last executing test programs: 3m27.91584904s ago: executing program 32 (id=1087): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 3m19.244922087s ago: executing program 33 (id=1442): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES8=r3], 0x20}, 0x1, 0x0, 0x0, 0x4008c00}, 0x0) 1m0.796654088s ago: executing program 6 (id=6243): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x80000008005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafbb4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m0.533852442s ago: executing program 6 (id=6253): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x3c0f, &(0x7f00000000c0)={0x0, 0xc890, 0x100}, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m0.292381147s ago: executing program 6 (id=6258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1m0.292196687s ago: executing program 38 (id=6258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 49.207981871s ago: executing program 2 (id=6614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) 49.173005322s ago: executing program 2 (id=6616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {0xfff3, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) 49.052511584s ago: executing program 2 (id=6617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 48.752600939s ago: executing program 2 (id=6625): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 48.73043717s ago: executing program 2 (id=6629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 48.493604215s ago: executing program 2 (id=6636): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r0, r1+60000000}}, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000000100)={0x77359400}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 48.471021725s ago: executing program 39 (id=6636): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r0, r1+60000000}}, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000000100)={0x77359400}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 41.945986571s ago: executing program 8 (id=6824): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 41.828476333s ago: executing program 8 (id=6827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x7, 0x3, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x7fc, 0x2000009, 0x800, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x200000, 0x20000040, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 41.815843134s ago: executing program 8 (id=6829): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x401) sendfile(r1, r1, 0x0, 0x800000009) 41.549089999s ago: executing program 8 (id=6835): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 41.344456122s ago: executing program 8 (id=6841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 41.128488267s ago: executing program 8 (id=6846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 41.073617518s ago: executing program 40 (id=6846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 31.467823883s ago: executing program 3 (id=7075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x7, 0x3, 0x0, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x9, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x7fb, 0x2000009, 0x800, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x200000, 0x20000040, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 31.401454605s ago: executing program 3 (id=7077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x2a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 31.301586996s ago: executing program 3 (id=7079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 31.261153717s ago: executing program 3 (id=7081): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 31.203692798s ago: executing program 3 (id=7083): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004"], 0x48}}, 0x0) 30.970195273s ago: executing program 3 (id=7085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000cdd) close_range(r1, 0xffffffffffffffff, 0x0) 30.970098203s ago: executing program 41 (id=7085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000cdd) close_range(r1, 0xffffffffffffffff, 0x0) 1.779515266s ago: executing program 9 (id=7918): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") stat(0x0, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 1.56853175s ago: executing program 9 (id=7921): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000f80)=ANY=[@ANYBLOB="757466382c6869646500757466383a0176558a0bca7c0a5fba6a2c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c4173657373696f6e3d30783030303030303030303030b6303033372c756e686964652c756e686964652c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c2c6e6f726f636b2c00"], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 627.416068ms ago: executing program 7 (id=7952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "000000009b993e68", "75df9881592b9fd38bcad042e286f2cd", ')\x00\x000', "578619a280c847dd"}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) 566.097039ms ago: executing program 7 (id=7953): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x81, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x19, 0x2}, 0x8, 0x0, 0x40008, 0x0, 0x0, 0x40, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 541.52536ms ago: executing program 1 (id=7956): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) 526.47079ms ago: executing program 5 (id=7957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 526.15635ms ago: executing program 4 (id=7958): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 525.80095ms ago: executing program 7 (id=7959): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffff54}, 0x18) 481.348681ms ago: executing program 5 (id=7960): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 380.141863ms ago: executing program 1 (id=7961): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 379.758653ms ago: executing program 9 (id=7962): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00', 0x3}) 346.427323ms ago: executing program 7 (id=7963): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x8, 0x7, "1083a66e9ec7619976f435146154d92432d8b2225dc095fb945eb8ceb4352c6b23cf3540475be62f8999cf5ba7ec7a139dfee8698d"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000018c0)=""/132, 0x84}, {0x0}], 0x2}, 0x10}], 0x1, 0x10000, 0x0) 346.085563ms ago: executing program 1 (id=7964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) 342.363634ms ago: executing program 4 (id=7965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 303.913995ms ago: executing program 9 (id=7966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 288.586855ms ago: executing program 5 (id=7967): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x4, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 265.335545ms ago: executing program 1 (id=7968): fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 233.923506ms ago: executing program 4 (id=7969): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 230.355836ms ago: executing program 5 (id=7970): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 177.775086ms ago: executing program 1 (id=7971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4009) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 166.981107ms ago: executing program 5 (id=7972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 102.788168ms ago: executing program 4 (id=7973): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x255, 0x1, 0x8}) 100.269538ms ago: executing program 1 (id=7974): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0, 0x0, 0x2}, 0x18) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 92.480158ms ago: executing program 4 (id=7975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000200), 0x0, 0x709c, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) recvmsg$qrtr(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000400)=""/206, 0xce}], 0x5, 0x0, 0x0, 0x102}, 0x38, 0x23) 64.585379ms ago: executing program 5 (id=7976): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r1, 0x0, 0x76, 0xb6f4, 0x9, 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2, 0x80805, 0x0) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 0s ago: executing program 7 (id=7977): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 240.310331][T17997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.317818][T19649] loop5: p1 p2[DM] p4 [ 240.322043][T19649] loop5: p1 size 196608 extends beyond EOD, truncated [ 240.322290][T17997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.332350][T19649] loop5: p2 start 4292936063 is beyond EOD, truncated [ 240.336561][T17997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.343479][T19649] loop5: p4 size 50331648 extends beyond EOD, truncated [ 240.361376][T17997] veth1_macvtap: left promiscuous mode [ 240.367003][T17997] veth0_macvtap: left promiscuous mode [ 240.374139][T17997] veth1_vlan: left promiscuous mode [ 240.379583][T17997] veth0_vlan: left promiscuous mode [ 240.437983][ T5474] hid_parser_main: 18 callbacks suppressed [ 240.438004][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.451304][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.458736][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.466971][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.474685][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.482396][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.489975][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.497650][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.505216][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.512802][ T5474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 240.526541][ T5474] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 240.590416][T17997] team0 (unregistering): Port device team_slave_1 removed [ 240.600911][T17997] team0 (unregistering): Port device team_slave_0 removed [ 240.650763][T19654] macvtap0: refused to change device tx_queue_len [ 240.817430][T19616] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.824589][T19616] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.835756][T19676] ALSA: seq fatal error: cannot create timer (-19) [ 240.842337][T19616] bridge_slave_0: entered allmulticast mode [ 240.849322][T19616] bridge_slave_0: entered promiscuous mode [ 240.856961][T19616] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.864114][T19616] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.871381][T19616] bridge_slave_1: entered allmulticast mode [ 240.878310][T19616] bridge_slave_1: entered promiscuous mode [ 241.011947][T19616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.058024][T19616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.102382][T19616] team0: Port device