last executing test programs: 2m48.850041763s ago: executing program 32 (id=1016): syz_open_procfs(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x201}, 0x8) 2m44.004236981s ago: executing program 33 (id=1183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) close(r1) 2m20.310739139s ago: executing program 34 (id=1620): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2m18.608557099s ago: executing program 7 (id=1630): syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xd4}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m18.305966931s ago: executing program 7 (id=1637): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) 2m18.182550112s ago: executing program 7 (id=1644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m17.935935503s ago: executing program 7 (id=1650): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 2m17.872847813s ago: executing program 35 (id=1649): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 2m17.606365025s ago: executing program 7 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733", 0x3f, 0x2) open(0x0, 0x141840, 0x0) 2m16.263150603s ago: executing program 36 (id=1675): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe"], 0x34c}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/25, 0x19}, 0xde6c}], 0x33, 0x40012002, 0x0) 2m15.424989928s ago: executing program 7 (id=1686): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd0, 0x0, 0x0, 0x0) 2m15.384195789s ago: executing program 37 (id=1686): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd0, 0x0, 0x0, 0x0) 2m4.514617352s ago: executing program 1 (id=1906): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000002000020013"], 0x98}, 0x1, 0x7}, 0x0) 2m4.514293892s ago: executing program 1 (id=1907): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2m4.503514232s ago: executing program 1 (id=1908): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x4}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) 2m3.629009527s ago: executing program 1 (id=1937): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 2m3.512452118s ago: executing program 1 (id=1940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2m3.339035789s ago: executing program 1 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000019c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r2, 0x1) 2m3.338504909s ago: executing program 38 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000019c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r2, 0x1) 1m4.174599045s ago: executing program 2 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) socket(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000640)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000010) 1m4.093860505s ago: executing program 2 (id=4089): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e25, 0x400, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4002, 0x0, 0x5}}, 0x26) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1m3.999240476s ago: executing program 2 (id=4093): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/258, 0x102}], 0x1}, 0x8}], 0x1, 0x100, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) 1m3.119732731s ago: executing program 2 (id=4126): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 1m3.075955771s ago: executing program 2 (id=4128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a00)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 1m2.598689374s ago: executing program 2 (id=4151): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1m2.598544334s ago: executing program 39 (id=4151): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 55.108029318s ago: executing program 5 (id=4319): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00"], 0x30}], 0x1, 0x0) 55.018784598s ago: executing program 5 (id=4321): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x24b80) 54.964006079s ago: executing program 5 (id=4324): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0500000000000000df250220000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) read$nci(r0, 0x0, 0x0) 54.097980454s ago: executing program 5 (id=4338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 54.055988814s ago: executing program 5 (id=4344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 53.853984625s ago: executing program 5 (id=4352): fremovexattr(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1712, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101180, 0x10003, 0xc, 0x9, 0x5, 0x9, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 53.827826606s ago: executing program 40 (id=4352): fremovexattr(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1712, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101180, 0x10003, 0xc, 0x9, 0x5, 0x9, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 34.040748081s ago: executing program 9 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 33.989715731s ago: executing program 9 (id=4810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 33.947413402s ago: executing program 9 (id=4812): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 32.946104198s ago: executing program 9 (id=4841): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) 32.900006648s ago: executing program 9 (id=4844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.310981932s ago: executing program 9 (id=4866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) 32.214507952s ago: executing program 41 (id=4866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) 1.182285853s ago: executing program 3 (id=5710): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r2, 0x200004) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r3, 0x0, 0xfffffffff7fffffc}, 0xc) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1.103471264s ago: executing program 3 (id=5713): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="cc000901a40300005402000008000000b50200008100000000000000000000001a0d4da68196bf9b24"], 0x305) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 1.050626404s ago: executing program 8 (id=5715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.031532624s ago: executing program 8 (id=5716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.014369114s ago: executing program 8 (id=5717): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 993.070645ms ago: executing program 8 (id=5718): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/176, 0xb0}, 0x6037}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001440)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 682.053086ms ago: executing program 0 (id=5728): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x100, @empty}, 0x1c) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x10d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 553.980007ms ago: executing program 4 (id=5732): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 506.598007ms ago: executing program 4 (id=5734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 441.359988ms ago: executing program 4 (id=5735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, 0x0, 0x0, 0x189, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fstat(r2, &(0x7f0000000400)) 419.261648ms ago: executing program 4 (id=5736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 390.085648ms ago: executing program 4 (id=5737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000d40)={[{@jqfmt_vfsv1}, {@nouid32}, {@discard}, {@acl}, {@data_ordered}, {@mblk_io_submit}, {@nojournal_checksum}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 384.659558ms ago: executing program 0 (id=5738): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 349.898048ms ago: executing program 0 (id=5741): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x60840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x18) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000014c0)=[{{0x2}, {0x1}}, {{0x0, 0x1, 0x1}, {0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 282.968809ms ago: executing program 0 (id=5743): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x5660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 255.818079ms ago: executing program 6 (id=5745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) 254.506389ms ago: executing program 3 (id=5746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 190.886609ms ago: executing program 6 (id=5747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 190.472099ms ago: executing program 4 (id=5748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 189.719919ms ago: executing program 3 (id=5749): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 187.479919ms ago: executing program 6 (id=5750): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r3, 0x0, 0x0) 143.69946ms ago: executing program 6 (id=5751): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 134.606369ms ago: executing program 8 (id=5752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r2, 0x0) 126.192189ms ago: executing program 3 (id=5753): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r2, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 87.95944ms ago: executing program 0 (id=5754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000000c00)=ANY=[], 0x0) 79.97403ms ago: executing program 6 (id=5755): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, 0x0) 28.0533ms ago: executing program 6 (id=5756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 27.52617ms ago: executing program 8 (id=5757): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r4}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 24.60533ms ago: executing program 3 (id=5758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x1, 0x7, 0x101, 0x6, 0xe, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24, 0x2, 0xe}, {0x10, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x6c}}, 0x0) 0s ago: executing program 0 (id=5759): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) kernel console output (not intermixed with test programs): :483: comm syz.9.4218: Invalid block bitmap block 0 in block_group 0 [ 175.941685][T13707] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 175.965491][T13707] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.4218: attempt to clear invalid blocks 983261 len 1 [ 175.988492][T13535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.996959][T13707] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.4218: Invalid inode table block 0 in block_group 0 [ 176.011797][T13707] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 176.026526][T13707] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 176.032411][T13730] syzkaller1: entered promiscuous mode [ 176.040693][T13730] syzkaller1: entered allmulticast mode [ 176.042539][T13707] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.4218: Invalid inode table block 0 in block_group 0 [ 176.059372][T13707] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 176.069390][T13707] EXT4-fs error (device loop9): ext4_truncate:4637: inode #11: comm syz.9.4218: mark_inode_dirty error [ 176.081328][T13707] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 176.090845][T13707] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz.9.4218: Invalid inode table block 0 in block_group 0 [ 176.104353][T13707] EXT4-fs (loop9): 1 truncate cleaned up [ 176.111906][T13707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.173180][T10737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.277700][T13535] veth0_vlan: entered promiscuous mode [ 176.286787][T13535] veth1_vlan: entered promiscuous mode [ 176.307424][T13535] veth0_macvtap: entered promiscuous mode [ 176.332531][T13535] veth1_macvtap: entered promiscuous mode [ 176.379086][T13535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.391348][T13535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.403018][T13763] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 176.413927][T13763] SELinux: failed to load policy [ 176.422165][ T5643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.431859][ T5643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.463421][ T5643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.472178][ T5643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.712757][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.712923][ T3897] Bluetooth: hci0: command 0x1003 tx timeout [ 176.784904][T13810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13810 comm=syz.0.4255 [ 176.849514][T13816] loop9: detected capacity change from 0 to 512 [ 176.857709][T13816] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 176.876285][T13816] EXT4-fs (loop9): invalid journal inode [ 176.893329][T13816] EXT4-fs (loop9): can't get journal size [ 176.907180][T13816] EXT4-fs (loop9): 1 truncate cleaned up [ 176.920481][T13816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.948483][T10737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.964212][T13830] xt_hashlimit: max too large, truncated to 1048576 [ 176.976700][T13830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.021569][T13837] loop9: detected capacity change from 0 to 512 [ 177.045234][T13837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.093161][T10737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.205975][T13868] loop5: detected capacity change from 0 to 512 [ 177.213715][T13868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 177.228294][T13868] EXT4-fs (loop5): 1 truncate cleaned up [ 177.234585][T13868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.276122][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4291'. [ 177.287238][T13875] veth1_macvtap: left promiscuous mode [ 177.294491][T13535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.390486][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4284'. [ 177.505144][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4296'. [ 177.518495][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4296'. [ 177.692801][T13893] syzkaller0: entered promiscuous mode [ 177.698330][T13893] syzkaller0: entered allmulticast mode [ 177.706830][T13902] hub 5-0:1.0: USB hub found [ 177.711566][T13902] hub 5-0:1.0: 8 ports detected [ 177.725519][T13906] loop8: detected capacity change from 0 to 512 [ 177.738723][T13906] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4294: inode has both inline data and extents flags [ 177.762230][T13906] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4294: couldn't read orphan inode 15 (err -117) [ 177.774635][T13906] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.789610][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 177.789624][ T29] audit: type=1400 audit(177.766:4524): avc: denied { append } for pid=13905 comm="syz.8.4294" path="/530/file0/blkio.bfq.avg_queue_size" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 177.954118][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.924915][ T29] audit: type=1326 audit(179.906:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 179.995343][ T29] audit: type=1326 audit(179.906:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.018288][ T29] audit: type=1326 audit(179.926:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.041255][ T29] audit: type=1326 audit(179.926:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.064164][ T29] audit: type=1326 audit(179.926:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.087270][ T29] audit: type=1400 audit(179.926:4530): avc: denied { getopt } for pid=13913 comm="syz.5.4298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.106822][ T29] audit: type=1326 audit(179.936:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.129727][ T29] audit: type=1326 audit(179.936:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.152716][ T29] audit: type=1326 audit(179.946:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13912 comm="syz.9.