socket:[6966]" dev="sockfs" ino=6966 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.388652][ T4630] syzkaller1: entered promiscuous mode [ 56.394230][ T4630] syzkaller1: entered allmulticast mode [ 56.401754][ T4625] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.410675][ T4625] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.461: Allocating blocks 41-42 which overlap fs metadata [ 56.458776][ T4625] Quota error (device loop0): write_blk: dquota write failed [ 56.466293][ T4625] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 56.482719][ T4625] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.461: Allocating blocks 41-42 which overlap fs metadata [ 56.502249][ T4625] Quota error (device loop0): write_blk: dquota write failed [ 56.510115][ T4637] FAT-fs (loop2): Directory bread(block 414) failed [ 56.516832][ T4637] FAT-fs (loop2): Directory bread(block 415) failed [ 56.523755][ T4625] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 56.529636][ T4637] FAT-fs (loop2): Directory bread(block 416) failed [ 56.534020][ T4625] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.461: Failed to acquire dquot type 1 [ 56.551850][ T4625] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 56.566685][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.461: corrupted inode contents [ 56.571691][ T4637] FAT-fs (loop2): Directory bread(block 417) failed [ 56.586748][ T4625] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.461: mark_inode_dirty error [ 56.589952][ T29] audit: type=1400 audit(1766952544.504:611): avc: denied { associate } for pid=4641 comm="syz.3.465" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.620168][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.461: corrupted inode contents [ 56.620849][ T4637] FAT-fs (loop2): Directory bread(block 418) failed [ 56.647296][ T4637] FAT-fs (loop2): Directory bread(block 419) failed [ 56.654609][ T4637] FAT-fs (loop2): Directory bread(block 420) failed [ 56.661836][ T4637] FAT-fs (loop2): Directory bread(block 421) failed [ 56.669255][ T4625] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.461: mark_inode_dirty error [ 56.680761][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.461: corrupted inode contents [ 56.693145][ T4625] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 56.702801][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.461: corrupted inode contents [ 56.715564][ T4625] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.461: mark_inode_dirty error [ 56.726860][ T4625] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 56.736204][ T4625] EXT4-fs (loop0): 1 truncate cleaned up [ 56.742756][ T4625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.758115][ T4637] __nla_validate_parse: 2 callbacks suppressed [ 56.758130][ T4637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 56.804271][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.835612][ T4652] EXT4-fs: Ignoring removed orlov option [ 56.867587][ T4652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.940005][ T4659] SELinux: failed to load policy [ 57.093130][ T4673] random: crng reseeded on system resumption [ 57.370673][ T4692] netlink: 'syz.4.488': attribute type 1 has an invalid length. [ 57.378507][ T4692] netlink: 224 bytes leftover after parsing attributes in process `syz.4.488'. [ 57.434771][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.490357][ T4694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 57.532652][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 57.541803][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 57.551023][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 57.561208][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 57.570301][ T4701] netlink: 'syz.2.491': attribute type 6 has an invalid length. [ 57.592246][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 57.665265][ T4705] serio: Serial port ttyS3 [ 57.696449][ C0] hrtimer: interrupt took 27945 ns [ 57.861099][ T4726] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 57.868938][ T4726] netlink: 224 bytes leftover after parsing attributes in process `syz.1.502'. [ 57.912317][ T4722] set_capacity_and_notify: 5 callbacks suppressed [ 57.912434][ T4722] loop2: detected capacity change from 0 to 8192 [ 57.980903][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 58.001535][ T575] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.003841][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 58.178628][ T4747] SELinux: policydb version 17152 does not match my version range 15-35 [ 58.194560][ T4749] vlan2: entered allmulticast mode [ 58.200133][ T4747] SELinux: failed to load policy [ 58.347870][ T4759] loop3: detected capacity change from 0 to 8192 [ 58.387088][ T4763] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 58.530204][ T4778] mmap: syz.0.525 (4778) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.593297][ T4784] netlink: 'syz.3.528': attribute type 27 has an invalid length. [ 58.624552][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.631867][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.673904][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.684338][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.734327][ T4787] loop0: detected capacity change from 0 to 2048 [ 58.753633][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.762357][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.772768][ T4785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.788674][ T575] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.798201][ T575] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.809401][ T575] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.821795][ T4787] Alternate GPT is invalid, using primary GPT. [ 58.828275][ T4787] loop0: p2 p3 p7 [ 58.845859][ T575] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.911907][ T3577] udevd[3577]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 58.913055][ T4380] udevd[4380]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 58.927144][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 59.081996][ T4807] loop0: detected capacity change from 0 to 512 [ 59.102372][ T4807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.119299][ T4807] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.150052][ T4807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.260330][ T4835] loop0: detected capacity change from 0 to 128 [ 59.485983][ T4856] loop4: detected capacity change from 0 to 1024 [ 59.564358][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 59.593781][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.593781][ T37] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 59.608040][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.608040][ T37] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 59.622644][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.622644][ T37] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 59.636364][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.636364][ T37] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 59.650284][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.650284][ T37] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 59.664225][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.664225][ T37] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 59.689813][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.689813][ T37] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 59.703660][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.703660][ T37] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 59.717556][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.717556][ T37] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 59.731325][ T37] kworker/u8:2: attempt to access beyond end of device [ 59.731325][ T37] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 59.758629][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 59.915294][ T4867] netlink: 84 bytes leftover after parsing attributes in process `syz.2.552'. [ 59.924528][ T4867] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 60.059711][ T3560] Bluetooth: hci0: command 0x1003 tx timeout [ 60.077250][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.334142][ T4910] loop3: detected capacity change from 0 to 1024 [ 60.365362][ T4910] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 60.401185][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.437902][ T4912] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.466661][ T4923] loop2: detected capacity change from 0 to 1024 [ 60.476730][ T4923] EXT4-fs: inline encryption not supported [ 60.482969][ T4923] EXT4-fs: Ignoring removed orlov option [ 60.496068][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.538458][ T4923] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 60.588519][ T4934] loop0: detected