team_slave_0 added [ 241.110796][T19616] team0: Port device team_slave_1 added [ 241.145915][T19616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.153023][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.179043][T19616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.218038][T19616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.225045][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.251063][T19616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.384299][T19616] hsr_slave_0: entered promiscuous mode [ 241.401971][T19616] hsr_slave_1: entered promiscuous mode [ 241.432832][T19616] debugfs: 'hsr0' already exists in 'hsr' [ 241.438666][T19616] Cannot create hsr debugfs directory [ 241.606820][T19616] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.616834][T19616] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.670898][T19616] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.680746][T19616] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.740066][T19616] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.749951][T19616] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.808805][T19616] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.818697][T19616] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.931026][T19741] loop9: detected capacity change from 0 to 512 [ 241.940824][T19743] loop3: detected capacity change from 0 to 164 [ 241.948701][T19741] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 241.948824][T19743] isofs_fill_super: root inode is not a directory. Corrupted media? [ 241.956985][T19741] EXT4-fs (loop9): orphan cleanup on readonly fs [ 241.972928][T19741] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6897: corrupted inode contents [ 242.001720][T19741] EXT4-fs (loop9): Remounting filesystem read-only [ 242.016248][T19741] EXT4-fs (loop9): 1 truncate cleaned up [ 242.023520][ T7467] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 242.034264][ T7467] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 242.055405][T19616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.074182][T19616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.082526][ T7467] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 242.105771][T19616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.119564][T19741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.145658][T19616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.211923][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.290535][T19616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.306895][T19616] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.320918][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.328052][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.358703][T17997] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.365823][T17997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.435437][T19616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.565511][T19616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.747538][T19831] SELinux: failed to load policy [ 242.748114][T19616] veth0_vlan: entered promiscuous mode [ 242.789745][T19616] veth1_vlan: entered promiscuous mode [ 242.890535][T19616] veth0_macvtap: entered promiscuous mode [ 242.892260][T19845] netlink: 'syz.4.6935': attribute type 2 has an invalid length. [ 242.904299][T19845] netlink: 'syz.4.6935': attribute type 1 has an invalid length. [ 242.912142][T19845] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6935'. [ 242.929241][T19616] veth1_macvtap: entered promiscuous mode [ 242.934871][T19616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.948311][T19847] veth0: entered promiscuous mode [ 242.954899][T19616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.963701][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6937'. [ 243.021217][ T7471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.034518][ T7471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.034636][ T7471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.034665][ T7471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.077268][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 243.077286][ T29] audit: type=1400 audit(2000000085.000:11863): avc: denied { mounton } for pid=19616 comm="syz-executor" path="/root/syzkaller.hPT7O8/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 243.077321][ T29] audit: type=1400 audit(2000000085.000:11864): avc: denied { mount } for pid=19616 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 243.077348][ T29] audit: type=1400 audit(2000000085.010:11865): avc: denied { mounton } for pid=19616 comm="syz-executor" path="/root/syzkaller.hPT7O8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 243.077463][ T29] audit: type=1400 audit(2000000085.010:11866): avc: denied { mounton } for pid=19616 comm="syz-executor" path="/root/syzkaller.hPT7O8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 243.086416][ T29] audit: type=1400 audit(2000000085.010:11867): avc: denied { mounton } for pid=19616 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 243.086723][ T29] audit: type=1400 audit(2000000085.010:11868): avc: denied { mount } for pid=19616 comm="syz-executor" name="/" dev="gadgetfs" ino=4883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 243.209668][T19850] loop1: detected capacity change from 0 to 1764 [ 243.212072][ T29] audit: type=1400 audit(2000000085.140:11869): avc: denied { mount } for pid=19849 comm="syz.1.6848" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 243.248474][ T29] audit: type=1400 audit(2000000085.150:11870): avc: denied { unmount } for pid=19616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 243.390257][ T29] audit: type=1400 audit(2000000085.320:11871): avc: denied { bind } for pid=19854 comm="syz.1.6939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.461161][ T29] audit: type=1400 audit(2000000085.390:11872): avc: denied { setopt } for pid=19819 comm="syz.3.6929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.591147][T19867] loop5: detected capacity change from 0 to 128 [ 243.779483][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6952'. [ 243.788806][ C0] vcan0: j1939_session_tx_dat: 0xffff88811a2a3800: queue data error: -100 [ 243.797754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.805612][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.813501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.821442][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.827517][T19883] loop1: detected capacity change from 0 to 512 [ 243.829752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.843830][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.849026][T19883] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 243.852207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.863895][T19883] EXT4-fs (loop1): orphan cleanup on readonly fs [ 243.867969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.868006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.876810][T19883] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6953: corrupted inode contents [ 243.882150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.882195][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.882214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.892145][T19883] EXT4-fs (loop1): Remounting filesystem read-only [ 243.901898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.901918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.901943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.911920][T19883] EXT4-fs (loop1): 1 truncate cleaned up [ 243.917607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.917646][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.976816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 243.984666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 243.992485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.000316][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.008144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.015978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.023802][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.031661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.039502][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.047341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.055186][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.063027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.070954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.078850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.086674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.094510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.102464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.110330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.118185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.126106][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.134019][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.141855][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.149730][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.157566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.165393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.173225][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.181055][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.189237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.197057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.204948][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.212765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.220702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.228531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.236470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.244328][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.252253][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.260085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.267930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.275741][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.283606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.291432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.299269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.307099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.314950][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.322765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.330596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.338446][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.346278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.354295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