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 180.185722][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4303'. [ 180.303247][T13931] infiniband syz!: set active [ 180.307985][T13931] infiniband syz!: added team_slave_0 [ 180.324465][T13931] RDS/IB: syz!: added [ 180.328590][T13931] smc: adding ib device syz! with port count 1 [ 180.334888][T13931] smc: ib device syz! port 1 has no pnetid [ 180.386209][T13945] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4310'. [ 180.432045][T13945] 0X: renamed from caif0 [ 180.444556][T13945] 0X: entered allmulticast mode [ 180.449805][T13945] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 180.614148][T13963] netlink: 'syz.3.4317': attribute type 1 has an invalid length. [ 180.626384][T13964] netlink: 'syz.5.4318': attribute type 1 has an invalid length. [ 180.634219][T13964] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4318'. [ 181.862124][T14038] smc: net device bond0 applied user defined pnetid SYZ0 [ 181.875953][T14038] smc: net device bond0 erased user defined pnetid SYZ0 [ 181.900175][ T5605] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.967865][T14046] macvtap0: entered promiscuous mode [ 181.983539][T14046] macvtap0: left promiscuous mode [ 182.007767][ T5605] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.128040][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4359'. [ 182.137088][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4359'. [ 182.154616][ T5605] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.185936][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4359'. [ 182.195115][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4359'. [ 182.224168][ T5605] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.248191][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4359'. [ 182.257210][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4359'. [ 182.393035][ T5605] bridge_slave_1: left allmulticast mode [ 182.398720][ T5605] bridge_slave_1: left promiscuous mode [ 182.404513][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.423786][ T5605] bridge_slave_0: left allmulticast mode [ 182.429458][ T5605] bridge_slave_0: left promiscuous mode [ 182.435249][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.642915][ T5605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.684148][ T5605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.724192][ T5605] bond0 (unregistering): Released all slaves [ 182.850341][T14099] macvtap0: entered promiscuous mode [ 182.881085][T14099] macvtap0: left promiscuous mode [ 182.919564][ T5605] hsr_slave_0: left promiscuous mode [ 182.932030][ T5605] hsr_slave_1: left promiscuous mode [ 182.959641][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.967125][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.006561][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.014139][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.044917][ T5605] veth1_macvtap: left promiscuous mode [ 183.053921][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4377'. [ 183.062655][ T5605] veth0_macvtap: left promiscuous mode [ 183.062953][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4377'. [ 183.083285][ T5605] veth1_vlan: left promiscuous mode [ 183.120062][ T5605] veth0_vlan: left promiscuous mode [ 183.131805][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4377'. [ 183.140841][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4377'. [ 183.348686][ T5605] team0 (unregistering): Port device team_slave_1 removed [ 183.359416][ T5605] team0 (unregistering): Port device team_slave_0 removed [ 183.530515][T14053] chnl_net:caif_netlink_parms(): no params data found [ 183.627553][T14053] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.634659][T14053] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.652778][T14053] bridge_slave_0: entered allmulticast mode [ 183.664680][T14053] bridge_slave_0: entered promiscuous mode [ 183.683282][T14053] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.690451][T14053] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.713406][T14053] bridge_slave_1: entered allmulticast mode [ 183.720039][T14053] bridge_slave_1: entered promiscuous mode [ 183.751563][T14053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.762455][T14053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.785798][T14053] team0: Port device team_slave_0 added [ 183.792287][T14053] team0: Port device team_slave_1 added [ 183.807589][T14053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.814552][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.840752][T14053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.852116][T14053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.859131][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.885288][T14053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.913326][T14053] hsr_slave_0: entered promiscuous mode [ 183.919406][T14053] hsr_slave_1: entered promiscuous mode [ 183.925434][T14053] debugfs: 'hsr0' already exists in 'hsr' [ 183.931166][T14053] Cannot create hsr debugfs directory [ 184.187060][T14053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.196125][T14053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.204986][T14053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.213926][T14053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.249010][T14053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.261731][T14053] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.271012][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.278174][ T5599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.289481][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.296627][ T5599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.359420][T14053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.460599][T14053] veth0_vlan: entered promiscuous mode [ 184.468670][T14053] veth1_vlan: entered promiscuous mode [ 184.484687][T14053] veth0_macvtap: entered promiscuous mode [ 184.491916][T14053] veth1_macvtap: entered promiscuous mode [ 184.503031][T14053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.514716][T14053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.525572][ T5605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.534443][ T5605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.543422][ T5605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.552375][ T5605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.596344][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 184.596361][ T29] audit: type=1326 audit(184.576:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.625472][ T29] audit: type=1326 audit(184.576:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.654166][ T29] audit: type=1326 audit(184.626:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.677218][ T29] audit: type=1326 audit(184.626:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.700125][ T29] audit: type=1326 audit(184.626:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.723169][ T29] audit: type=1326 audit(184.626:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.746166][ T29] audit: type=1326 audit(184.626:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.769203][ T29] audit: type=1326 audit(184.626:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.792370][ T29] audit: type=1326 audit(184.626:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.815216][ T29] audit: type=1326 audit(184.626:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 184.861896][T14146] syzkaller0: entered promiscuous mode [ 184.867420][T14146] syzkaller0: entered allmulticast mode [ 186.774578][T14165] cgroup: Setting release_agent not allowed [ 186.866491][T14177] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 186.877847][T14177] bond2 (unregistering): Released all slaves [ 187.125336][T14192] netlink: 'syz.3.4399': attribute type 29 has an invalid length. [ 187.134335][T14192] netlink: 'syz.3.4399': attribute type 29 has an invalid length. [ 187.162932][T14192] netlink: 'syz.3.4399': attribute type 29 has an invalid length. [ 187.179388][T14192] netlink: 'syz.3.4399': attribute type 29 has an invalid length. [ 187.329910][ C1] sd 0:0:1:0: [sda] tag#4960 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 187.340324][ C1] sd 0:0:1:0: [sda] tag#4960 CDB: Write(6) 0a 00 00 00 06 00 00 00 02 00 00 00 [ 187.384320][T14210] loop9: detected capacity change from 0 to 164 [ 187.432567][T14210] syz.9.4406: attempt to access beyond end of device [ 187.432567][T14210] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 187.466984][T14210] syz.9.4406: attempt to access beyond end of device [ 187.466984][T14210] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 187.575688][T14224] netlink: 'syz.9.4413': attribute type 3 has an invalid length. [ 187.622185][T14227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14227 comm=syz.8.4417 [ 187.725141][T14238] bond0: (slave dummy0): Releasing backup interface [ 187.740912][T14238] bridge_slave_0: left allmulticast mode [ 187.746749][T14238] bridge_slave_0: left promiscuous mode [ 187.752441][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.766220][T14238] bridge_slave_1: left allmulticast mode [ 187.771910][T14238] bridge_slave_1: left promiscuous mode [ 187.777852][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.787942][T14238] bond0: (slave bond_slave_0): Releasing backup interface [ 187.811922][T14238] bond0: (slave bond_slave_1): Releasing backup interface [ 187.831934][T14238] team0: Port device team_slave_0 removed [ 187.844306][T14238] team0: Port device team_slave_1 removed [ 187.855465][T14238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.862908][T14238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.893443][T14238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.900874][T14238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.966172][T14258] __nla_validate_parse: 2 callbacks suppressed [ 187.966213][T14258] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4428'. [ 188.000176][T14238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.028949][T14258] 1X: renamed from 60X [ 188.035969][T14258] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 188.197404][T14265] loop9: detected capacity change from 0 to 1024 [ 188.273831][T14265] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 188.334017][T14271] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4436'. [ 188.347283][T14265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.398905][T10737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.439749][T14282] loop9: detected capacity change from 0 to 512 [ 188.450251][T14282] EXT4-fs: dax option not supported [ 188.937742][T14324] smc: net device bond0 applied user defined pnetid SYZ0 [ 188.945362][T14324] smc: net device bond0 erased user defined pnetid SYZ0 [ 189.620953][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 189.620970][ T29] audit: type=1400 audit(189.596:4736): avc: denied { tracepoint } for pid=14340 comm="syz.8.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.647588][ T29] audit: type=1400 audit(189.626:4737): avc: denied { allowed } for pid=14341 comm="syz.4.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 189.671722][ T29] audit: type=1400 audit(189.646:4738): avc: denied { create } for pid=14341 comm="syz.4.4462" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 189.694397][ T5605] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.716010][ T29] audit: type=1400 audit(189.646:4739): avc: denied { map } for pid=14341 comm="syz.4.4462" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 189.739812][ T29] audit: type=1400 audit(189.646:4740): avc: denied { read write } for pid=14341 comm="syz.4.4462" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 189.817253][ T29] audit: type=1400 audit(189.796:4741): avc: denied { create } for pid=14352 comm="syz.8.