capacity change from 0 to 128 [ 60.606046][ T4380] udevd[4380]: incorrect ext4 checksum on /dev/loop0 [ 60.614064][ T4923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 60.624111][ T4934] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 60.633140][ T4942] syzkaller1: entered promiscuous mode [ 60.633174][ T4942] syzkaller1: entered allmulticast mode [ 60.647098][ T4923] System zones: 0-1, 3-12 [ 60.692739][ T4923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.713910][ T4949] loop3: detected capacity change from 0 to 512 [ 60.721154][ T4949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.736173][ T4949] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.582: bad orphan inode 131083 [ 60.747407][ T4949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.786449][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.811305][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.011650][ T4979] EXT4-fs: Ignoring removed bh option [ 61.033677][ T4975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.037610][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.046459][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bad8c00: rx timeout, send abort [ 61.067201][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811b7a9400: rx timeout, send abort [ 61.076523][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 61.076540][ T29] audit: type=1400 audit(1766952548.994:733): avc: denied { read } for pid=2990 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.079018][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811bad8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.083165][ T29] audit: type=1400 audit(1766952548.994:734): avc: denied { search } for pid=2990 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.104838][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811b7a9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.161356][ T4992] EXT4-fs: Ignoring removed nobh option [ 61.168672][ T29] audit: type=1400 audit(1766952549.034:735): avc: denied { search } for pid=2990 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.190742][ T29] audit: type=1400 audit(1766952549.034:736): avc: denied { add_name } for pid=2990 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.211808][ T29] audit: type=1400 audit(1766952549.034:737): avc: denied { create } for pid=2990 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.232668][ T29] audit: type=1400 audit(1766952549.034:738): avc: denied { append open } for pid=2990 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.255950][ T29] audit: type=1400 audit(1766952549.034:739): avc: denied { getattr } for pid=2990 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.278986][ T29] audit: type=1400 audit(1766952549.044:740): avc: denied { mount } for pid=4976 comm="syz.0.592" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.301524][ T4975] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.313169][ T4975] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 61.323706][ T4975] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 61.333241][ T4975] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.591: Failed to acquire dquot type 0 [ 61.350402][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.366479][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.369284][ T4992] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.501058][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.512598][ T5006] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 61.610719][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.683029][ T5024] netlink: 'gtp': attribute type 8 has an invalid length. [ 61.913109][ T5050] batadv_slave_0: entered promiscuous mode [ 61.931953][ T5049] batadv_slave_0: left promiscuous mode [ 61.977211][ T5059] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 62.018197][ T5062] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.625: error while reading EA inode 32 err=-116 [ 62.049310][ T5062] EXT4-fs (loop1): Remounting filesystem read-only [ 62.056143][ T5062] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.070443][ T5062] EXT4-fs (loop1): 1 orphan inode deleted [ 62.076928][ T5062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.089835][ T5062] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.185553][ T5076] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 62.202458][ T5076] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 62.228298][ T5083] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 62.240284][ T5076] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 62.249375][ T5076] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 62.272856][ T5076] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 62.281667][ T5076] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 62.294154][ T5076] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 62.303144][ T5076] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 62.325177][ T5076] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 62.334075][ T5076] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 62.373325][ T5095] EXT4-fs: Ignoring removed orlov option [ 62.385393][ T5095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.509428][ T5102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.532764][ T5102] EXT4-fs (loop4): 1 truncate cleaned up [ 62.539108][ T5102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.768562][ T5121] EXT4-fs: Ignoring removed i_version option [ 62.774919][ T5121] EXT4-fs: Ignoring removed bh option [ 62.788665][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.812416][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.850148][ T5121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.909143][ T5121] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.972410][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.989819][ T5129] set_capacity_and_notify: 9 callbacks suppressed [ 62.989837][ T5129] loop3: detected capacity change from 0 to 8192 [ 63.007757][ T5129] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.426803][ T5188] __nla_validate_parse: 6 callbacks suppressed [ 63.426872][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 63.573897][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 63.605934][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 63.616990][ T5209] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 63.682156][ T5214] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 63.807340][ T5224] loop2: detected capacity change from 0 to 128 [ 63.956609][ T5238] netlink: 'syz.2.701': attribute type 8 has an invalid length. [ 63.964612][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 63.988194][ T5238] bond0: entered promiscuous mode [ 63.993486][ T5238] bond_slave_0: entered promiscuous mode [ 63.999442][ T5238] bond_slave_1: entered promiscuous mode [ 64.015242][ T5238] gretap0: entered promiscuous mode [ 64.024434][ T5238] ip6gretap0: entered promiscuous mode [ 64.031835][ T5238] hsr1: entered promiscuous mode [ 64.273868][ T5270] loop2: detected capacity change from 0 to 2048 [ 64.323621][ T5270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.372530][ T5270] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.389749][ T5270] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.717: bg 0: block 345: padding at end of block bitmap is not set [ 64.404549][ T5270] EXT4-fs (loop2): Remounting filesystem read-only [ 64.439760][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.062271][ T5335] loop1: detected capacity change from 0 to 512 [ 65.118378][ T5335] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.158061][ T5335] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.739: corrupted inode contents [ 65.223963][ T5335] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.739: mark_inode_dirty error [ 65.320895][ T5335] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.739: corrupted inode contents [ 65.343845][ T5335] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.739: mark_inode_dirty error [ 65.412956][ T5357] loop4: detected capacity change from 0 to 512 [ 65.425189][ T5357] EXT4-fs: Ignoring removed bh option [ 65.437270][ T5357] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.040807][ T5357] EXT4-fs (loop4): 1 truncate cleaned up [ 66.360624][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 66.360640][ T29] audit: type=1400 audit(1766952554.274:940): avc: denied { ioctl } for pid=5368 comm="syz.2.752" path="socket:[10045]" dev="sockfs" ino=10045 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.360866][ T5370] syzkaller1: entered promiscuous mode [ 66.398463][ T5370] syzkaller1: entered allmulticast mode [ 66.439716][ T29] audit: type=1400 audit(1766952554.354:941): avc: denied { name_bind } for pid=5368 comm="syz.2.752" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.569073][ T29] audit: type=1400 