.362148][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.369970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.377822][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.385630][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.393483][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.401332][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.409174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.417027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.424872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.432806][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.440642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.448491][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.456319][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.464157][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.471983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.479799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.487648][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.495464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.503305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.511202][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.519057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.526868][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.534724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.542547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.550440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.558281][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.566119][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.573991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.581828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.589658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.597693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.605773][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.613664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.621527][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.629451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.637303][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.645145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.652986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.660824][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.668674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.676505][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.684339][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.692174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.699992][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.707835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.715653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.723483][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.731313][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.739142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.746964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.754815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.762631][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.770474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.778297][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.786126][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.793944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.801794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.809700][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.817549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.825388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.833222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.841036][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.849583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.857883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.865747][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.873580][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.881433][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.889559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.897406][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.905219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.913092][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.920923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.928771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.936606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.944458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.952280][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.960137][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.967985][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.975821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.983668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 244.991517][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 244.999345][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.007227][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.015076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.022946][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.030775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.038614][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.046441][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.054279][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.062170][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.070021][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.077863][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.085678][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.093503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.101349][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.109197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.117016][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.124858][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.132705][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.140530][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.148376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.156225][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.164170][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.171996][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.179829][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.187666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.195509][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.203342][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.211181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.219031][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.226846][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.234702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.242542][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.250368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.258222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.266048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.273910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.281728][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.289590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.297411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.305226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.313172][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.321105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.328987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.336821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.344652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.352603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.360417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.368245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.376066][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.383907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.391753][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.399604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.407445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.415279][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.423100][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.430945][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.438758][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.446642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.454467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.462341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.470197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.478077][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.485906][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.493745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.501556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.509386][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.517264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.525080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.532905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.540731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.548545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.556360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.564191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.572050][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.579886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.587812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.595635][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.603526][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.611351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.619181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.626986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.634839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.642692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.650540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.658359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.666196][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.674021][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.681883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.689724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.697576][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.705467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.713419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.721259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.729113][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.737012][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.744857][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.752669][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.760494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.768316][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.776158][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.783977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.791905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.799765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.807602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.815424][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.823280][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.831145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.838964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 