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.876308][ T29] audit: type=1400 audit(189.796:4742): avc: denied { connect } for pid=14352 comm="syz.8.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.990868][ T29] audit: type=1326 audit(189.966:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b94cf6c9 code=0x7ffc0000 [ 190.013952][ T29] audit: type=1326 audit(189.966:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b94cf6c9 code=0x7ffc0000 [ 190.088594][T14378] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4480'. [ 190.134594][T14382] veth0_to_team: entered promiscuous mode [ 190.142749][T14369] 9pnet_fd: Insufficient options for proto=fd [ 190.177698][ T29] audit: type=1326 audit(190.026:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fa9b94cf6c9 code=0x7ffc0000 [ 190.207494][T14386] vcan0: entered allmulticast mode [ 190.213104][T14386] vcan0: left allmulticast mode [ 190.219824][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4484'. [ 190.256534][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4484'. [ 190.340099][T14399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.716212][T14452] xt_hashlimit: max too large, truncated to 1048576 [ 191.323606][T14536] wireguard0: entered promiscuous mode [ 191.329120][T14536] wireguard0: entered allmulticast mode [ 191.680810][ T3897] Bluetooth: hci0: command 0x1003 tx timeout [ 191.686902][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.250202][T14624] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4531'. [ 192.269921][T14624] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4531'. [ 192.395950][T14638] veth0_to_team: entered promiscuous mode [ 192.609200][T14664] loop8: detected capacity change from 0 to 128 [ 192.713028][T14671] syz.8.4550: attempt to access beyond end of device [ 192.713028][T14671] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 192.753572][T14669] program syz.9.4552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.754231][T14671] syz.8.4550: attempt to access beyond end of device [ 192.754231][T14671] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 192.764084][T14669] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 192.822270][T14671] syz.8.4550: attempt to access beyond end of device [ 192.822270][T14671] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 192.870196][T14671] syz.8.4550: attempt to access beyond end of device [ 192.870196][T14671] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 192.888247][T14671] syz.8.4550: attempt to access beyond end of device [ 192.888247][T14671] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 192.901827][T14671] syz.8.4550: attempt to access beyond end of device [ 192.901827][T14671] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 192.915387][T14671] syz.8.4550: attempt to access beyond end of device [ 192.915387][T14671] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 192.929231][T14671] syz.8.4550: attempt to access beyond end of device [ 192.929231][T14671] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 193.002970][T14671] syz.8.4550: attempt to access beyond end of device [ 193.002970][T14671] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 193.016502][T14671] syz.8.4550: attempt to access beyond end of device [ 193.016502][T14671] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 193.032050][T14683] loop9: detected capacity change from 0 to 128 [ 193.039035][T14683] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.049668][T14683] FAT-fs (loop9): FAT read failed (blocknr 4128) [ 193.909716][T14729] ipip0: entered promiscuous mode [ 194.687648][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 194.687666][ T29] audit: type=1326 audit(194.666:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14738 comm="syz.8.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad8c91f6c9 code=0x7ffc0000 [ 194.785317][ T29] audit: type=1326 audit(194.716:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14738 comm="syz.8.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad8c91f6c9 code=0x7ffc0000 [ 194.827554][T14759] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 194.864611][ T29] audit: type=1400 audit(194.806:4950): avc: denied { load_policy } for pid=14758 comm="syz.3.4588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 194.872755][T14759] SELinux: failed to load policy [ 194.884431][ T29] audit: type=1326 audit(194.826:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 194.912126][ T29] audit: type=1326 audit(194.826:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 194.935105][ T29] audit: type=1326 audit(194.826:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 194.958129][ T29] audit: type=1326 audit(194.826:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 194.981045][ T29] audit: type=1326 audit(194.826:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 195.003968][ T29] audit: type=1326 audit(194.826:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 195.026933][ T29] audit: type=1326 audit(194.826:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 195.175467][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4598'. [ 195.268688][T14790] SELinux: policydb version 1728 does not match my version range 15-35 [ 195.292069][T14790] SELinux: failed to load policy [ 195.310612][T14792] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.529603][T14815] ipip0: entered promiscuous mode [ 195.750638][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4622'. [ 195.760164][T14835] IPVS: Error connecting to the multicast addr [ 195.830518][T14826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.852778][T14826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.181663][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4638'. [ 196.243123][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4638'. [ 196.299712][T14877] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4641'. [ 196.308743][T14877] 0{X: renamed from gretap0 (while UP) [ 196.316865][T14877] 0{X: entered allmulticast mode [ 196.329686][T14877] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 196.354070][T14883] loop0: detected capacity change from 0 to 512 [ 196.361641][T14883] EXT4-fs: Ignoring removed i_version option [ 196.376139][T14883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.472839][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.495354][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4646'. [ 196.504309][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4646'. [ 196.523073][T14908] macvtap0: entered promiscuous mode [ 196.529149][T14908] macvtap0: left promiscuous mode [ 196.655977][T14932] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4655'. [ 197.659426][T15054] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 197.884353][T15079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15079 comm=syz.3.4674 [ 198.016935][T15092] loop9: detected capacity change from 0 to 1024 [ 198.039520][T15092] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4679: Failed to acquire dquot type 0 [ 198.067481][T15092] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 198.083183][T15092] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.4679: corrupted inode contents [ 198.099812][T15092] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.4679: mark_inode_dirty error [ 198.123256][T15092] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.4679: corrupted inode contents [ 198.150353][T15092] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.4679: mark_inode_dirty error [ 198.203695][T15092] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.4679: corrupted inode contents [ 198.238661][T15092] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 198.274636][T15092] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.4679: corrupted inode contents [ 198.286854][T15092] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.4679: mark_inode_dirty error [ 198.328407][T15092] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 198.366133][T15092] EXT4-fs (loop9): 1 truncate cleaned up [ 198.377279][T15111] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4686'. [ 198.388779][T15092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.489414][T15092] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 198.534473][T10737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.576613][T15123] veth2: entered promiscuous mode [ 198.581732][T15123] veth2: entered allmulticast mode [ 198.597156][T15125] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 198.731657][T15140] loop8: detected capacity change from 0 to 764 [ 198.740009][T15140] rock: directory entry would overflow storage [ 198.746284][T15140] rock: sig=0x5245, size=8, remaining=5 [ 198.981599][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.039645][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4723'. [ 199.048682][T15186] Unsupported xt match [ 199.048691][T15186] unable to load match [ 199.121962][T15191] loop0: detected capacity change from 0 to 512 [ 199.149897][T15191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.197302][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.251887][T15208] SELinux: ebitmap: truncated map [ 199.279975][T15208] SELinux: failed to load policy [ 199.334586][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.344605][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.534154][T15237] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 200.086501][T15253] netlink: 'syz.0.4753': attribute type 1 has an invalid length. [ 200.107007][T15253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.156038][ T23] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 60 sec [ 200.164866][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 200.164879][ T29] audit: type=1326 audit(200.116:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.9.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.193974][ T29] audit: type=1326 audit(200.116:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.9.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.216662][ T29] audit: type=1326 audit(200.116:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.9.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.239619][ T29] audit: type=1326 audit(200.116:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.9.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.262496][ T29] audit: type=1326 audit(200.116:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.9.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.285408][ T29] audit: type=1326 audit(200.116:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.9.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.530128][ T29] audit: type=1107 audit(200.506:5157): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 200.561112][ T29] audit: type=1400 audit(200.536:5158): avc: denied { name_connect } for pid=15271 comm="syz.9.4760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 200.595137][T15274] loop9: detected capacity change from 0 to 128 [ 200.601837][T15274] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.613968][T15274] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.632562][ T29] audit: type=1400 audit(200.606:5159): avc: denied { remount } for pid=15273 comm="syz.9.4761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 200.665999][ T5636] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.684282][ T29] audit: type=1326 audit(200.666:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.9.