audit(1766952554.484:942): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.599598][ T5382] Falling back ldisc for ptm1. [ 66.631825][ T5389] ip6gre0: entered promiscuous mode [ 66.684660][ T5389] team0: Device ip6gre0 is of different type [ 66.696401][ T29] audit: type=1400 audit(1766952554.614:943): avc: denied { read open } for pid=5395 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.743124][ T29] audit: type=1400 audit(1766952554.634:944): avc: denied { shutdown } for pid=5391 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.782264][ T29] audit: type=1400 audit(1766952554.664:945): avc: denied { execmem } for pid=5396 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.990305][ T5423] loop4: detected capacity change from 0 to 1024 [ 67.007021][ T5423] EXT4-fs: inline encryption not supported [ 67.022218][ T5427] loop2: detected capacity change from 0 to 512 [ 67.052554][ T5427] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.091049][ T29] audit: type=1400 audit(1766952555.004:946): avc: denied { ioctl } for pid=5422 comm="syz.4.766" path="/159/file1/file1" dev="loop4" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.138269][ T5427] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.767: corrupted inode contents [ 67.161844][ T5427] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.767: mark_inode_dirty error [ 67.186613][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 67.200421][ T959] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.209446][ T5427] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.767: corrupted inode contents [ 67.209451][ T959] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.229172][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 67.231227][ T959] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.248667][ T5427] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.767: mark_inode_dirty error [ 67.262440][ T959] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.263023][ T29] audit: type=1400 audit(1766952555.174:947): avc: denied { create } for pid=5426 comm="syz.2.767" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.298922][ T29] audit: type=1400 audit(1766952555.204:948): avc: denied { add_name } for pid=5426 comm="syz.2.767" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.319982][ T29] audit: type=1400 audit(1766952555.204:949): avc: denied { rename } for pid=5426 comm="syz.2.767" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 67.418967][ T5460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 67.506283][ T5472] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 67.554505][ T5478] sch_tbf: burst 22 is lower than device lo mtu (1514) ! [ 67.570846][ T5482] netlink: 68 bytes leftover after parsing attributes in process `syz.3.785'. [ 67.602638][ T5484] loop0: detected capacity change from 0 to 2048 [ 67.636384][ T5484] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.653974][ T5484] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.786: bg 0: block 345: padding at end of block bitmap is not set [ 67.668547][ T5487] loop3: detected capacity change from 0 to 2048 [ 67.669726][ T5487] EXT4-fs: Ignoring removed nobh option [ 67.685281][ T5484] EXT4-fs (loop0): Remounting filesystem read-only [ 67.707474][ T5487] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.817778][ T5504] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.797: bg 0: block 345: padding at end of block bitmap is not set [ 67.840014][ T5504] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 352 with error 117 [ 67.852861][ T5504] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.852861][ T5504] [ 67.913343][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 368 with max blocks 2 with error 117 [ 67.926074][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.926074][ T37] [ 68.049052][ T5512] loop3: detected capacity change from 0 to 8192 [ 68.061132][ T5512] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.203775][ T5530] loop0: detected capacity change from 0 to 512 [ 68.237173][ T5530] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 68.245189][ T5530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 68.269454][ T5530] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.279400][ T5530] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.294069][ T5530] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 68.304614][ T5530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.805: bg 0: block 40: padding at end of block bitmap is not set [ 68.320636][ T5530] EXT4-fs (loop0): Remounting filesystem read-only [ 68.335052][ T5530] EXT4-fs (loop0): 1 truncate cleaned up [ 68.344894][ T5530] EXT4-fs (loop0): shut down requested (2) [ 68.485314][ T5547] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 68.536126][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 68.553157][ T5552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.813'. [ 68.567149][ T5554] loop4: detected capacity change from 0 to 2048 [ 68.585521][ T5554] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.615702][ T5554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.815: bg 0: block 345: padding at end of block bitmap is not set [ 68.635702][ T5554] EXT4-fs (loop4): Remounting filesystem read-only [ 68.716712][ T5571] loop4: detected capacity change from 0 to 256 [ 68.729172][ T5571] vfat: Unknown parameter '' [ 68.925439][ T5589] loop2: detected capacity change from 0 to 1024 [ 68.940543][ T5589] EXT4-fs: inline encryption not supported [ 69.192426][ T5586] chnl_net:caif_netlink_parms(): no params data found [ 69.209688][ T123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 69.220145][ T123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.269888][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.277127][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.294840][ T5586] bridge_slave_0: entered allmulticast mode [ 69.307613][ T5586] bridge_slave_0: entered promiscuous mode [ 69.320870][ T123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 69.331371][ T123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.354044][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.361246][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.368557][ T5586] bridge_slave_1: entered allmulticast mode [ 69.375911][ T5586] bridge_slave_1: entered promiscuous mode [ 69.405987][ T123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 69.416462][ T123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.430500][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.441465][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.468530][ T123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 69.479063][ T123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.491729][ T5586] team0: Port device team_slave_0 added [ 69.508645][ T5586] team0: Port device team_slave_1 added [ 69.541650][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.548652][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.574610][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.587233][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.594317][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.620652][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.668759][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 69.682342][ T5633] bridge_slave_1: left allmulticast mode [ 69.688060][ T5633] bridge_slave_1: left promiscuous mode [ 69.693889][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.701935][ T5633] bridge_slave_0: left promiscuous mode [ 69.707676][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.758216][ T5586] hsr_slave_0: entered promiscuous mode [ 69.764551][ T5586] hsr_slave_1: entered promiscuous mode [ 69.771054][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 69.776886][ T5586] Cannot create hsr debugfs directory [ 69.830700][ T123] bridge_slave_1: left allmulticast mode [ 69.836436][ T123] bridge_slave_1: left promiscuous mode [ 69.842234][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.850751][ T123] bridge_slave_0: left allmulticast mode [ 69.856437][ T123] bridge_slave_0: left promiscuous mode [ 69.862309][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.941482][ T123] bond2 (unregistering): (slave geneve2): Releasing active interface [ 70.001938][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.012561][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.022760][ T123] bond0 (unregistering): Released all slaves [ 70.032621][ T123] bond1 (unregistering): (slave lo): Releasing backup interface [ 70.040878][ T123] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 70.053204][ T123] bond1 (unregistering): Released all slaves [ 70.062535][ T123] bond2 (unregistering): Released all slaves [ 70.121957][ T123] hsr_slave_0: left promiscuous mode [ 70.127671][ T123] hsr_slave_1: left promiscuous mode [ 