245.846762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 245.856287][ T7471] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 245.866935][ T7471] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 245.878354][ T7471] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 245.889103][T19883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.946746][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.175467][T19919] program syz.4.6968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.246400][T19930] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6973'. [ 246.246429][T19930] netlink: 'syz.9.6973': attribute type 1 has an invalid length. [ 246.246446][T19930] netlink: 'syz.9.6973': attribute type 2 has an invalid length. [ 246.309979][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6975'. [ 246.340179][T19935] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6975'. [ 246.415219][T19895] netlink: 'syz.3.6967': attribute type 13 has an invalid length. [ 246.415239][T19895] netlink: 'syz.3.6967': attribute type 17 has an invalid length. [ 246.441376][T19895] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.694137][ T5471] hid_parser_main: 19 callbacks suppressed [ 246.694235][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694261][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694286][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694348][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694376][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694399][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694419][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694444][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694467][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.694537][ T5471] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.695297][ T5471] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz1 [ 246.741918][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6990'. [ 247.087053][T19984] loop1: detected capacity change from 0 to 512 [ 247.150112][T19984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.203881][T19984] EXT4-fs (loop1): 1 truncate cleaned up [ 247.214271][T19984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.250373][T19993] loop3: detected capacity change from 0 to 164 [ 247.278785][T19993] bio_check_eod: 11508 callbacks suppressed [ 247.278805][T19993] syz.3.7001: attempt to access beyond end of device [ 247.278805][T19993] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 247.298802][T19993] syz.3.7001: attempt to access beyond end of device [ 247.298802][T19993] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 247.327520][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.361703][T20005] loop3: detected capacity change from 0 to 512 [ 247.369863][T20005] EXT4-fs: Ignoring removed nobh option [ 247.403954][T20005] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7006: iget: bad i_size value: 38620345925642 [ 247.424985][T20005] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7006: couldn't read orphan inode 15 (err -117) [ 247.468197][T20005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.579018][T19110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.617161][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7015'. [ 247.683627][T20032] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 248.106870][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 248.106888][ T29] audit: type=1326 audit(2000000090.030:11974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.136931][ T29] audit: type=1326 audit(2000000090.030:11975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.160725][ T29] audit: type=1326 audit(2000000090.030:11976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.184481][ T29] audit: type=1326 audit(2000000090.030:11977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f628b211785 code=0x7ffc0000 [ 248.208313][ T29] audit: type=1326 audit(2000000090.030:11978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.231918][ T29] audit: type=1326 audit(2000000090.030:11979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.282599][ T29] audit: type=1326 audit(2000000090.040:11980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.306656][ T29] audit: type=1326 audit(2000000090.040:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.330338][ T29] audit: type=1326 audit(2000000090.040:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.354059][ T29] audit: type=1326 audit(2000000090.040:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f628b1deec9 code=0x7ffc0000 [ 248.428640][T20077] netlink: 'syz.3.7037': attribute type 10 has an invalid length. [ 248.449304][T20077] team0: Device hsr_slave_0 failed to register rx_handler [ 249.129261][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7061'. [ 249.168963][T20171] loop4: detected capacity change from 0 to 512 [ 249.187068][T20171] journal_path: Lookup failure for './file0/../file0' [ 249.193989][T20171] EXT4-fs: error: could not find journal device path [ 249.386740][T20205] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 249.479100][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7077'. [ 249.488251][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7077'. [ 249.622929][T20234] netlink: 'syz.1.7082': attribute type 2 has an invalid length. [ 249.837574][ T7442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.913247][ T7442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.963403][ T7442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.002302][ T7442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.090243][ T7442] bridge_slave_1: left allmulticast mode [ 250.095953][ T7442] bridge_slave_1: left promiscuous mode [ 250.101788][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.111654][ T7442] bridge_slave_0: left allmulticast mode [ 250.117514][ T7442] bridge_slave_0: left promiscuous mode [ 250.123375][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.203175][ T7442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.213543][ T7442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.223726][ T7442] bond0 (unregistering): Released all slaves [ 250.304460][ T7442] hsr_slave_0: left promiscuous mode [ 250.318596][ T7442] hsr_slave_1: left promiscuous mode [ 250.324507][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.332004][ T7442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.339833][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.347519][ T7442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.360569][ T7442] veth1_macvtap: left promiscuous mode [ 250.366220][ T7442] veth0_macvtap: left promiscuous mode [ 250.378698][ T7442] veth1_vlan: left promiscuous mode [ 250.384091][ T7442] veth0_vlan: left promiscuous mode [ 250.489993][T20334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7096'. [ 250.528180][ T7442] team0 (unregistering): Port device team_slave_1 removed [ 250.542347][T20338] loop4: detected capacity change from 0 to 512 [ 250.550580][ T7442] team0 (unregistering): Port device team_slave_0 removed [ 250.550908][T20338] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 250.569524][T20338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 250.578558][T20338] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7098: corrupted in-inode xattr: e_value size too large [ 250.594837][T20338] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7098: couldn't read orphan inode 15 (err -117) [ 250.607313][T20338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.648987][T20342] netlink: 'syz.5.7099': attribute type 10 has an invalid length. [ 250.692868][T20342] team0: Device hsr_slave_0 failed to register rx_handler [ 250.714251][T20272] chnl_net:caif_netlink_parms(): no params data found [ 250.759985][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.771772][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7103'. [ 250.823237][T20272] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.830384][T20272] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.838724][T20272] bridge_slave_0: entered allmulticast mode [ 250.845632][T20272] bridge_slave_0: entered promiscuous mode [ 250.854313][T20272] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.861666][T20272] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.869109][T20272] bridge_slave_1: entered allmulticast mode [ 250.875524][T20272] bridge_slave_1: entered promiscuous mode [ 250.900562][T20272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.904413][T20359] loop5: detected capacity change from 0 to 164 [ 250.918101][T20272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.932747][T20362] vlan2: entered allmulticast mode [ 250.940903][T20359] syz.5.7105: attempt to access beyond end of device [ 250.940903][T20359] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 250.959959][T20359] syz.5.7105: attempt to access beyond end of device [ 250.959959][T20359] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 251.012780][T20272] team0: Port device team_slave_0 added [ 251.020862][T20272] team0: Port device team_slave_1 added [ 251.044524][T20374] netlink: 'syz.1.7111': attribute type 10 has an invalid length. [ 251.081047][T20374] team0: Device hsr_slave_0 failed to register rx_handler [ 251.112856][T20272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.119921][T20272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.145869][T20272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.171140][T20272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.178353][T20272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.204350][T20272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.260491][T20272] hsr_slave_0: entered promiscuous mode [ 251.266697][T20272] hsr_slave_1: entered promiscuous mode [ 251.273676][T20272] debugfs: 'hsr0' already exists