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11196cf6c9 code=0x7ffc0000 [ 200.789809][T15292] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4770'. [ 200.827311][T15298] geneve2: entered promiscuous mode [ 200.832661][T15298] geneve2: entered allmulticast mode [ 200.843921][T15300] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.845615][T15302] macvlan1: entered promiscuous mode [ 200.859310][T15302] ipvlan0: entered promiscuous mode [ 200.866080][T15302] ipvlan0: left promiscuous mode [ 200.871615][T15302] macvlan1: left promiscuous mode [ 200.957107][T15316] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.4781'. [ 200.971058][T15316] netlink: zone id is out of range [ 200.976243][T15316] netlink: zone id is out of range [ 200.981637][T15316] netlink: zone id is out of range [ 200.988125][T15316] netlink: zone id is out of range [ 201.006503][T15316] netlink: set zone limit has 8 unknown bytes [ 201.033733][ T3897] Bluetooth: hci0: command 0x1003 tx timeout [ 201.039334][T15326] netlink: 'syz.0.4787': attribute type 2 has an invalid length. [ 201.040323][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.078425][T15329] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.4788'. [ 201.089180][T15329] netlink: zone id is out of range [ 201.094404][T15329] netlink: zone id is out of range [ 201.099729][T15329] netlink: zone id is out of range [ 201.104915][T15329] netlink: zone id is out of range [ 201.198890][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4796'. [ 201.207967][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4796'. [ 201.234163][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4796'. [ 201.243174][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4796'. [ 201.306377][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4796'. [ 201.315419][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4796'. [ 201.330607][T15366] loop9: detected capacity change from 0 to 4096 [ 201.340031][T15366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.391531][T15386] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4802'. [ 201.664147][T10737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.701474][T15433] loop8: detected capacity change from 0 to 1024 [ 201.709348][T15433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.738988][T15433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 201.747461][T15433] System zones: 0-1, 3-36 [ 201.753677][T15433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.795125][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.321608][T15524] vhci_hcd: default hub control req: a030 v0321 i0003 l0 [ 202.539673][T15540] SELinux: failed to load policy [ 202.581963][T15543] tipc: Started in network mode [ 202.586918][T15543] tipc: Node identity ac14140f, cluster identity 4711 [ 202.611442][T15543] tipc: New replicast peer: 255.255.255.255 [ 202.617547][T15543] tipc: Enabled bearer , priority 10 [ 202.643176][T15547] tipc: Disabling bearer [ 202.844142][T15560] macvlan1: entered promiscuous mode [ 202.850629][T15560] ipvlan0: entered promiscuous mode [ 202.864618][T15560] ipvlan0: left promiscuous mode [ 202.870171][T15560] macvlan1: left promiscuous mode [ 202.951427][T15572] pimreg: entered allmulticast mode [ 202.959284][T15572] pimreg: left allmulticast mode [ 203.065817][ T5591] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.096404][T15582] loop0: detected capacity change from 0 to 512 [ 203.149982][T15582] EXT4-fs (loop0): too many log groups per flexible block group [ 203.170106][ T5591] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.183846][T15582] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 203.190658][T15582] EXT4-fs (loop0): mount failed [ 203.246161][ T5591] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.306038][ T5591] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.367652][T15611] vhci_hcd: invalid port number 255 [ 203.402089][ T5613] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.423440][ T3398] hid_parser_main: 31 callbacks suppressed [ 203.423500][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.436934][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.444351][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.451840][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.459278][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.466737][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.474260][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.481654][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.489149][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.496623][ T3398] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 203.504918][ T3398] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 203.508506][ T5591] bridge_slave_1: left allmulticast mode [ 203.520476][ T5591] bridge_slave_1: left promiscuous mode [ 203.526352][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.547510][ T5591] bridge_slave_0: left promiscuous mode [ 203.553239][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.569678][T15623] netlink: 'syz.8.4870': attribute type 1 has an invalid length. [ 203.663810][ T5591] bond2 (unregistering): (slave gretap1): Releasing active interface [ 203.744887][ T5591] bond1 (unregistering): (slave bridge1): Releasing active interface [ 203.855177][ T5591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.865685][ T5591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.878461][ T5591] bond0 (unregistering): Released all slaves [ 203.887523][ T5591] bond1 (unregistering): Released all slaves [ 203.896968][ T5591] bond2 (unregistering): Released all slaves [ 203.920760][T15623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.938285][T15628] bond3: (slave gretap0): making interface the new active one [ 203.950769][T15628] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 203.992689][ T5591] hsr_slave_0: left promiscuous mode [ 204.001308][T15628] syz.8.4870 (15628) used greatest stack depth: 9304 bytes left [ 204.009356][ T5591] hsr_slave_1: left promiscuous mode [ 204.015211][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.022705][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.034379][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.042071][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.057059][ T5591] veth0_macvtap: left promiscuous mode [ 204.062724][ T5591] veth1_vlan: left promiscuous mode [ 204.069053][ T5591] veth0_vlan: left promiscuous mode [ 204.252233][ T5591] team0 (unregistering): Port device team_slave_1 removed [ 204.270348][ T5591] team0 (unregistering): Port device team_slave_0 removed [ 204.278197][ T5597] smc: removing ib device syz! [ 204.750061][T15626] chnl_net:caif_netlink_parms(): no params data found [ 204.896857][T15626] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.904105][T15626] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.911395][T15626] bridge_slave_0: entered allmulticast mode [ 204.918677][T15626] bridge_slave_0: entered promiscuous mode [ 204.945005][T15626] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.952271][T15626] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.960302][T15626] bridge_slave_1: entered allmulticast mode [ 204.966873][T15626] bridge_slave_1: entered promiscuous mode [ 204.989975][T15626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.004383][T15626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.033243][T15685] net_ratelimit: 3 callbacks suppressed [ 205.033260][T15685] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 205.050598][T15626] team0: Port device team_slave_0 added [ 205.063329][T15626] team0: Port device team_slave_1 added [ 205.083437][T15626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.090401][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.116535][T15626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.128154][T15626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.135155][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.161101][T15626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.180952][T15691] loop8: detected capacity change from 0 to 512 [ 205.189288][T15691] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.4891: error while reading EA inode 32 err=-116 [ 205.202036][T15691] EXT4-fs (loop8): Remounting filesystem read-only [ 205.205046][T15626] hsr_slave_0: entered promiscuous mode [ 205.208998][T15691] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 205.214687][T15626] hsr_slave_1: entered promiscuous mode [ 205.224701][T15691] EXT4-fs (loop8): 1 orphan inode deleted [ 205.230345][T15626] debugfs: 'hsr0' already exists in 'hsr' [ 205.241633][T15626] Cannot create hsr debugfs directory [ 205.253241][T15691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.271898][ T7310] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 205.295958][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.442619][ T3897] Bluetooth: hci0: command 0x1003 tx timeout [ 205.448780][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.538084][T15626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.559599][T15626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.569515][T15626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.579148][T15626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.706052][T15626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.736046][T15626] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.749632][T15512] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.756803][T15512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.778671][T15512] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.785808][T15512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.807826][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 205.807905][ T29] audit: type=1400 audit(205.786:5249): avc: denied { create } for pid=15719 comm="syz.4.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.849263][T15720] atomic_op ffff88811a054d28 conn xmit_atomic 0000000000000000 [ 205.875086][ T29] audit: type=1400 audit(205.826:5250): avc: denied { bind } for pid=15719 comm="syz.4.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.893941][ T29] audit: type=1400 audit(205.826:5251): avc: denied { write } for pid=15719 comm="syz.4.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.933860][T15730] __nla_validate_parse: 3 callbacks suppressed [ 205.933882][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4901'. [ 206.006614][T15626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.208298][T15626] veth0_vlan: entered promiscuous mode [ 206.218159][T15626] veth1_vlan: entered promiscuous mode [ 206.240224][T15626] veth0_macvtap: entered promiscuous mode [ 206.249319][T15626] veth1_macvtap: entered promiscuous mode [ 206.266489][T15626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.287274][T15626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.300343][ T1459] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.335513][ T1459] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.357118][ T29] audit: type=1400 audit(206.336:5252): avc: denied { mounton } for pid=15626 comm="syz-executor" path="/root/syzkaller.VS4Wel/syz-tmp" dev="sda1" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 206.386171][ T1459] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.395989][ T1459] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.404959][ T29] audit: type=1400 audit(206.356:5253): avc: denied { mounton } for pid=15626 comm="syz-executor" path="/root/syzkaller.VS4Wel/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 206.431180][ T29] audit: type=1400 audit(206.366:5254): avc: denied { mounton } for pid=15626 comm="syz-executor" path="/root/syzkaller.VS4Wel/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 206.458432][ T29] audit: type=1400 audit(206.366:5255): avc: denied { mounton } for pid=15626 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 206.480890][ T29] audit: type=1400 audit(206.366:5256): avc: denied { mount } for pid=15626 comm="syz-executor" name="/" dev="gadgetfs" ino=3767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 206.569352][T15775] netlink: 'syz.6.4915': attribute type 2 has an invalid length. [ 206.577133][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4915'. [ 206.594757][T15781] loop0: detected capacity change from 0 to 1024 [ 206.601553][T15781] EXT4-fs: Ignoring removed orlov option [ 206.604027][T15775] netlink: 'syz.6.4915': attribute type 2 has an invalid length. [ 206.615032][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4915'. [ 206.627634][ T29] audit: type=1400 audit(206.586:5257): avc: denied { create } for pid=15776 comm="syz.8.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.646612][ T29] audit: type=1400 audit(206.586:5258): avc: denied { bind } for pid=15776 comm="syz.8.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.671301][T15781] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 206.718232][T15781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.724042][T15789] netem: incorrect gi model size [ 206.735377][T15789] netem: change failed [ 206.745834][T15781] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 206.758225][T15781] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.758225][T15781] [ 206.767989][T15781] EXT4-fs (loop0): Total free blocks count 0 [ 206.774107][T15781] EXT4-fs (loop0): Free/Dirty block details [ 206.780051][T15781] EXT4-fs (loop0): free_blocks=0 [ 206.785057][T15781] EXT4-fs (loop0): dirty_blocks=0 [ 206.790119][T15781] EXT4-fs (loop0): Block reservation details [ 206.796161][T15781] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 206.817135][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.922928][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4931'. [ 207.250173][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4945'. [ 207.298697][T15860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4947'. [ 207.397124][T15872] loop8: detected capacity change from 0 to 512 [ 207.405130][T15872] EXT4-fs: Ignoring removed i_version option [ 207.411173][T15872] EXT4-fs: Ignoring removed bh option [ 207.439325][T15872] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.501349][T15885] atomic_op ffff88816282ad28 conn xmit_atomic 0000000000000000 [ 207.685194][ T2969] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec [ 208.001138][T15911] can0: slcan on ttyS3. [ 208.062900][T15911] can0 (unregistered): slcan off ttyS3. [ 208.077650][T15911] can0: slcan on ttyS3. [ 208.132732][T15910] can0 (unregistered): slcan off ttyS3. [ 208.184141][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4970'. [ 208.193237][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'. [ 208.236284][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.245525][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4970'. [ 208.254543][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'. [ 208.559688][T15955] loop8: detected capacity change from 0 to 128 [ 208.573265][T15955] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 208.707970][ T5597] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 208.729212][ T5597] bio_check_eod: 102 callbacks suppressed [ 208.729239][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.729239][ T5597] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 208.802682][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.802682][ T5597] loop8: rw=1, sector=185, nr_sectors = 16 limit=128 [ 208.839453][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.839453][ T5597] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 208.857251][T15982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.872651][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.872651][ T5597] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 