70.133552][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.141082][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.159143][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.166579][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.193128][ T123] veth1_macvtap: left promiscuous mode [ 70.198716][ T123] veth0_macvtap: left promiscuous mode [ 70.204656][ T123] veth1_vlan: left promiscuous mode [ 70.210690][ T123] veth0_vlan: left promiscuous mode [ 70.328827][ T123] team0 (unregistering): Port device team_slave_1 removed [ 70.339760][ T123] team0 (unregistering): Port device team_slave_0 removed [ 70.392432][ T5651] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 70.451647][ T5586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.462418][ T5586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.476157][ T5586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.486098][ T5617] chnl_net:caif_netlink_parms(): no params data found [ 70.496095][ T5586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.566156][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.573334][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.581059][ T5617] bridge_slave_0: entered allmulticast mode [ 70.588039][ T5617] bridge_slave_0: entered promiscuous mode [ 70.602874][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.610254][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.622268][ T5617] bridge_slave_1: entered allmulticast mode [ 70.629141][ T5617] bridge_slave_1: entered promiscuous mode [ 70.670333][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.685438][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.711574][ T5617] team0: Port device team_slave_0 added [ 70.722279][ T5617] team0: Port device team_slave_1 added [ 70.755510][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.762776][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.789210][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.811179][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.818182][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.844519][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.905802][ T123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.957655][ T5647] chnl_net:caif_netlink_parms(): no params data found [ 70.976156][ T5617] hsr_slave_0: entered promiscuous mode [ 70.982763][ T5617] hsr_slave_1: entered promiscuous mode [ 70.988772][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 70.994623][ T5617] Cannot create hsr debugfs directory [ 71.015586][ T123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.030675][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.082632][ T123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.094440][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.101703][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.109229][ T5647] bridge_slave_0: entered allmulticast mode [ 71.116301][ T5647] bridge_slave_0: entered promiscuous mode [ 71.144398][ T5709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 71.164084][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.171461][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.185070][ T5647] bridge_slave_1: entered allmulticast mode [ 71.196378][ T5647] bridge_slave_1: entered promiscuous mode [ 71.214507][ T123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.257262][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.269384][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.298469][ T5718] loop2: detected capacity change from 0 to 2048 [ 71.313819][ T5721] loop4: detected capacity change from 0 to 1024 [ 71.314329][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.346332][ T5721] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.856: Failed to acquire dquot type 0 [ 71.359501][ T5721] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 71.375080][ T5721] EXT4-fs (loop4): 1 truncate cleaned up [ 71.391775][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.399056][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.407702][ T5721] __quota_error: 36 callbacks suppressed [ 71.407722][ T5721] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 71.422678][ T5721] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 71.432242][ T5721] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.856: Failed to acquire dquot type 0 [ 71.457426][ T123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.505695][ T3323] EXT4-fs unmount: 20 callbacks suppressed [ 71.505713][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.523142][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.530255][ T2083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.558960][ T5647] team0: Port device team_slave_0 added [ 71.578526][ T5647] team0: Port device team_slave_1 added [ 71.589476][ T123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.658213][ T29] audit: type=1400 audit(1766952559.564:983): avc: denied { shutdown } for pid=5739 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.678143][ T29] audit: type=1400 audit(1766952559.564:984): avc: denied { getopt } for pid=5739 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.697894][ T29] audit: type=1400 audit(1766952559.564:985): avc: denied { name_connect } for pid=5739 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 71.748169][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.755377][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.781947][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.799583][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.806600][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.832893][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.854552][ T123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.899692][ T5746] loop4: detected capacity change from 0 to 128 [ 71.912552][ T5617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.932339][ T5647] hsr_slave_0: entered promiscuous mode [ 71.938667][ T5746] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.942791][ T5647] hsr_slave_1: entered promiscuous mode [ 71.958135][ T5746] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.959961][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 71.973149][ T5647] Cannot create hsr debugfs directory [ 71.983702][ T29] audit: type=1400 audit(1766952559.894:986): avc: denied { watch watch_reads } for pid=5745 comm="syz.4.860" path="/180/file0/file0" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 72.009405][ T123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.020935][ T29] audit: type=1400 audit(1766952559.894:987): avc: denied { remount } for pid=5745 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 72.041352][ T5617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.060389][ T5617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.116713][ T5617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.122400][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.157833][ T29] audit: type=1400 audit(1766952560.064:988): avc: denied { create } for pid=5750 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.178289][ T29] audit: type=1400 audit(1766952560.064:989): avc: denied { write } for pid=5750 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.198382][ T29] audit: type=1400 audit(1766952560.064:990): avc: denied { nlmsg_write } for pid=5750 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.283110][ T123] bridge_slave_1: left allmulticast mode [ 72.289178][ T123] bridge_slave_1: left promiscuous mode [ 72.295038][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.329307][ T123] bridge_slave_0: left allmulticast mode [ 72.335011][ T123] bridge_slave_0: left promiscuous mode [ 72.341189][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.461440][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.472354][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.481940][ T123] bond0 (unregistering): Released all slaves [ 72.552235][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.563307][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.573150][ T123] bond0 (unregistering): Released all slaves [ 72.582343][ T123] bond1 (unregistering): Released all slaves [ 72.598548][ T5790] wireguard0: entered promiscuous mode [ 72.604141][ T5790] wireguard0: entered allmulticast mode [ 72.656641][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.679998][ T123] hsr_slave_0: left promiscuous mode [ 72.685921][ T123] hsr_slave_1: left promiscuous mode [ 72.692157][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.699930][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.710180][ T123] hsr_slave_0: left promiscuous mode [ 72.716241][ T123] hsr_slave_1: left promiscuous mode [ 72.722413][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.730049][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.737542][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.745054][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.756364][ T123] veth1_macvtap: left promiscuous mode [ 72.761987][ T123] veth0_macvtap: left promiscuous mode [ 72.767544][ T123] veth1_vlan: left promiscuous mode [ 72.773272][ T123] veth0_vlan: left promiscuous mode [ 72.845217][ T123] team0 (unregistering): Port device team_slave_1 removed [ 72.855560][ T123] team0 (unregistering): Port device team_slave_0 removed [ 72.918149][ T123] team0 (unregistering): Port device team_slave_1 removed [ 72.928380][ T123] team0 (unregistering): Port device team_slave_0 removed [ 72.993209][ T5647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.007157][ T5647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.024580][ T5647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.039507][ T5647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.071273][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.108714][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.129149][ T2262] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.136506][ T2262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.164905][ T2262] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.172338][ T2262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.196110][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.223064][ T5617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.251668][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.281260][ T2262] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.288435][ T2262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.315928][ T2262] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.323116][ T2262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.375200][ T5586] veth0_vlan: entered promiscuous mode [ 73.427698][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.436502][ T5586] veth1_vlan: entered promiscuous mode [ 73.470865][ T5586] veth0_macvtap: entered promiscuous mode [ 73.485025][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.497429][ T5586] veth1_macvtap: entered promiscuous mode [ 73.514888][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.537265][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.561965][ T2445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581230][ T2445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.609443][ T2445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.618535][ T2445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748369][ T5870] dummy0: entered promiscuous mode [ 73.754301][ T5870] macsec1: entered allmulticast mode [ 73.759908][ T5870] dummy0: entered allmulticast mode [ 73.767091][ T5870] dummy0: left allmulticast mode [ 73.772346][ T5870] dummy0: left promiscuous mode [ 73.787664][ T5617] veth0_vlan: entered promiscuous mode [ 73.805641][ T5647] veth0_vlan: entered promiscuous mode [ 73.812990][ T5617] veth1_vlan: entered promiscuous mode [ 73.823403][ T5647] veth1_vlan: entered promiscuous mode [ 73.841275][ T5617] veth0_macvtap: entered promiscuous mode [ 73.850490][ T5617] veth1_macvtap: entered promiscuous mode [ 73.865662][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.879983][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.891948][ T5647] veth0_macvtap: entered promiscuous mode [ 73.905032][ T123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.916516][ T5647] veth1_macvtap: entered promiscuous mode [ 73.923689][ T123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.942044][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955570][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.976518][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.994594][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.015796][ T5883] netlink: 'syz.5.876': attribute type 13 has an invalid length. [ 74.026269][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.085573][ T5883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.109606][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.155501][ T5890] loop4: detected capacity change from 0 to 1024 [ 74.166397][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204685][ T5890] EXT4-fs: inline encryption not supported [ 74.236813][ T5890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.252697][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.366783][ T5890] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 16: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 74.412152][ T5890] EXT4-fs (loop4): Remounting filesystem read-only [ 74.489480][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.536475][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.884'. [ 74.586539][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 74.888588][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 75.229734][ T5971] loop5: detected capacity change from 0 to 1024 [ 75.281480][ T5971] EXT4-fs: Ignoring removed orlov option [ 75.301767][ T5971] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.322055][ T5971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.358620][ T5985] loop6: detected capacity change from 0 to 1024 [ 75.369984][ T2083] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.379570][ T5985] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 75.393252][ T5971] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.898: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 75.428240][ T5971] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.898: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 75.465555][ T5998] syzkaller1: entered promiscuous mode [ 75.471478][ T5998] syzkaller1: entered allmulticast mode [ 75.481222][ T5985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.531159][ T5617] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.543660][ T5586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.895605][ T6047] 9p: Bad value for 'rfdno' [ 76.001875][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.918'. [ 76.033875][ T6056] veth1_macvtap: left promiscuous mode [ 76.788026][ T6112] loop2: detected capacity change from 0 to 512 [ 76.798673][ T6112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.814483][ T6112] EXT4-fs (loop2): 1 truncate cleaned up [ 76.827136][ T6112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.850796][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 76.850812][ T29] audit: type=1400 audit(1766952564.764:1038): avc: denied { append } for pid=6111 comm="syz.2.922" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.043926][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.085099][ T6132] loop6: detected capacity change from 0 to 512 [ 77.093241][ T6132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.117579][ T6132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.132445][ T6132] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.157327][ T29] audit: type=1400 audit(1766952565.064:1039): avc: denied { bind } for pid=6135 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.177274][ T29] audit: type=1400 audit(1766952565.064:1040): avc: denied { listen } for pid=6135 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.197129][ T29] audit: type=1400 audit(1766952565.064:1041): avc: denied { setattr } for pid=6130 comm="syz.6.929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.238034][ T5617] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.367048][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.7.935'. [ 77.376283][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.7.935'. [ 77.398363][ T29] audit: type=1400 audit(1766952565.304:1042): avc: denied { read } for pid=6151 comm="syz.5.936" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.422091][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 77.422121][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.434922][ T29] audit: type=1400 audit(1766952565.304:1043): avc: denied { open } for pid=6151 comm="syz.5.936" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.682457][ T2445] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.725764][ T2445] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.812458][ T2445] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.842603][ T6174] loop2: detected capacity change from 0 to 1024 [ 77.861222][ T6174] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 77.877640][ T6174] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.891495][ T2445] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.910205][ T6174] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.931494][ T6174] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.938373][ T6174] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.945: Inode bitmap for bg 0 marked uninitialized [ 77.957251][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.983711][ T6174] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.945: path /198/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 