in 'hsr' [ 251.279530][T20272] Cannot create hsr debugfs directory [ 251.431043][T20406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20406 comm=syz.5.7134 [ 251.444562][T20406] netlink: 'syz.5.7134': attribute type 1 has an invalid length. [ 251.468133][T20406] bond1: (slave bridge0): making interface the new active one [ 251.476070][T20406] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 251.545346][T20412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.557749][T20420] loop5: detected capacity change from 0 to 1024 [ 251.590542][T20414] SELinux: failed to load policy [ 251.602353][T20424] program syz.9.7131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.604954][T20420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.658248][T20272] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.670656][T20420] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.685806][T20272] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.701888][T20272] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.722383][T20272] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.839506][T20272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.862378][ T7442] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 393: padding at end of block bitmap is not set [ 251.880706][T20272] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.893255][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.900429][ T7473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.917734][ T7442] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 251.930635][ T7442] EXT4-fs (loop5): This should not happen!! Data will be lost [ 251.930635][ T7442] [ 251.942682][T20272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.953149][T20272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.971144][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.978270][ T7473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.980258][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.076951][T20474] netlink: 'syz.4.7149': attribute type 10 has an invalid length. [ 252.096897][T20474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.125192][T20474] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 252.145079][T20476] netlink: 'syz.4.7149': attribute type 10 has an invalid length. [ 252.149730][T20272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.152998][T20476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7149'. [ 252.213325][T20476] batadv0: entered promiscuous mode [ 252.218677][T20476] batadv0: entered allmulticast mode [ 252.225444][T20476] bond0: (slave batadv0): Releasing backup interface [ 252.242682][T20476] bridge0: port 4(batadv0) entered blocking state [ 252.249226][T20476] bridge0: port 4(batadv0) entered disabled state [ 252.318653][T20493] netlink: 'syz.4.7152': attribute type 10 has an invalid length. [ 252.348593][ T7461] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 252.357947][ T7461] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 252.363207][T20493] team0: Device hsr_slave_0 failed to register rx_handler [ 252.458284][T20272] veth0_vlan: entered promiscuous mode [ 252.491107][T20272] veth1_vlan: entered promiscuous mode [ 252.528273][T20272] veth0_macvtap: entered promiscuous mode [ 252.554643][T20272] veth1_macvtap: entered promiscuous mode [ 252.584374][T20272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.606446][T20272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.659775][T17997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.683386][T17997] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.724885][T17997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.752717][T17997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.871070][T20540] netlink: 'syz.7.7172': attribute type 10 has an invalid length. [ 252.890408][T20540] team0: Device hsr_slave_0 failed to register rx_handler [ 253.045747][T20557] veth0: entered promiscuous mode [ 253.063927][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7180'. [ 253.104677][T20561] loop1: detected capacity change from 0 to 512 [ 253.111930][T20561] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.123028][T20561] EXT4-fs (loop1): 1 truncate cleaned up [ 253.145838][T20561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.183476][T20567] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7183'. [ 253.249714][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 253.249733][ T29] audit: type=1326 audit(2000000095.180:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.300670][ T29] audit: type=1326 audit(2000000095.180:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.305894][T20574] loop5: detected capacity change from 0 to 512 [ 253.324491][ T29] audit: type=1326 audit(2000000095.180:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.324527][ T29] audit: type=1326 audit(2000000095.180:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.337771][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.354423][ T29] audit: type=1326 audit(2000000095.180:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.410723][ T29] audit: type=1326 audit(2000000095.180:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.434446][ T29] audit: type=1326 audit(2000000095.180:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.458140][ T29] audit: type=1326 audit(2000000095.180:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.481769][ T29] audit: type=1326 audit(2000000095.180:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20571 comm="syz.5.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 253.508860][T20574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.539371][ T29] audit: type=1400 audit(2000000095.460:12070): avc: denied { accept } for pid=20536 comm="syz.9.7171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.571809][T20574] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.620455][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.683575][T20589] netlink: 'syz.1.7195': attribute type 1 has an invalid length. [ 253.814484][T20601] vlan2: entered allmulticast mode [ 253.924267][T20609] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7205'. [ 254.006486][T20615] netlink: 'syz.1.7208': attribute type 10 has an invalid length. [ 254.018370][T20615] team0: Device hsr_slave_0 failed to register rx_handler [ 254.063376][T20617] netlink: 'syz.7.7209': attribute type 10 has an invalid length. [ 254.088411][T20617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.107114][T20617] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 254.115559][T20619] netlink: 'syz.7.7209': attribute type 10 has an invalid length. [ 254.123966][T20619] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7209'. [ 254.157263][T20619] batadv0: entered promiscuous mode [ 254.162522][T20619] batadv0: entered allmulticast mode [ 254.178803][T20619] bond0: (slave batadv0): Releasing backup interface [ 254.189228][T20619] bridge0: port 3(batadv0) entered blocking state [ 254.195813][T20619] bridge0: port 3(batadv0) entered disabled state [ 254.232737][T20622] loop9: detected capacity change from 0 to 512 [ 254.258595][T20622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.286588][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7212'. [ 254.297385][ T7478] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 254.306613][ T7478] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 254.320000][T20622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.359568][T20622] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.418338][T20622] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 254.461662][T20639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20639 comm=syz.4.7217 [ 254.478716][T20622] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 254.491252][T20622] EXT4-fs (loop9): This should not happen!! Data will be lost [ 254.491252][T20622] [ 254.500935][T20622] EXT4-fs (loop9): Total free blocks count 0 [ 254.506935][T20622] EXT4-fs (loop9): Free/Dirty block details [ 254.512909][T20622] EXT4-fs (loop9): free_blocks=39626 [ 254.518296][T20622] EXT4-fs (loop9): dirty_blocks=15 [ 254.521171][T20639] netlink: 'syz.4.7217': attribute type 1 has an invalid length. [ 254.523409][T20622] EXT4-fs (loop9): Block reservation details [ 254.537344][T20622] EXT4-fs (loop9): i_reserved_data_blocks=15 [ 254.554319][T20639] bond1: (slave bridge1): making interface the new active one [ 254.562222][T20639] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 254.610606][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.632926][T20648] loop7: detected capacity change from 0 to 1024 [ 254.672516][T20648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.701807][T20656] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7222'. [ 254.713678][T20648] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.788990][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7226'. [ 254.888996][ T7478] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:56: bg 0: block 393: padding at end of block bitmap is not set [ 254.918242][ T7478] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 254.930979][ T7478] EXT4-fs (loop7): This should not happen!! Data will be lost [ 254.930979][ T7478] [ 255.002078][T20272] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.099099][T20688] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 255.169575][T20698] loop5: detected capacity change from 0 to 512 [ 255.183601][T20700] loop1: detected capacity change from 0 to 1024 [ 255.188588][T20698] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 255.211827][T20698] EXT4-fs (loop5): 1 truncate cleaned up [ 255.231430][T20698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.264380][T20700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.285464][T20700] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.324122][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.405294][T20712] loop5: detected capacity change from 0 to 4096 [ 255.422874][T20712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.480596][ T7478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:56: bg 0: block 393: padding at end of block bitmap is not set [ 255.512385][ T7478] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 255.525098][ T7478] EXT4-fs (loop1): This should not happen!! Data will be lost [ 255.525098][ T7478] [ 255.544689][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.560630][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.762878][T20739] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 255.802532][T20743] loop1: detected capacity change from 0 to 512 [ 255.814701][T20743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 