208.902628][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.902628][ T5597] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 208.926203][T15982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.932695][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.932695][ T5597] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 208.970355][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.970355][ T5597] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 208.992667][ T5597] kworker/u8:26: attempt to access beyond end of device [ 208.992667][ T5597] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 209.018621][ T5597] kworker/u8:26: attempt to access beyond end of device [ 209.018621][ T5597] loop8: rw=1, sector=305, nr_sectors = 8 limit=128 [ 209.036896][T15982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.062147][ T5597] kworker/u8:26: attempt to access beyond end of device [ 209.062147][ T5597] loop8: rw=1, sector=321, nr_sectors = 8 limit=128 [ 209.069884][T15994] loop0: detected capacity change from 0 to 128 [ 209.102396][T15994] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 209.115555][T15982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.193883][ T5591] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.211112][ T5591] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.219880][ T5591] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.228351][ T5591] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.308830][T16010] loop6: detected capacity change from 0 to 1024 [ 209.327473][T16010] EXT4-fs: Ignoring removed oldalloc option [ 209.332784][ T5591] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 209.333520][T16010] EXT4-fs: Ignoring removed oldalloc option [ 209.369666][T16010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.395303][T16010] bridge0: entered promiscuous mode [ 209.400665][T16010] macsec1: entered promiscuous mode [ 209.407708][T16010] bridge0: port 3(macsec1) entered blocking state [ 209.414279][T16010] bridge0: port 3(macsec1) entered disabled state [ 209.429324][T16010] macsec1: entered allmulticast mode [ 209.434991][T16010] bridge0: entered allmulticast mode [ 209.443003][T16010] macsec1: left allmulticast mode [ 209.448100][T16010] bridge0: left allmulticast mode [ 209.455464][T16010] bridge0: left promiscuous mode [ 209.472882][ T5591] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.481165][ T5591] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.496308][ T5591] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.506484][ T5591] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.526091][T15626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.681052][T16048] loop8: detected capacity change from 0 to 128 [ 210.038793][T16077] loop6: detected capacity change from 0 to 2048 [ 210.114550][T16077] Alternate GPT is invalid, using primary GPT. [ 210.120930][T16077] loop6: p2 p3 p7 [ 210.282868][T16116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16116 comm=syz.8.5054 [ 210.348389][ T1459] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.072833][T16109] 9pnet_fd: p9_fd_create_tcp (16109): problem connecting socket to 127.0.0.1 [ 211.157589][T16208] netlink: 'syz.3.5095': attribute type 1 has an invalid length. [ 211.165396][T16208] __nla_validate_parse: 12 callbacks suppressed [ 211.165472][T16208] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5095'. [ 211.207488][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 211.207506][ T29] audit: type=1326 audit(211.176:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.236734][ T29] audit: type=1326 audit(211.186:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.259800][ T29] audit: type=1326 audit(211.186:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.282812][ T29] audit: type=1326 audit(211.186:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.305849][ T29] audit: type=1326 audit(211.186:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.328775][ T29] audit: type=1326 audit(211.186:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.355886][ T29] audit: type=1326 audit(211.266:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.379151][ T29] audit: type=1326 audit(211.306:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.402409][ T29] audit: type=1326 audit(211.336:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.425421][ T29] audit: type=1326 audit(211.336:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 211.877615][T16251] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 211.944392][T16257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.954920][T16257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.965338][T16257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.023489][T16257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.033881][T16257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.044205][T16257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.091411][T16266] netlink: 'syz.0.5120': attribute type 39 has an invalid length. [ 212.113841][T16257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.124315][T16257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.134642][T16257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.154918][T16271] loop0: detected capacity change from 0 to 164 [ 212.162435][T16271] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 212.171735][T16271] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 212.180455][T16271] Symlink component flag not implemented [ 212.186233][T16271] Symlink component flag not implemented [ 212.202650][T16271] Symlink component flag not implemented (7) [ 212.208681][T16271] Symlink component flag not implemented (116) [ 212.216716][T16257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.227083][T16257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.237406][T16257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.264947][T16275] atomic_op ffff8881043f5528 conn xmit_atomic 0000000000000000 [ 212.320857][ T5606] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.329161][ T5606] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.337499][ T5606] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.348959][ T5606] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.357378][ T5606] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.365745][ T5606] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.377543][ T5606] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.385972][ T5606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.394363][ T5606] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.402645][ T3897] Bluetooth: hci0: command 0x1003 tx timeout [ 212.408642][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.424999][ T5606] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.433256][ T5606] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.441595][ T5606] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.486107][T16286] loop0: detected capacity change from 0 to 512 [ 212.501483][T16286] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.5127: corrupted xattr block 95: invalid header [ 212.516302][T16286] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5127: bg 0: block 7: invalid block bitmap [ 212.529325][T16286] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 212.542765][T16286] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #11: comm syz.0.5127: corrupted xattr block 95: invalid header [ 212.568876][T16286] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 212.580538][T16286] EXT4-fs (loop0): 1 orphan inode deleted [ 212.586915][T16286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.611773][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5135'. [ 212.629377][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.665741][T16310] loop8: detected capacity change from 0 to 164 [ 212.729970][T16320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.883480][T16344] vhci_hcd: invalid port number 96 [ 212.888615][T16344] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 213.165362][T16380] can0: slcan on ptm0. [ 213.202851][T16380] can0 (unregistered): slcan off ptm0. [ 213.208457][T16380] Falling back ldisc for ptm0. [ 213.258812][T16389] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.259023][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5173'. [ 213.268714][T16389] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.287552][T16389] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.326852][T16396] pim6reg1: entered promiscuous mode [ 213.332362][T16396] pim6reg1: entered allmulticast mode [ 213.346602][T16389] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.356500][T16389] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.366327][T16389] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.444756][T16389] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.454653][T16389] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.464460][T16389] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.514392][T16389] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.524228][T16389] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.534038][T16389] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.604621][ T5597] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.612921][ T5597] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.621264][ T5597] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.649769][ T5597] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.658132][ T5597] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.666484][ T5597] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.674994][ T5597] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.683374][ T5597] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.691674][ T5597] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.700487][ T5597] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.708846][ T5597] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.713350][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a15cc00: rx timeout, send abort [ 213.717237][ T5597] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.725344][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a15c600: rx timeout, send abort [ 213.741807][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a15cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 213.756131][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a15c600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 213.790524][T16409] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5181'. [ 213.801965][T16407] vhci_hcd: invalid port number 96 [ 213.807131][T16407] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 214.466627][T16486] wg2: entered promiscuous mode [ 214.471526][T16486] wg2: entered allmulticast mode [ 214.782032][T16503] netlink: 'syz.3.5222': attribute type 10 has an invalid length. [ 214.798557][T16503] bond0: (slave dummy0): Releasing backup interface [ 214.808363][T16503] team0: Port device dummy0 added [ 214.815263][T16503] netlink: 'syz.3.5222': attribute type 10 has an invalid length. [ 214.833882][T16503] team0: Port device dummy0 removed [ 214.841379][T16503] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 214.962552][T16517] wg2: entered promiscuous mode [ 214.967580][T16517] wg2: entered allmulticast mode [ 215.012070][T16523] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 215.025500][T16523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.034714][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5230'. [ 215.064278][T16523] bond3 (unregistering): Released all slaves [ 215.294616][ T5606] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.590760][T16562] netlink: 'syz.0.5247': attribute type 12 has an invalid length. [ 215.599338][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5248'. [ 215.609880][T16564] hsr_slave_0: left promiscuous mode [ 215.617391][T16564] hsr_slave_1: left promiscuous mode [ 215.650119][T16571] loop0: detected capacity change from 0 to 512 [ 215.657002][T16571] EXT4-fs: Ignoring removed nobh option [ 215.687548][T16571] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5251: corrupted inode contents [ 215.713070][T16571] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.5251: mark_inode_dirty error [ 215.750264][T16571] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5251: corrupted inode contents [ 215.765934][T16571] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5251: mark_inode_dirty error [ 215.777825][T16571] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5251: Failed to acquire dquot type 0 [ 215.789612][T16571] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5251: corrupted inode contents [ 215.801843][T16571] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.5251: mark_inode_dirty error [ 215.813433][T16571] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5251: corrupted inode contents [ 215.825566][T16571] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5251: mark_inode_dirty error [ 215.837007][T16571] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5251: corrupted inode contents [ 215.849005][T16571] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 215.857688][T16571] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5251: corrupted inode contents [ 215.869714][T16571] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.5251: mark_inode_dirty error [ 215.880936][T16571] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 215.890315][T16571] EXT4-fs (loop0): 1 truncate cleaned up [ 215.896294][T16571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.994584][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.258405][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 216.258424][ T29] audit: type=1400 audit(216.233:5607): avc: denied { write } for pid=16591 comm="syz.0.5269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 216.314886][ T29] audit: type=1326 audit(216.283:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 216.338104][ T29] audit: type=1326 audit(216.283:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 216.361090][ T29] audit: type=1326 audit(216.283:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 216.383977][ T29] audit: type=1326 audit(216.283:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbe7ebf703 code=0x7ffc0000 [ 216.407217][ T29] audit: type=1326 audit(216.313:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbe7ebe17f code=0x7ffc0000 [ 216.429967][ T29] audit: type=1326 audit(216.333:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbbe7ebf757 code=0x7ffc0000 [ 216.449833][T16602] loop8: detected capacity change from 0 to 512 [ 216.452789][ T29] audit: type=1326 audit(216.333:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbe7ebdf10 code=0x7ffc0000 [ 216.482056][ T29] audit: type=1326 audit(216.333:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbbe7ebe32a code=0x7ffc0000 [ 216.504792][ T29] audit: type=1326 audit(216.343:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.4.