78.016617][ T29] audit: type=1400 audit(1766952565.924:1044): avc: denied { watch watch_reads } for pid=6173 comm="syz.2.945" path="/198/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.062537][ T2445] bridge_slave_1: left allmulticast mode [ 78.068355][ T2445] bridge_slave_1: left promiscuous mode [ 78.074127][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.086127][ T2445] bridge_slave_0: left allmulticast mode [ 78.091979][ T2445] bridge_slave_0: left promiscuous mode [ 78.097673][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.106864][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.144911][ T29] audit: type=1400 audit(1766952566.044:1045): avc: denied { listen } for pid=6183 comm="syz.4.946" lport=58000 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.169131][ T29] audit: type=1400 audit(1766952566.044:1046): avc: denied { accept } for pid=6183 comm="syz.4.946" lport=58000 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.259778][ T29] audit: type=1326 audit(1766952566.164:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a93cf749 code=0x7ffc0000 [ 78.415811][ T2445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.431388][ T2445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.449458][ T2445] bond0 (unregistering): Released all slaves [ 78.535761][ T2445] hsr_slave_0: left promiscuous mode [ 78.542008][ T2445] hsr_slave_1: left promiscuous mode [ 78.553785][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.561423][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.584793][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.592317][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.619857][ T2445] veth1_macvtap: left promiscuous mode [ 78.636704][ T2445] veth0_macvtap: left promiscuous mode [ 78.644418][ T2445] veth1_vlan: left promiscuous mode [ 78.650040][ T2445] veth0_vlan: left promiscuous mode [ 78.749511][ T2445] team0 (unregistering): Port device team_slave_1 removed [ 78.779660][ T2445] team0 (unregistering): Port device team_slave_0 removed [ 78.798963][ T6226] loop5: detected capacity change from 0 to 512 [ 78.820282][ T6226] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.965: inode has both inline data and extents flags [ 78.857705][ T6226] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.965: couldn't read orphan inode 15 (err -117) [ 78.908567][ T6226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.981654][ T6234] loop4: detected capacity change from 0 to 512 [ 78.991329][ T5586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.003073][ T6166] chnl_net:caif_netlink_parms(): no params data found [ 79.032022][ T6234] EXT4-fs (loop4): too many log groups per flexible block group [ 79.070814][ T6234] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 79.088926][ T6234] EXT4-fs (loop4): mount failed [ 79.162825][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.170279][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.202495][ T6166] bridge_slave_0: entered allmulticast mode [ 79.243679][ T6166] bridge_slave_0: entered promiscuous mode [ 79.255906][ T6258] loop4: detected capacity change from 0 to 512 [ 79.270153][ T6261] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 79.279381][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.287510][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.299531][ T6258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.347422][ T6166] bridge_slave_1: entered allmulticast mode [ 79.348715][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 79.365770][ T6166] bridge_slave_1: entered promiscuous mode [ 79.406423][ T6258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.435195][ T6166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.445989][ T6166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.540402][ T6166] team0: Port device team_slave_0 added [ 79.547194][ T6166] team0: Port device team_slave_1 added [ 79.629641][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.979'. [ 79.650052][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.657287][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.683483][ T6166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.703533][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.710692][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.736939][ T6166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.748559][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.979'. [ 79.795586][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.799792][ T6166] hsr_slave_0: entered promiscuous mode [ 79.811229][ T6166] hsr_slave_1: entered promiscuous mode [ 80.010532][ T3406] IPVS: starting estimator thread 0... [ 80.020522][ T6319] IPVS: sed: FWM 3 0x00000003 - no destination available [ 80.046439][ T6322] loop2: detected capacity change from 0 to 1024 [ 80.057542][ T6166] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 80.081823][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.094247][ T6166] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 80.109272][ T6321] IPVS: using max 1872 ests per chain, 93600 per kthread [ 80.119073][ T6166] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 80.129373][ T6322] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.142102][ T6166] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 80.151225][ T6330] netlink: 256 bytes leftover after parsing attributes in process `syz.4.991'. [ 80.192835][ T6322] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.987: bg 0: block 112: padding at end of block bitmap is not set [ 80.223284][ T6166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.235038][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.246375][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.249602][ T6322] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 80.253543][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.265825][ T6322] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.265825][ T6322] [ 80.294747][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.301911][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.380608][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.506502][ T6166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.564307][ T6377] gtp0: entered promiscuous mode [ 80.798543][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 80.820990][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 80.893319][ T6166] veth0_vlan: entered promiscuous mode [ 80.916970][ T6166] veth1_vlan: entered promiscuous mode [ 80.940295][ T6428] loop5: detected capacity change from 0 to 7 [ 80.960167][ T6166] veth0_macvtap: entered promiscuous mode [ 80.979771][ T6166] veth1_macvtap: entered promiscuous mode [ 81.001861][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.027061][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.052230][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080177][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.107949][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.127138][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.461829][ T6477] loop2: detected capacity change from 0 to 256 [ 81.485816][ T6477] FAT-fs (loop2): bogus number of FAT sectors [ 81.492056][ T6477] FAT-fs (loop2): Can't find a valid FAT filesystem [ 81.520402][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1030'. [ 81.640920][ T6493] loop7: detected capacity change from 0 to 2048 [ 81.674434][ T6493] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 81.689627][ T6493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.722687][ T6493] EXT4-fs error (device loop7): ext4_ext_precache:649: inode #2: comm syz.7.1034: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 81.760535][ T6493] EXT4-fs (loop7): Remounting filesystem read-only [ 81.777913][ T6507] loop2: detected capacity change from 0 to 128 [ 81.789464][ T6507] bio_check_eod: 172 callbacks suppressed [ 81.789483][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.789483][ T6507] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 81.810144][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.810144][ T6507] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 81.824630][ T6507] buffer_io_error: 16 callbacks suppressed [ 81.824644][ T6507] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 81.849669][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.849669][ T6507] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 81.863451][ T6507] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 81.873160][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.873160][ T6507] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 81.892162][ T6510] loop8: detected capacity change from 0 to 1024 [ 81.904432][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.904432][ T6507] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 81.910451][ T6510] EXT4-fs: inline encryption not supported [ 81.918819][ T6507] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 81.924378][ T6510] EXT4-fs: Ignoring removed i_version option [ 81.934801][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.934801][ T6507] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 81.939467][ T5647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.952585][ T6507] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 81.978495][ T6507] syz.2.1037: attempt to access beyond end of device [ 81.978495][ T6507] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 82.000609][ T6510] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.035078][ T6507] syz.2.1037: attempt to access beyond end of device [ 82.035078][ T6507] loop2: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 82.048949][ T6507] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 82.063202][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.1038: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.085553][ T6507] syz.2.1037: attempt to access beyond end of device [ 82.085553][ T6507] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 82.091977][ T6513] loop7: detected capacity change from 0 to 512 [ 82.100360][ T6507] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 82.131937][ T6510] __quota_error: 89 callbacks suppressed [ 82.131957][ T6510] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 82.156495][ T6507] syz.2.1037: attempt to access beyond end of device [ 82.156495][ T6507] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 82.171984][ T6507] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 82.180650][ T6507] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 82.200996][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.1038: lblock 0 mapped to illegal pblock 48 (length 1) [ 82.209653][ T946] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.231907][ T6513] EXT4-fs (loop7): too many log groups per flexible block group [ 82.241839][ T6513] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 82.248735][ T6513] EXT4-fs (loop7): mount failed [ 82.255486][ T946] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.269317][ T946] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.276411][ T6507] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 82.278223][ T946] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.296354][ T6510] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 82.305427][ T6510] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.1038: Failed to acquire dquot type 0 [ 82.317486][ T6510] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 82.348394][ T6507] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 82.370110][ T6510] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.1038: mark_inode_dirty error [ 82.388735][ T6510] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 82.400730][ T6510] EXT4-fs (loop8): 1 orphan inode deleted [ 82.406905][ T6510] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.420006][ T52] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.467401][ T52] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 82.476088][ T52] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 82.487968][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.527981][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.547471][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.570421][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.594454][ T29] audit: type=1400 audit(1766952570.504:1137): avc: denied { override_creds } for pid=6531 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.615938][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.671721][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.809148][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.858281][ T6510] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 16: comm syz.8.1038: lblock 0 mapped to illegal pblock 16 (length 1) [ 82.920705][ T29] audit: type=1400 audit(1766952570.834:1138): avc: denied { mount } for pid=6550 comm="syz.5.1047" name="/" dev="autofs" ino=14725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 82.960339][ T6166] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.052634][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1055'. [ 83.064893][ T6566] loop7: detected capacity change from 0 to 512 [ 83.114738][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1055'. [ 83.124063][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1055'. [ 83.134984][ T6566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.188994][ T6566] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.252313][ T5647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.307657][ T6580] loop9: detected capacity change from 0 to 7 [ 83.320270][ T6580] loop9: unable to read partition table [ 83.326706][ T6580] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 83.326706][ T6580] ) failed (rc=-5) [ 83.360983][ T6583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1063'. [ 83.383664][ T6593] bridge_slave_1: left allmulticast mode [ 83.389563][ T6593] bridge_slave_1: left promiscuous mode [ 83.395801][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.449263][ T6593] bridge_slave_0: left allmulticast mode [ 83.455124][ T6593] bridge_slave_0: left promiscuous mode [ 83.461029][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.559699][ T29] audit: type=1400 audit(1766952571.474:1139): avc: denied { mounton } for pid=6597 comm="syz.7.1069" path="/34/file2/bus" dev="loop7" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 83.614240][ T29] audit: type=1400 audit(1766952571.524:1140): avc: denied { create } for pid=6607 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.635447][ T29] audit: type=1400 audit(1766952571.524:1141): avc: denied { ioctl } for pid=6607 comm="syz.4.1074" path="socket:[14785]" dev="sockfs" ino=14785 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.661920][ T29] audit: type=1400 audit(1766952571.524:1142): avc: denied { write } for pid=6607 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.743436][ T29] audit: type=1400 audit(1766952571.654:1143): avc: denied { cpu } for pid=6618 comm="syz.8.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.769101][ T6618] uprobe: syz.8.1079:6618 failed to unregister, leaking uprobe [ 83.776830][ T6621] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.798205][ T5647] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 83.800032][ T4380] loop2: p1 p2 p3 p4 [ 83.806202][ T5647] FAT-fs (loop7): Filesystem has been set read-only [ 83.814834][ T6621] EXT4-fs (loop5): 1 truncate cleaned up [ 83.825684][ T4380] loop2: p3 start 331777 is beyond EOD, truncated [ 83.832323][ T4380] loop2: p4 size 262144 extends beyond EOD, truncated [ 83.840001][ T6621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.874065][ T6615] loop2: p1 p2 p3 p4 [ 83.881842][ T6624] netlink: 'syz.7.1081': attribute type 13 has an invalid length. [ 83.892355][ T6615] loop2: p3 start 331777 is beyond EOD, truncated [ 83.899044][ T6615] loop2: p4 size 262144 extends beyond EOD, truncated [ 83.936317][ T6624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.101008][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 84.101175][ T4380] udevd[4380]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.112587][ T3577] udevd[3577]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.177742][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.177880][ T4380] udevd[4380]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.200554][ T3577] udevd[3577]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 84.402078][ T946] ================================================================== [ 84.410329][ T946] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 84.420198][ T946] [ 84.422554][ T946] write to 0xffff88812267c36e of 2 bytes by task 6628 on cpu 1: [ 84.430210][ T946] copy_folio_from_iter_atomic+0x760/0x1150 [ 84.436138][ T946] generic_perform_write+0x2c2/0x490 [ 84.441455][ T946] ext4_buffered_write_iter+0x1ee/0x3c0 [ 84.447121][ T946] ext4_file_write_iter+0x387/0xf60 [ 84.452349][ T946] iter_file_splice_write+0x66b/0xa20 [ 84.457739][ T946] direct_splice_actor+0x156/0x2a0 [ 84.462878][ T946] splice_direct_to_actor+0x312/0x680 [ 84.468271][ T946] do_splice_direct+0xda/0x150 [ 84.473142][ T946] do_sendfile+0x380/0x650 [ 84.477583][ T946] __x64_sys_sendfile64+0x105/0x150 [ 84.482908][ T946] x64_sys_call+0x2db1/0x3000 [ 84.487624][ T946] do_syscall_64+0xca/0x2b0 [ 84.492245][ T946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.498249][ T946] [ 84.500587][ T946] read to 0xffff88812267c000 of 1024 bytes by task 946 on cpu 0: [ 84.508320][ T946] copy_folio_from_iter_atomic+0x760/0x1150 [ 84.514328][ T946] generic_perform_write+0x2c2/0x490 [ 84.519642][ T946] shmem_file_write_iter+0xc5/0xf0 [ 84.524804][ T946] lo_rw_aio+0x673/0x720 [ 84.529274][ T946] loop_process_work+0x56d/0xaa0 [ 84.534245][ T946] loop_workfn+0x31/0x40 [ 84.538613][ T946] process_scheduled_works+0x4ce/0x9d0 [ 84.544109][ T946] worker_thread+0x582/0x770 [ 84.548737][ T946] kthread+0x489/0x510 [ 84.552931][ T946] ret_from_fork+0x149/0x290 [ 84.557647][ T946] ret_from_fork_asm+0x1a/0x30 [ 84.562525][ T946] [ 84.564863][ T946] Reported by Kernel Concurrency Sanitizer on: [ 84.571024][ T946] CPU: 0 UID: 0 PID: 946 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.580846][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.591104][ T946] Workqueue: loop5 loop_workfn SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.595888][ T946] ================================================================== [ 84.874152][ T946] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.951977][ T946] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.002233][ T946] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.086454][ T6628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.097199][ T946] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.149195][ T946] bridge_slave_1: left allmulticast mode [ 85.154907][ T946] bridge_slave_1: left promiscuous mode [ 85.160788][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.170754][ T946] bridge_slave_0: left allmulticast mode [ 85.176615][ T946] bridge_slave_0: left promiscuous mode [ 85.182423][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.271347][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.282354][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.292132][ T946] bond0 (unregistering): Released all slaves [ 85.333639][ T946] hsr_slave_0: left promiscuous mode [ 85.340380][ T946] hsr_slave_1: left promiscuous mode [ 85.346076][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.353709][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.361986][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.369436][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.381230][ T946] veth0_macvtap: left promiscuous mode [ 85.386899][ T946] veth1_vlan: left promiscuous mode [ 85.392617][ T946] veth0_vlan: left promiscuous mode [ 85.470552][ T946] team0 (unregistering): Port device team_slave_1 removed [ 85.480933][ T946] team0 (unregistering): Port device team_slave_0 removed [ 85.798730][ T946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.809260][ T946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.862094][ T946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.872459][ T946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.922665][ T946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.933159][ T946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.971509][ T946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.982053][ T946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.070044][ T946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.122822][ T946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.173135][ T946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.212389][ T946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.299761][ T946] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.372043][ T946] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.432145][ T946] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.491915][ T946] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.550377][ T946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.605122][ T946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.652311][ T946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.705275][ T946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.772731][ T946] bridge_slave_1: left allmulticast mode [ 86.778528][ T946] bridge_slave_1: left promiscuous mode [ 86.784614][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.792929][ T946] bridge_slave_0: left allmulticast mode [ 86.798980][ T946] bridge_slave_0: left promiscuous mode [ 86.804876][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.813961][ T946] bridge_slave_1: left allmulticast mode [ 86.819736][ T946] bridge_slave_1: left promiscuous mode [ 86.825639][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.834951][ T946] bridge_slave_0: left allmulticast mode [ 86.840801][ T946] bridge_slave_0: left promiscuous mode [ 86.846600][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.856019][ T946] dummy0: left allmulticast mode [ 86.861652][ T946] bridge0: port 3(dummy0) entered disabled state [ 86.868723][ T946] bridge_slave_1: left allmulticast mode [ 86.874535][ T946] bridge_slave_1: left promiscuous mode [ 86.880521][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.888718][ T946] bridge_slave_0: left allmulticast mode [ 86.894596][ T946] bridge_slave_0: left promiscuous mode [ 86.900426][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.062244][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.072300][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.082131][ T946] bond0 (unregistering): Released all slaves [ 87.107649][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.117518][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.127316][ T946] bond0 (unregistering): Released all slaves [ 87.182017][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.192197][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.201715][ T946] bond0 (unregistering): Released all slaves [ 87.212271][ T946] ip6gretap0 (unregistering): left promiscuous mode [ 87.228978][ T946] gretap0 (unregistering): left promiscuous mode [ 87.271121][ T946] bond0 (unregistering): left promiscuous mode [ 87.277875][ T946] bond_slave_0: left promiscuous mode [ 87.283381][ T946] bond_slave_1: left promiscuous mode [ 87.291282][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.301302][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.311367][ T946] bond0 (unregistering): Released all slaves [ 87.382505][ T946] hsr_slave_0: left promiscuous mode [ 87.388363][ T946] hsr_slave_1: left promiscuous mode [ 87.394574][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.402056][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.410525][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.417951][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.428411][ T946] hsr_slave_0: left promiscuous mode [ 87.435906][ T946] hsr_slave_1: left promiscuous mode [ 87.441903][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.449416][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.457307][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.464979][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.474899][ T946] hsr_slave_0: left promiscuous mode [ 87.480811][ T946] hsr_slave_1: left promiscuous mode [ 87.486457][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.494019][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.502199][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.509751][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.519178][ T946] hsr_slave_0: left promiscuous mode [ 87.524884][ T946] hsr_slave_1: left promiscuous mode [ 87.530732][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.538111][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.546116][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.553868][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.572951][ T946] veth1_macvtap: left promiscuous mode [ 87.578574][ T946] veth0_macvtap: left promiscuous mode [ 87.584393][ T946] veth1_vlan: left promiscuous mode [ 87.589683][ T946] veth0_vlan: left promiscuous mode [ 87.595519][ T946] veth1_macvtap: left promiscuous mode [ 87.601083][ T946] veth0_macvtap: left promiscuous mode [ 87.606886][ T946] veth1_vlan: left promiscuous mode [ 87.612502][ T946] veth0_vlan: left promiscuous mode [ 87.618475][ T946] veth1_macvtap: left promiscuous mode [ 87.624124][ T946] veth0_macvtap: left promiscuous mode [ 87.629727][ T946] veth1_vlan: left promiscuous mode [ 87.635050][ T946] veth0_vlan: left promiscuous mode [ 87.641298][ T946] veth1_macvtap: left promiscuous mode [ 87.646860][ T946] veth0_macvtap: left promiscuous mode [ 87.652506][ T946] veth1_vlan: left promiscuous mode [ 87.657777][ T946] veth0_vlan: left promiscuous mode [ 87.829881][ T946] team0 (unregistering): Port device team_slave_1 removed [ 87.840417][ T946] team0 (unregistering): Port device team_slave_0 removed [ 87.897784][ T946] team0 (unregistering): Port device team_slave_1 removed [ 87.907418][ T946] team0 (unregistering): Port device team_slave_0 removed [ 87.964519][ T946] team0 (unregistering): Port device team_slave_1 removed [ 87.974805][ T946] team0 (unregistering): Port device team_slave_0 removed [ 88.032131][ T946] team0 (unregistering): Port device team_slave_1 removed [ 88.042103][ T946] team0 (unregistering): Port device team_slave_0 removed [ 88.869810][ T946] IPVS: stop unused estimator thread 0...