255.827077][T20743] EXT4-fs (loop1): 1 truncate cleaned up [ 255.833463][T20743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.872427][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.882738][T20749] loop9: detected capacity change from 0 to 1024 [ 255.906468][T20749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.919143][T20749] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.041773][T17997] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:68: bg 0: block 393: padding at end of block bitmap is not set [ 256.063593][T17997] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 256.076329][T17997] EXT4-fs (loop9): This should not happen!! Data will be lost [ 256.076329][T17997] [ 256.089453][T20756] macvtap0: refused to change device tx_queue_len [ 256.109357][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.174783][T20762] loop9: detected capacity change from 0 to 8192 [ 256.216922][T20769] ALSA: seq fatal error: cannot create timer (-19) [ 256.256949][T20762] loop9: p1 p2[DM] p4 [ 256.266947][T20762] loop9: p1 size 196608 extends beyond EOD, truncated [ 256.282343][T20762] loop9: p2 start 4292936063 is beyond EOD, truncated [ 256.289206][T20762] loop9: p4 size 50331648 extends beyond EOD, truncated [ 256.315458][T20784] loop1: detected capacity change from 0 to 1024 [ 256.362097][T20784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.397563][T20784] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.704796][ T7471] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 393: padding at end of block bitmap is not set [ 256.748882][ T7471] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 256.761625][ T7471] EXT4-fs (loop1): This should not happen!! Data will be lost [ 256.761625][ T7471] [ 256.819038][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.856227][T20817] loop4: detected capacity change from 0 to 512 [ 256.880661][T20817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.919574][T20817] EXT4-fs (loop4): 1 truncate cleaned up [ 256.927696][T20817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.028122][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.045906][T20837] loop1: detected capacity change from 0 to 1024 [ 257.072284][T20846] loop9: detected capacity change from 0 to 164 [ 257.078438][T20837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.091090][T20837] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.102823][T20846] isofs_fill_super: root inode is not a directory. Corrupted media? [ 257.166769][T20852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.289609][T20861] batadv_slave_1: entered promiscuous mode [ 257.303044][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7313'. [ 257.327306][T20861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.369875][T20861] batadv_slave_1 (unregistering): left promiscuous mode [ 257.377015][T20861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.400885][ T7478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:56: bg 0: block 393: padding at end of block bitmap is not set [ 257.433316][ T7478] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 257.446500][ T7478] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.446500][ T7478] [ 257.481664][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.556320][T20881] netlink: 1684 bytes leftover after parsing attributes in process `syz.4.7332'. [ 257.663608][T20891] netlink: 'syz.5.7321': attribute type 2 has an invalid length. [ 257.671479][T20891] netlink: 'syz.5.7321': attribute type 1 has an invalid length. [ 257.679260][T20891] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7321'. [ 257.695096][T20890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.744030][T20897] loop9: detected capacity change from 0 to 512 [ 257.772395][T20897] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 257.798198][T20897] EXT4-fs (loop9): 1 truncate cleaned up [ 257.804401][T20897] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.861728][T20904] loop1: detected capacity change from 0 to 1024 [ 257.891978][T20904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.922368][T20904] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.935750][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.171911][T17997] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:68: bg 0: block 393: padding at end of block bitmap is not set [ 258.198199][T17997] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 258.210893][T17997] EXT4-fs (loop1): This should not happen!! Data will be lost [ 258.210893][T17997] [ 258.246235][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.278524][T20937] loop1: detected capacity change from 0 to 164 [ 258.286654][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 258.286673][ T29] audit: type=1326 audit(2000000100.210:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.335195][T20937] syz.1.7341: attempt to access beyond end of device [ 258.335195][T20937] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 258.335480][ T29] audit: type=1326 audit(2000000100.210:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.371658][ T29] audit: type=1326 audit(2000000100.210:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.394593][ T29] audit: type=1326 audit(2000000100.210:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20938 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4401811785 code=0x7ffc0000 [ 258.417919][ T29] audit: type=1326 audit(2000000100.210:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.441005][ T29] audit: type=1326 audit(2000000100.210:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.464108][ T29] audit: type=1326 audit(2000000100.210:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.487102][ T29] audit: type=1326 audit(2000000100.210:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.510117][ T29] audit: type=1326 audit(2000000100.210:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 258.533587][ T29] audit: type=1400 audit(2000000100.250:12311): avc: denied { mount } for pid=20934 comm="syz.1.7341" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 258.583009][T20949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20949 comm=syz.7.7350 [ 258.597680][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7350'. [ 259.042851][T21021] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7382'. [ 259.065563][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7383'. [ 259.182267][T21040] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7390'. [ 259.205884][T21040] netlink: 'syz.7.7390': attribute type 1 has an invalid length. [ 259.213876][T21040] netlink: 'syz.7.7390': attribute type 2 has an invalid length. [ 259.414776][T21068] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7403'. [ 259.781028][T21095] bridge0: port 3(batadv0) entered disabled state [ 259.802957][T21095] bridge_slave_0: left promiscuous mode [ 259.808874][T21095] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.821466][T21095] bridge_slave_1: left allmulticast mode [ 259.827343][T21095] bridge_slave_1: left promiscuous mode [ 259.833097][T21095] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.863982][T21095] bond0: (slave bond_slave_0): Releasing backup interface [ 259.874882][T21095] bond0: (slave bond_slave_1): Releasing backup interface [ 259.908639][T21095] team0: Port device team_slave_0 removed [ 259.919637][T21095] team0: Port device team_slave_1 removed [ 259.920644][T21095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.933739][T21095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.942746][T21095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.942826][T21095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.101257][T21120] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 260.101730][T21120] SELinux: failed to load policy [ 260.289469][T21134] loop4: detected capacity change from 0 to 164 [ 260.291337][T21134] syz.4.7428: attempt to access beyond end of device [ 260.291337][T21134] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.291378][T21134] syz.4.7428: attempt to access beyond end of device [ 260.291378][T21134] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 260.621629][T21153] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 260.709196][T21159] loop5: detected capacity change from 0 to 512 [ 260.709523][T21159] EXT4-fs: Ignoring removed bh option [ 260.754646][T21161] syzkaller0: entered allmulticast mode [ 260.757400][T21161] syzkaller0: entered promiscuous mode [ 260.766700][T21159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.789122][T21159] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.802798][T21161] syzkaller0 (unregistering): left allmulticast mode [ 260.802904][T21161] syzkaller0 (unregistering): left promiscuous mode [ 260.863229][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.881124][T21170] SELinux: failed to load policy [ 260.925398][T21178] loop1: detected capacity change from 0 to 512 [ 260.954357][T21182] netlink: 'syz.7.7450': attribute type 10 has an invalid length. [ 260.963817][T21182] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7450'. [ 260.987921][T21182] team0: entered promiscuous mode [ 260.993951][T21182] team0: entered allmulticast mode [ 261.022208][T21182] bridge0: port 1(team0) entered blocking state [ 261.033129][T21182] bridge0: port 1(team0) entered disabled state [ 261.057397][T21186] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 261.072322][T21186] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.080861][T21186] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.134702][T21186] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 261.143618][T21186] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.152275][T21186] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.195624][T21200] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 261.221845][T21186] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 261.237515][T21186] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.536553][T21236] macvlan2: entered promiscuous mode [ 261.541981][T21236] bond0: entered promiscuous mode [ 261.547465][T21236] macvlan2: entered allmulticast mode [ 261.552976][T21236] bond0: entered allmulticast mode [ 261.564497][T21236] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.574225][T21236] bond0: left allmulticast mode [ 261.579299][T21236] bond0: left promiscuous mode [ 261.732704][T21259] smc: net device bond0 applied user defined pnetid SYZ0 [ 261.740133][T21259] smc: net device bond0 erased user defined pnetid SYZ0 [ 262.192261][T21311] netlink: 'syz.7.7508': attribute type 3 has an invalid length. [ 262.250740][ T5473] hid_parser_main: 