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 216.529710][T16602] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.658696][T16619] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.668521][T16619] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.678475][T16619] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.784434][T16619] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.794371][T16619] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.804162][T16619] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.875014][T16619] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.884868][T16619] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.894708][T16619] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.954063][T16619] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.963921][T16619] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.973708][T16619] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 217.029970][ T5597] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.038375][ T5597] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 217.046660][ T5597] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.060026][ T5597] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.068324][ T5597] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 217.076682][ T5597] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.092496][ T5597] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.100753][ T5597] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 217.109094][ T5597] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.117917][ T5597] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.126200][ T5597] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 217.134540][ T5597] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.194303][T16646] loop0: detected capacity change from 0 to 1024 [ 217.204800][T16646] EXT4-fs: Ignoring removed orlov option [ 217.210494][T16646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.225212][T16646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.252885][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.352650][ T3897] Bluetooth: hci0: command 0x1003 tx timeout [ 217.353256][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.441188][T16668] netlink: 'syz.0.5289': attribute type 10 has an invalid length. [ 217.449173][T16668] netlink: 'syz.0.5289': attribute type 11 has an invalid length. [ 217.457047][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5289'. [ 217.547826][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5295'. [ 217.661726][T16692] can0: slcan on ptm0. [ 217.682479][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5301'. [ 217.722843][T16692] can0 (unregistered): slcan off ptm0. [ 217.731844][T16692] Falling back ldisc for ptm0. [ 217.742132][T16700] bridge: RTM_NEWNEIGH with invalid ether address [ 217.935727][T16712] loop6: detected capacity change from 0 to 512 [ 217.943473][T16712] EXT4-fs: Ignoring removed i_version option [ 217.949488][T16712] EXT4-fs: Ignoring removed bh option [ 218.026698][T16712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.193537][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5315'. [ 218.289656][T16735] loop8: detected capacity change from 0 to 2048 [ 218.302944][T16735] EXT4-fs: Ignoring removed bh option [ 218.432958][T16735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.460500][T16735] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.502827][T16735] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 218.515165][T16735] EXT4-fs (loop8): This should not happen!! Data will be lost [ 218.515165][T16735] [ 218.524811][T16735] EXT4-fs (loop8): Total free blocks count 0 [ 218.530796][T16735] EXT4-fs (loop8): Free/Dirty block details [ 218.536720][T16735] EXT4-fs (loop8): free_blocks=2415919104 [ 218.542450][T16735] EXT4-fs (loop8): dirty_blocks=48 [ 218.547604][T16735] EXT4-fs (loop8): Block reservation details [ 218.554226][T16735] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 218.595893][T16743] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 218.623984][ T5606] Bluetooth: hci0: Frame reassembly failed (-84) [ 218.790864][T15626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.800540][T16759] loop8: detected capacity change from 0 to 512 [ 218.811149][T16759] EXT4-fs: Ignoring removed nobh option [ 218.826387][T16762] netlink: 'syz.0.5327': attribute type 1 has an invalid length. [ 218.833867][T16759] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5324: corrupted inode contents [ 218.855872][T16759] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.5324: mark_inode_dirty error [ 218.857579][T16762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.878189][T16759] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5324: corrupted inode contents [ 218.896031][T16759] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.5324: mark_inode_dirty error [ 218.908208][T16759] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5324: Failed to acquire dquot type 0 [ 218.929534][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 218.939005][T16759] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5324: corrupted inode contents [ 218.951403][T16759] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.5324: mark_inode_dirty error [ 218.965686][T16762] bond3 (unregistering): Released all slaves [ 218.979735][T16759] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5324: corrupted inode contents [ 219.003361][T16759] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5324: mark_inode_dirty error [ 219.015790][T16759] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5324: corrupted inode contents [ 219.044666][T16759] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 219.053695][T16759] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5324: corrupted inode contents [ 219.065798][T16759] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5324: mark_inode_dirty error [ 219.077302][T16759] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 219.087457][T16759] EXT4-fs (loop8): 1 truncate cleaned up [ 219.106068][T16759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.296870][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.436042][T16792] loop6: detected capacity change from 0 to 8192 [ 219.473337][T16792] loop6: p1 p2 p3 p4 [ 219.483822][T16792] loop6: p3 start 331777 is beyond EOD, truncated [ 219.490355][T16792] loop6: p4 size 262144 extends beyond EOD, truncated [ 219.745001][T16811] ip6gre1: entered allmulticast mode [ 219.799954][T16814] loop6: detected capacity change from 0 to 512 [ 219.816014][T16814] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.838004][T16814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.847398][T16814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.855872][T16814] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.890634][T16814] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.925712][T16814] EXT4-fs (loop6): mount failed [ 219.995205][T16824] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5351'. [ 220.202520][T16848] $H: renamed from bond0 (while UP) [ 220.215407][T16848] $H: entered promiscuous mode [ 220.220618][T16848] bond_slave_0: entered promiscuous mode [ 220.226713][T16848] bond_slave_1: entered promiscuous mode [ 220.233007][T16848] dummy0: entered promiscuous mode [ 220.359751][T16868] netlink: 'syz.6.5368': attribute type 39 has an invalid length. [ 220.420245][T16877] loop6: detected capacity change from 0 to 164 [ 220.428328][T16877] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 220.448471][T16877] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 220.461465][T16877] Symlink component flag not implemented [ 220.467135][T16877] Symlink component flag not implemented [ 220.474498][T16877] Symlink component flag not implemented (7) [ 220.480502][T16877] Symlink component flag not implemented (116) [ 220.524036][T16890] netlink: 'syz.0.5377': attribute type 39 has an invalid length. [ 220.584489][T16894] loop6: detected capacity change from 0 to 512 [ 220.591219][T16894] EXT4-fs: Ignoring removed bh option [ 220.604510][T16894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.632858][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.728442][T15626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.809920][T16907] SELinux: failed to load policy [ 220.992947][T16921] netlink: 'syz.8.5389': attribute type 39 has an invalid length. [ 221.059353][T16926] loop8: detected capacity change from 0 to 164 [ 221.065995][T16923] loop6: detected capacity change from 0 to 8192 [ 221.073733][T16926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 221.085698][T16926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 221.094687][T16926] Symlink component flag not implemented [ 221.100349][T16926] Symlink component flag not implemented [ 221.121055][T16926] Symlink component flag not implemented (7) [ 221.127264][T16926] Symlink component flag not implemented (116) [ 221.224639][T16934] loop0: detected capacity change from 0 to 512 [ 221.265182][T16934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.286205][T16934] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.5394: corrupted inode contents [ 221.305022][T16934] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.5394: mark_inode_dirty error [ 221.329593][T16934] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.5394: corrupted inode contents [ 221.351726][T16934] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.5394: mark_inode_dirty error [ 221.389285][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.404390][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 221.404407][ T29] audit: type=1400 audit(221.383:5742): avc: denied { unmount } for pid=7625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 221.508901][ T1459] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.884799][T16976] pim6reg1: entered promiscuous mode [ 221.890145][T16976] pim6reg1: entered allmulticast mode [ 222.000984][T16986] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.5412'. [ 222.010273][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5412'. [ 222.167543][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5415'. [ 222.232339][T16994] netlink: 'syz.0.5417': attribute type 1 has an invalid length. [ 222.320579][T17000] netlink: 'syz.4.5419': attribute type 39 has an invalid length. [ 222.373665][ T29] audit: type=1326 audit(222.353:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 222.398454][ T29] audit: type=1326 audit(222.353:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 222.421388][ T29] audit: type=1326 audit(222.353:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 222.444345][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118ecd600: rx timeout, send abort [ 222.444389][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118ecce00: rx timeout, send abort [ 222.452643][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888118ecd600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 222.452691][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888118ecce00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 222.489354][ T29] audit: type=1326 audit(222.353:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbe7ebf703 code=0x7ffc0000 [ 222.512072][ T29] audit: type=1326 audit(222.353:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbe7ebe17f code=0x7ffc0000 [ 222.534864][ T29] audit: type=1326 audit(222.353:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbbe7ebf757 code=0x7ffc0000 [ 222.557630][ T29] audit: type=1326 audit(222.373:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbe7ebdf10 code=0x7ffc0000 [ 222.580471][ T29] audit: type=1326 audit(222.373:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbbe7ebe32a code=0x7ffc0000 [ 222.603156][ T29] audit: type=1326 audit(222.373:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16999 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe7ebf6c9 code=0x7ffc0000 [ 222.740910][T17012] loop9: detected capacity change from 0 to 7 [ 222.750992][T17012] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.758922][T17012] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.766892][T17012] loop9: unable to read partition table [ 222.774619][T17012] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 222.774619][T17012] ) failed (rc=-5) [ 222.856247][T17027] netlink: 'syz.3.5429': attribute type 39 has an invalid length. [ 223.012506][T17040] netlink: 'syz.0.5438': attribute type 10 has an invalid length. [ 223.032859][T17045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5440'. [ 223.077953][T17047] loop6: detected capacity change from 0 to 512 [ 223.112340][T17047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.136055][T17047] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.5441: corrupted inode contents [ 223.156158][T17047] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.5441: mark_inode_dirty error [ 223.170666][T17053] loop0: detected capacity change from 0 to 512 [ 223.177443][T17053] EXT4-fs: Ignoring removed i_version option [ 223.183484][T17053] EXT4-fs: Ignoring removed bh option [ 223.202959][T17047] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.5441: corrupted inode contents [ 223.215464][T17047] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.5441: mark_inode_dirty error [ 223.228854][T17053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.273638][T15626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.522679][ T3897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.522725][ T3871] Bluetooth: hci0: command 0x1003 tx timeout [ 223.618286][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.637059][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.999615][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.022906][T17070] loop0: detected capacity change from 0 to 512 [ 224.065855][T17075] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5462'. [ 224.166667][T17083] loop0: detected capacity change from 0 to 256 [ 224.344594][ T5686] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.543277][T17124] netlink: 'syz.4.5474': attribute type 10 has an invalid length. [ 224.555586][T17124] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.596783][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5476'. [ 224.606539][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5476'. [ 224.623113][T17129] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5476'. [ 224.632231][T17129] netlink: 6 bytes leftover after parsing attributes in process `syz.8.5476'. [ 224.644658][T17132] pim6reg: entered allmulticast mode [ 224.661421][T17133] loop0: detected capacity change from 0 to 512 [ 224.668045][T17133] EXT4-fs: Ignoring removed bh option [ 224.681061][T17133] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.690204][T17133] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 224.706027][T17133] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 224.715770][T17133] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 224.724256][T17133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.738915][T17133] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 224.747937][T17133] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 224.757684][T17133] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 224.765953][T17133] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 224.777096][T17133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5477: bg 0: block 353: padding at end of block bitmap is not set [ 224.802472][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.819040][T17148] loop0: detected capacity change from 0 to 128 [ 224.826325][T17148] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 225.115023][T17161] loop0: detected capacity change from 0 to 128 [ 225.124732][T17176] netlink: 'syz.3.5496': attribute type 1 has an invalid length. [ 225.132518][T17176] netlink: 'syz.3.5496': attribute type 4 has an invalid length. [ 225.132603][T17161] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.140299][T17176] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5496'. [ 225.172797][ T7743] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.179965][T17176] netlink: 'syz.3.5496': attribute type 1 has an invalid length. [ 225.189537][T17176] netlink: 'syz.3.5496': attribute type 4 has an invalid length. [ 225.197374][T17176] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5496'. [ 225.259647][T17182] delete_channel: no stack [ 225.279142][T17181] $H: (slave dummy0): Releasing backup interface [ 225.287935][T17181] dummy0: left promiscuous mode [ 225.306772][T17181] bridge_slave_0: left promiscuous mode [ 225.312458][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.320715][T17189] syz.4.5501(17189): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 225.321822][T17181] bridge_slave_1: left allmulticast mode [ 225.339197][T17181] bridge_slave_1: left promiscuous mode [ 225.345042][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.363556][T17181] $H: (slave bond_slave_0): Releasing backup interface [ 225.371090][T17181] bond_slave_0: left promiscuous mode [ 225.388042][T17181] $H: (slave bond_slave_1): Releasing backup interface [ 225.396732][T17181] bond_slave_1: left promiscuous mode [ 225.421210][T17181] team0: Port device team_slave_0 removed [ 225.440016][T17181] team0: Port device team_slave_1 removed [ 225.447072][T17181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.454517][T17181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.464177][T17181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.471575][T17181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.481623][T17181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.629654][T17221] netlink: 'syz.3.5514': attribute type 10 has an invalid length. [ 225.643623][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5515'. [ 225.808050][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.811758][T17242] loop0: detected capacity change from 0 to 8192 [ 225.819873][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.044807][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5528'. [ 226.137522][T17264] netlink: 'syz.0.5532': attribute type 1 has an invalid length. [ 226.392691][ T3871] Bluetooth: hci0: command 0x1003 tx timeout [ 226.398756][ T3897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.447672][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 226.447689][ T29] audit: type=1326 audit(226.423:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.481666][T17274] loop8: detected capacity change from 0 to 512 [ 226.498630][T17274] EXT4-fs: Ignoring removed bh option [ 226.507018][ T29] audit: type=1326 audit(226.463:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.530015][ T29] audit: type=1326 audit(226.463:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.535696][T17274] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.553097][ T29] audit: type=1326 audit(226.463:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.561982][T17274] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 226.593291][ T29] audit: type=1326 audit(226.463:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.616230][ T29] audit: type=1326 audit(226.463:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.639316][ T29] audit: type=1326 audit(226.463:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.662812][ T29] audit: type=1326 audit(226.463:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.686092][ T29] audit: type=1326 audit(226.463:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.709016][ T29] audit: type=1326 audit(226.463:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.5545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9372e7f6c9 code=0x7ffc0000 [ 226.734228][T17274] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 226.753942][T17274] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 226.762921][T17274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.781855][T17274] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 226.790937][T17274] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 226.791107][T17274] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 226.791194][T17274] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 226.793710][T17274] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5535: bg 0: block 353: padding at end of block bitmap is not set [ 226.847670][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.122666][T17301] IPVS: Error connecting to the multicast addr [ 227.355243][T17324] loop0: detected capacity change from 0 to 512 [ 227.394185][T17324] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 227.406980][T17324] EXT4-fs (loop0): orphan cleanup on readonly fs [ 227.407193][T17324] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.407224][T17324] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 227.407753][T17324] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5553: bg 0: block 40: padding at end of block bitmap is not set [ 227.410377][T17324] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 227.410660][T17324] EXT4-fs (loop0): 1 truncate cleaned up [ 227.411127][T17324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.434062][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.700808][T17343] loop8: detected capacity change from 0 to 8192 [ 227.854194][T17369] tipc: New replicast peer: 255.255.255.255 [ 227.860370][T17369] tipc: Enabled bearer , priority 10 [ 228.224593][T17403] SELinux: failed to load policy [ 228.401934][T17430] netlink: 'syz.0.5569': attribute type 1 has an invalid length. [ 228.434193][T17430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.475508][T17430] bond3: (slave veth5): Enslaving as an active interface with a down link [ 228.494358][T17430] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 228.501570][T17430] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 228.632020][T17450] pim6reg1: entered promiscuous mode [ 228.637468][T17450] pim6reg1: entered allmulticast mode [ 228.656160][T17454] __nla_validate_parse: 1 callbacks suppressed [ 228.656176][T17454] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5574'. [ 228.800935][T17484] uprobe: syz.0.5582:17484 failed to unregister, leaking uprobe [ 228.809029][T17484] uprobe: syz.0.5582:17484 failed to unregister, leaking uprobe [ 228.901874][T17500] loop0: detected capacity change from 0 to 1024 [ 228.908918][T17500] EXT4-fs: Ignoring removed bh option [ 228.918659][T17500] EXT4-fs: inline encryption not supported [ 228.930220][T17500] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.941495][T17500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 228.951678][T17500] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.5584: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.966425][T17500] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.5584: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.980718][ T7310] tipc: Node number set to 2886997007 [ 228.986874][T17500] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5584: Failed to acquire dquot type 0 [ 229.004633][T17500] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 229.014352][T17500] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.5584: mark_inode_dirty error [ 229.025912][T17500] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 229.036781][T17500] EXT4-fs (loop0): 1 orphan inode deleted [ 229.043262][T17500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.055943][ T5606] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.070438][ T5606] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:33: Failed to release dquot type 0 [ 229.093529][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.109948][ T7743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.124023][ T7743] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 229.135942][ T7743] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 229.159425][T17524] batadv1: entered promiscuous mode [ 229.178191][T17528] rdma_op ffff888121727980 conn xmit_rdma 0000000000000000 [ 229.181457][T17527] netlink: 1832 bytes leftover after parsing attributes in process `syz.8.5590'. [ 229.261404][T17537] IPv4: Oversized IP packet from 127.202.26.0 [ 229.295937][T17540] syzkaller1: entered promiscuous mode [ 229.301523][T17540] syzkaller1: entered allmulticast mode [ 229.333909][T17543] tipc: Enabled bearer , priority 0 [ 229.342055][T17543] tipc: Disabling bearer [ 229.365791][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5599'. [ 229.378815][T17547] team0: Port device team_slave_1 removed [ 229.440655][T17550] SELinux: failed to load policy [ 229.536604][T17556] loop6: detected capacity change from 0 to 8192 [ 229.592642][ T3897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 229.839472][T17585] tipc: Enabled bearer , priority 0 [ 229.884823][T17585] tipc: Disabling bearer [ 230.111339][T17614] loop8: detected capacity change from 0 to 512 [ 230.118160][T17614] EXT4-fs: Ignoring removed bh option [ 230.125792][T17614] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 230.138574][T17614] EXT4-fs (loop8): 1 truncate cleaned up [ 230.144697][T17614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.167410][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.855280][T17623] loop6: detected capacity change from 0 to 512 [ 230.861770][T17623] EXT4-fs: Ignoring removed nobh option [ 230.862285][T17618] pim6reg: entered allmulticast mode [ 230.894746][T17618] pim6reg: left allmulticast mode [ 230.919160][T17623] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.5628: corrupted inode contents [ 230.935089][T17623] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.5628: mark_inode_dirty error [ 230.966009][T17623] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.5628: corrupted inode contents [ 230.980023][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5635'. [ 230.989077][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 231.008611][T17623] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.5628: mark_inode_dirty error [ 231.035428][T17623] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.5628: Failed to acquire dquot type 0 [ 231.062809][T17623] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.5628: corrupted inode contents [ 231.091398][T17644] tipc: Enabled bearer , priority 0 [ 231.098358][T17623] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.5628: mark_inode_dirty error [ 231.112778][T17644] tipc: Disabling bearer [ 231.119148][T17623] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.5628: corrupted inode contents [ 231.132341][T17623] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.5628: mark_inode_dirty error [ 231.135498][T17648] loop8: detected capacity change from 0 to 128 [ 231.143837][T17623] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.5628: corrupted inode contents [ 231.162455][T17623] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 231.171342][T17623] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.5628: corrupted inode contents [ 231.183391][T17623] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.5628: mark_inode_dirty error [ 231.195975][T17623] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 231.214696][T17623] EXT4-fs (loop6): 1 truncate cleaned up [ 231.221258][T17623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.253116][T17648] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 231.260963][T17648] FAT-fs (loop8): Filesystem has been set read-only [ 231.285736][T17648] bio_check_eod: 320 callbacks suppressed [ 231.285751][T17648] syz.8.5641: attempt to access beyond end of device [ 231.285751][T17648] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 231.324819][T17648] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 231.332715][T17648] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 231.356592][T17648] syz.8.5641: attempt to access beyond end of device [ 231.356592][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.373518][T17648] syz.8.5641: attempt to access beyond end of device [ 231.373518][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.387078][T17648] syz.8.5641: attempt to access beyond end of device [ 231.387078][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.402075][T17648] syz.8.5641: attempt to access beyond end of device [ 231.402075][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.416121][T17648] syz.8.5641: attempt to access beyond end of device [ 231.416121][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.429646][T17648] syz.8.5641: attempt to access beyond end of device [ 231.429646][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.443128][T17648] syz.8.5641: attempt to access beyond end of device [ 231.443128][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.457336][T17648] syz.8.5641: attempt to access beyond end of device [ 231.457336][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.473387][T17648] syz.8.5641: attempt to access beyond end of device [ 231.473387][T17648] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.498428][T15626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.691656][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 231.691673][ T29] audit: type=1400 audit(231.663:5970): avc: denied { ioctl } for pid=17666 comm="syz.3.5649" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.764117][T17669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5648'. [ 231.874581][T17681] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5652'. [ 231.884656][T17676] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5652'. [ 231.922160][T17685] netlink: 'syz.0.5656': attribute type 4 has an invalid length. [ 231.957466][T17685] netlink: 'syz.0.5656': attribute type 4 has an invalid length. [ 232.074330][T17702] macvlan1: entered promiscuous mode [ 232.078148][T17701] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5673'. [ 232.081073][T17702] ipvlan0: entered promiscuous mode [ 232.095259][T17702] ipvlan0: left promiscuous mode [ 232.101738][T17702] macvlan1: left promiscuous mode [ 232.156219][T17711] loop0: detected capacity change from 0 to 512 [ 232.163534][T17711] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.184223][T17711] EXT4-fs (loop0): 1 truncate cleaned up [ 232.201898][ T29] audit: type=1400 audit(745.179:5971): avc: denied { connect } for pid=17710 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.223524][T17711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.269473][T17717] loop8: detected capacity change from 0 to 512 [ 232.304747][T17717] EXT4-fs: Ignoring removed nobh option [ 232.325971][T17722] netlink: 'syz.4.5670': attribute type 3 has an invalid length. [ 232.372751][T17717] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5669: corrupted inode contents [ 232.419907][T17717] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.5669: mark_inode_dirty error [ 232.472403][T17717] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5669: corrupted inode contents [ 232.523670][T17717] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.5669: mark_inode_dirty error [ 232.570895][T17717] Quota error (device loop8): write_blk: dquota write failed [ 232.598717][T17717] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 232.622610][T17717] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5669: Failed to acquire dquot type 0 [ 232.656045][T17717] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5669: corrupted inode contents [ 232.688411][T17717] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.5669: mark_inode_dirty error [ 232.702760][T17717] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5669: corrupted inode contents [ 232.732805][T17717] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5669: mark_inode_dirty error [ 232.754566][T17717] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5669: corrupted inode contents [ 232.782983][T17717] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 232.802741][T17717] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5669: corrupted inode contents [ 232.832792][T17717] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5669: mark_inode_dirty error [ 232.854258][T17717] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 232.873261][T17717] EXT4-fs (loop8): 1 truncate cleaned up [ 232.893082][T17717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.938658][T17741] netlink: 'syz.4.5675': attribute type 1 has an invalid length. [ 232.950364][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.983625][T17741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.060999][T17743] bond1: (slave veth11): Enslaving as an active interface with a down link [ 233.127345][ T7743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.146638][ T29] audit: type=1326 audit(746.129:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.6.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486d06f6c9 code=0x7ffc0000 [ 233.148872][T17741] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.179177][T17741] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 233.212878][ T29] audit: type=1326 audit(746.129:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.6.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486d06f6c9 code=0x7ffc0000 [ 233.235852][ T29] audit: type=1326 audit(746.159:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.6.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f486d06f6c9 code=0x7ffc0000 [ 233.258666][ T29] audit: type=1326 audit(746.159:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.6.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486d06f6c9 code=0x7ffc0000 [ 233.281676][ T29] audit: type=1326 audit(746.159:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.6.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486d06f6c9 code=0x7ffc0000 [ 233.304573][ T29] audit: type=1326 audit(746.179:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.6.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f486d06f6c9 code=0x7ffc0000 [ 233.428405][T17751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5679'. [ 233.533223][T17766] uprobe: syz.4.5687:17766 failed to unregister, leaking uprobe [ 233.551802][T17766] uprobe: syz.4.5687:17766 failed to unregister, leaking uprobe [ 233.577187][T17775] loop8: detected capacity change from 0 to 512 [ 233.616382][T17775] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 233.624590][T17775] EXT4-fs (loop8): orphan cleanup on readonly fs [ 233.631123][T17775] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.645884][T17775] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 233.685958][T17775] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5685: bg 0: block 40: padding at end of block bitmap is not set [ 233.715490][T17775] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 233.754416][T17775] EXT4-fs (loop8): 1 truncate cleaned up [ 233.776692][T17775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.806407][T17775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.257045][T17799] loop8: detected capacity change from 0 to 128 [ 234.271548][T17799] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.352096][ T7625] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.379195][T17818] loop8: detected capacity change from 0 to 1024 [ 234.386357][T17818] EXT4-fs: Ignoring removed bh option [ 234.392163][T17818] EXT4-fs: inline encryption not supported [ 234.399238][T17818] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 234.410524][T17818] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 234.420761][T17818] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.5704: lblock 2 mapped to illegal pblock 2 (length 1) [ 234.435292][T17818] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.5704: lblock 0 mapped to illegal pblock 48 (length 1) [ 234.435445][ T2969] IPVS: starting estimator thread 0... [ 234.450008][T17818] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5704: Failed to acquire dquot type 0 [ 234.466723][T17818] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 234.497444][T17818] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.5704: mark_inode_dirty error [ 234.522544][T17818] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 234.533232][T17818] EXT4-fs (loop8): 1 orphan inode deleted [ 234.539585][T17818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.554707][ T1459] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.569440][T17824] IPVS: using max 2448 ests per chain, 122400 per kthread [ 234.590537][ T1459] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 234.619311][ T7625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.631957][ T7625] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 234.646940][ T7625] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 234.656830][ T7625] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 234.999656][T17859] xt_hashlimit: max too large, truncated to 1048576 [ 235.138895][T17871] uprobe: syz.6.5729:17871 failed to unregister, leaking uprobe [ 235.146766][T17871] uprobe: syz.6.5729:17871 failed to unregister, leaking uprobe [ 235.235177][T17879] __nla_validate_parse: 2 callbacks suppressed [ 235.235193][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5732'. [ 235.287393][T17883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5734'. [ 235.452064][T17897] sctp: [Deprecated]: syz.6.5742 (pid 17897) Use of int in max_burst socket option. [ 235.452064][T17897] Use struct sctp_assoc_value instead [ 235.662491][T17923] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 235.686578][T17923] SELinux: failed to load policy [ 235.792924][T17913] ================================================================== [ 235.801044][T17913] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 235.810007][T17913] [ 235.812339][T17913] read to 0xffff888137de9320 of 4 bytes by task 17912 on cpu 1: [ 235.819974][T17913] selinux_inode_permission+0x334/0x740 [ 235.825535][T17913] security_inode_permission+0x6d/0xb0 [ 235.831003][T17913] inode_permission+0x106/0x310 [ 235.835870][T17913] link_path_walk+0x162/0x900 [ 235.840560][T17913] path_openat+0x1de/0x2170 [ 235.845075][T17913] do_filp_open+0x109/0x230 [ 235.849590][T17913] io_openat2+0x272/0x390 [ 235.853926][T17913] io_openat+0x1b/0x30 [ 235.858013][T17913] __io_issue_sqe+0xfe/0x2e0 [ 235.862611][T17913] io_issue_sqe+0x56/0xa80 [ 235.867040][T17913] io_submit_sqes+0x675/0x1060 [ 235.871817][T17913] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 235.877374][T17913] __x64_sys_io_uring_enter+0x78/0x90 [ 235.882766][T17913] x64_sys_call+0x2df0/0x3000 [ 235.887453][T17913] do_syscall_64+0xd2/0x200 [ 235.891957][T17913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.897846][T17913] [ 235.900168][T17913] write to 0xffff888137de9320 of 4 bytes by task 17913 on cpu 0: [ 235.907881][T17913] selinux_inode_permission+0x3ac/0x740 [ 235.913527][T17913] security_inode_permission+0x6d/0xb0 [ 235.918998][T17913] inode_permission+0x106/0x310 [ 235.923857][T17913] link_path_walk+0x162/0x900 [ 235.928555][T17913] path_openat+0x1de/0x2170 [ 235.933055][T17913] do_filp_open+0x109/0x230 [ 235.937556][T17913] io_openat2+0x272/0x390 [ 235.941893][T17913] io_openat+0x1b/0x30 [ 235.945965][T17913] __io_issue_sqe+0xfe/0x2e0 [ 235.950565][T17913] io_issue_sqe+0x56/0xa80 [ 235.955003][T17913] io_wq_submit_work+0x3f7/0x5f0 [ 235.959956][T17913] io_worker_handle_work+0x44e/0x9b0 [ 235.965344][T17913] io_wq_worker+0x22e/0x860 [ 235.969860][T17913] ret_from_fork+0x122/0x1b0 [ 235.974452][T17913] ret_from_fork_asm+0x1a/0x30 [ 235.979306][T17913] [ 235.981628][T17913] value changed: 0x00000000 -> 0x00000001 [ 235.987341][T17913] [ 235.989658][T17913] Reported by Kernel Concurrency Sanitizer on: [ 235.995901][T17913] CPU: 0 UID: 0 PID: 17913 Comm: iou-wrk-17912 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.005971][T17913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.016029][T17913] ==================================================================