18 callbacks suppressed [ 262.250761][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.250792][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.250864][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.250893][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.250920][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.250948][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.250973][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.251060][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.251087][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.251115][ T5473] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.252675][ T5473] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 262.399409][T21332] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 262.499036][T21341] loop4: detected capacity change from 0 to 2048 [ 262.524358][T21341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.591001][T17972] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 262.591268][T17972] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 262.600719][T21354] loop1: detected capacity change from 0 to 512 [ 262.624594][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.634558][T21354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.636535][T21354] EXT4-fs (loop1): 1 truncate cleaned up [ 262.659599][T21354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.722175][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.766715][ T5463] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 262.767337][T21364] loop1: detected capacity change from 0 to 164 [ 262.801487][T21364] syz.1.7541: attempt to access beyond end of device [ 262.801487][T21364] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 262.815873][T21364] syz.1.7541: attempt to access beyond end of device [ 262.815873][T21364] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 262.999466][T21386] loop9: detected capacity change from 0 to 512 [ 263.000050][T21386] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 263.009572][T21386] EXT4-fs (loop9): 1 truncate cleaned up [ 263.022988][T21386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.084418][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.140242][T21402] loop5: detected capacity change from 0 to 512 [ 263.150510][T21402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 263.172571][T21402] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.7545: Unimplemented hash flags: 0x0001 [ 263.184350][T21402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7545: Corrupt directory, running e2fsck is recommended [ 263.199663][T21410] loop9: detected capacity change from 0 to 164 [ 263.208220][T21402] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.7545: Unimplemented hash flags: 0x0001 [ 263.219894][T21402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7545: Corrupt directory, running e2fsck is recommended [ 263.222144][T21410] syz.9.7547: attempt to access beyond end of device [ 263.222144][T21410] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 263.233717][T21402] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.7545: Unimplemented hash flags: 0x0001 [ 263.247234][T21410] syz.9.7547: attempt to access beyond end of device [ 263.247234][T21410] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 263.258518][T21402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7545: Corrupt directory, running e2fsck is recommended [ 263.285074][T21402] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.7545: Unimplemented hash flags: 0x0001 [ 263.296681][T21402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7545: Corrupt directory, running e2fsck is recommended [ 263.310089][T21402] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.7545: Unimplemented hash flags: 0x0001 [ 263.321717][T21402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7545: Corrupt directory, running e2fsck is recommended [ 263.347791][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.440822][T21428] SELinux: failed to load policy [ 263.642842][T21466] loop9: detected capacity change from 0 to 512 [ 263.659982][T21466] EXT4-fs: Ignoring removed bh option [ 263.680980][T21466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.695811][T21466] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.745779][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.788325][T21482] loop9: detected capacity change from 0 to 128 [ 263.826340][T21482] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 263.834408][T21482] FAT-fs (loop9): Filesystem has been set read-only [ 263.858404][T21482] syz.9.7558: attempt to access beyond end of device [ 263.858404][T21482] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 263.944910][T21482] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 263.952977][T21482] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 263.989194][T21482] syz.9.7558: attempt to access beyond end of device [ 263.989194][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.002759][T21482] syz.9.7558: attempt to access beyond end of device [ 264.002759][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.018277][T21482] syz.9.7558: attempt to access beyond end of device [ 264.018277][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.033910][T21482] syz.9.7558: attempt to access beyond end of device [ 264.033910][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.052578][T21517] macvtap0: refused to change device tx_queue_len [ 264.060658][T21482] syz.9.7558: attempt to access beyond end of device [ 264.060658][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.076038][T21482] syz.9.7558: attempt to access beyond end of device [ 264.076038][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.092616][T21482] syz.9.7558: attempt to access beyond end of device [ 264.092616][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.106401][T21482] syz.9.7558: attempt to access beyond end of device [ 264.106401][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.121264][T21482] syz.9.7558: attempt to access beyond end of device [ 264.121264][T21482] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.213973][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 264.213993][ T29] audit: type=1400 audit(2000000106.120:12548): avc: denied { create } for pid=21520 comm="syz.7.7566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.240455][ T29] audit: type=1400 audit(2000000106.120:12549): avc: denied { write } for pid=21520 comm="syz.7.7566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.321559][T21523] SELinux: failed to load policy [ 264.388337][T21529] loop4: detected capacity change from 0 to 512 [ 264.395004][T21529] EXT4-fs: Ignoring removed bh option [ 264.450205][T21529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.484767][T21539] __nla_validate_parse: 6 callbacks suppressed [ 264.484784][T21539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7572'. [ 264.507637][T21534] bond0: (slave bond_slave_0): Releasing backup interface [ 264.518802][T21529] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.542302][T21534] bond0: (slave bond_slave_1): Releasing backup interface [ 264.579460][T21534] team0: Port device team_slave_0 removed [ 264.631320][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.645959][T21534] team0: Port device team_slave_1 removed [ 264.663145][T21534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.670600][T21534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.701037][T21534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.708509][T21534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.730642][T21544] loop7: detected capacity change from 0 to 512 [ 264.748531][T21534] bond1: (slave bridge0): Releasing active interface [ 264.767402][T21544] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 264.776759][T21544] EXT4-fs (loop7): orphan cleanup on readonly fs [ 264.802516][T21544] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7585: corrupted inode contents [ 264.827360][T21544] EXT4-fs (loop7): Remounting filesystem read-only [ 264.844228][T21544] EXT4-fs (loop7): 1 truncate cleaned up [ 264.850315][ T7433] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 264.861005][ T7433] Quota error (device loop7): write_blk: dquota write failed [ 264.868458][ T7433] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 264.878545][ T7433] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 264.889223][ T7433] Quota error (device loop7): write_blk: dquota write failed [ 264.896625][ T7433] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 264.907690][ T7433] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 264.917867][ T7433] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 264.932665][T21554] loop5: detected capacity change from 0 to 512 [ 264.939695][T21554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 264.957396][ T7433] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 264.970188][T21554] EXT4-fs (loop5): 1 truncate cleaned up [ 264.976550][T21554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.989308][T21544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.004560][T21559] netlink: 'syz.9.7578': attribute type 10 has an invalid length. [ 265.017849][T21559] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7578'. [ 265.037682][T21559] team0: entered promiscuous mode [ 265.043827][T21559] team_slave_0: entered promiscuous mode [ 265.048449][T20272] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.051405][T21559] team_slave_1: entered promiscuous mode [ 265.067671][T21559] team0: entered allmulticast mode [ 265.070556][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.073122][T21559] team_slave_0: entered allmulticast mode [ 265.091223][T21559] team_slave_1: entered allmulticast mode [ 265.165162][T21573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7584'. [ 265.191070][T21571] loop1: detected capacity change from 0 to 2048 [ 265.195396][T21575] loop4: detected capacity change from 0 to 128 [ 265.205299][T21559] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.223390][T21575] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.231448][T21575] FAT-fs (loop4): Filesystem has been set read-only [ 265.264145][T21575] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.272127][T21575] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.280830][T21571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.388950][T21587] smc: net device bond0 applied user defined pnetid SYZ0 [ 265.411554][T19616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 265.433538][T21587] smc: net device bond0 erased user defined pnetid SYZ0 [ 265.449066][T19616] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 265.501371][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.624736][T21602] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7599'. [ 266.079251][T21605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21605 comm=syz.9.7602 [ 266.094942][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7602'. [ 266.107602][ T29] audit: type=1326 audit(2000000108.030:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21606 comm="syz.1.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29abf2eec9 code=0x7ffc0000 [ 266.131328][ T29] audit: type=1326 audit(2000000108.030:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21606 comm="syz.1.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29abf2eec9 code=0x7ffc0000 [ 266.214240][T21619] loop5: detected capacity change from 0 to 2048 [ 266.237605][T21621] loop7: detected capacity change from 0 to 128 [ 266.249064][T21619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.271323][T21623] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.279575][T21621] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 266.287659][T21621] FAT-fs (loop7): Filesystem has been set read-only [ 266.294603][T21623] smc: net device bond0 erased user defined pnetid SYZ0 [ 266.296052][T21621] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 266.309719][T21621] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 266.354810][T21628] Buffer I/O error on dev loop7, logical block 2065, async page read [ 266.367958][T21628] Buffer I/O error on dev loop7, logical block 2066, async page read [ 266.376274][T21628] Buffer I/O error on dev loop7, logical block 2067, async page read [ 266.384581][T21628] Buffer I/O error on dev loop7, logical block 2068, async page read [ 266.388039][T17903] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 266.392816][T21628] Buffer I/O error on dev loop7, logical block 2069, async page read [ 266.417984][T21628] Buffer I/O error on dev loop7, logical block 2070, async page read [ 266.436428][T17903] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 266.448136][T21628] Buffer I/O error on dev loop7, logical block 2071, async page read [ 266.461055][T21628] Buffer I/O error on dev loop7, logical block 2072, async page read [ 266.469258][T21621] Buffer I/O error on dev loop7, logical block 2065, async page read [ 266.480093][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.492835][T21621] Buffer I/O error on dev loop7, logical block 2066, async page read [ 266.579634][T21639] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7620'. [ 266.588436][T21641] loop1: detected capacity change from 0 to 128 [ 266.602634][T21636] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7620'. [ 266.613276][T21641] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 266.621190][T21641] FAT-fs (loop1): Filesystem has been set read-only [ 266.642226][T21643] loop4: detected capacity change from 0 to 164 [ 266.677689][T21641] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 266.685574][T21641] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 266.697772][T21645] bond_slave_0: entered promiscuous mode [ 266.703477][T21645] bond_slave_1: entered promiscuous mode [ 266.713565][T21649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21649 comm=syz.4.7616 [ 266.726901][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7616'. [ 266.738040][T21645] macvlan2: entered promiscuous mode [ 266.743377][T21645] bond0: entered promiscuous mode [ 266.748856][T21645] macvlan2: entered allmulticast mode [ 266.754318][T21645] bond0: entered allmulticast mode [ 266.759565][T21645] bond_slave_0: entered allmulticast mode [ 266.765384][T21645] bond_slave_1: entered allmulticast mode [ 266.781402][T21645] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 266.790552][T21645] bond0: left allmulticast mode [ 266.795462][T21645] bond_slave_0: left allmulticast mode [ 266.801042][T21645] bond_slave_1: left allmulticast mode [ 266.806547][T21645] bond0: left promiscuous mode [ 266.811826][T21645] bond_slave_0: left promiscuous mode [ 266.817291][T21645] bond_slave_1: left promiscuous mode [ 266.855877][T21654] msdos: Unknown parameter 'ÿ' [ 267.202806][T21659] loop4: detected capacity change from 0 to 512 [ 267.229496][T21658] loop9: detected capacity change from 0 to 2048 [ 267.299558][T21658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.317958][T21659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.392621][T21659] EXT4-fs (loop4): 1 truncate cleaned up [ 267.407924][T21659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.435504][T17942] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 267.481160][T17942] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 267.538587][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.554452][T21678] loop7: detected capacity change from 0 to 164 [ 267.568349][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.650349][T21685] bridge_slave_0: left allmulticast mode [ 267.656053][T21685] bridge_slave_0: left promiscuous mode [ 267.661765][T21685] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.693719][T21685] bridge_slave_1: left allmulticast mode [ 267.699504][T21685] bridge_slave_1: left promiscuous mode [ 267.705264][T21685] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.718721][T21696] loop7: detected capacity change from 0 to 512 [ 267.727061][T21696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 267.743893][T21696] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.7637: Unimplemented hash flags: 0x0001 [ 267.755478][T21696] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7637: Corrupt directory, running e2fsck is recommended [ 267.771239][T21696] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.7637: Unimplemented hash flags: 0x0001 [ 267.782965][T21696] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7637: Corrupt directory, running e2fsck is recommended [ 267.796702][T21696] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.7637: Unimplemented hash flags: 0x0001 [ 267.804818][T21685] bond0: (slave bond_slave_0): Releasing backup interface [ 267.808375][T21696] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7637: Corrupt directory, running e2fsck is recommended [ 267.831896][T21696] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.7637: Unimplemented hash flags: 0x0001 [ 267.843470][T21696] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7637: Corrupt directory, running e2fsck is recommended [ 267.857143][T21696] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.7637: Unimplemented hash flags: 0x0001 [ 267.868765][T21696] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7637: Corrupt directory, running e2fsck is recommended [ 267.882750][T21685] bond0: (slave bond_slave_1): Releasing backup interface [ 267.900717][T20272] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.925735][T21685] team0: Port device team_slave_0 removed [ 267.936156][T21685] team0: Port device team_slave_1 removed [ 267.943315][T21685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.950855][T21685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.962829][T21685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.970446][T21685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.054804][T21689] macvlan2: entered promiscuous mode [ 268.060322][T21689] bond0: entered promiscuous mode [ 268.065437][T21689] macvlan2: entered allmulticast mode [ 268.070978][T21689] bond0: entered allmulticast mode [ 268.120460][T21689] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.150783][T21689] bond0: left allmulticast mode [ 268.155723][T21689] bond0: left promiscuous mode [ 268.218415][ T36] hid_parser_main: 48 callbacks suppressed [ 268.218437][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.231732][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.239250][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.289067][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.296806][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.304295][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.311852][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.319297][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.326793][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.334273][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.410647][ T36] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz1 [ 268.465001][T21736] atomic_op ffff88811aba0d28 conn xmit_atomic 0000000000000000 [ 268.688746][T21761] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 268.843179][T21779] loop1: detected capacity change from 0 to 1024 [ 268.892901][T21779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.927377][T21779] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.374069][ T7468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:46: bg 0: block 393: padding at end of block bitmap is not set [ 269.429508][ T7468] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 269.442259][ T7468] EXT4-fs (loop1): This should not happen!! Data will be lost [ 269.442259][ T7468] [ 269.542830][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.618061][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 269.618115][ T29] audit: type=1400 audit(2000000111.550:12615): avc: denied { bind } for pid=21825 comm="syz.1.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.706845][ T29] audit: type=1400 audit(2000000111.550:12616): avc: denied { listen } for pid=21825 comm="syz.1.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.726778][ T29] audit: type=1400 audit(2000000111.550:12617): avc: denied { accept } for pid=21825 comm="syz.1.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.746632][ T29] audit: type=1400 audit(2000000111.560:12618): avc: denied { read } for pid=21825 comm="syz.1.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.835023][T21832] loop1: detected capacity change from 0 to 164 [ 269.859117][T21832] Unsupported NM flag settings (8) [ 270.407591][T21863] bond0: (slave bond_slave_0): Releasing backup interface [ 270.433257][T21863] bond0: (slave bond_slave_1): Releasing backup interface [ 270.462688][T21863] team_slave_0: left promiscuous mode [ 270.468463][T21863] team_slave_0: left allmulticast mode [ 270.493279][T21863] team0: Port device team_slave_0 removed [ 270.520344][T21863] team_slave_1: left promiscuous mode [ 270.525803][T21863] team_slave_1: left allmulticast mode [ 270.574865][T21863] team0: Port device team_slave_1 removed [ 270.594430][T21863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.603665][T21863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.724897][T21863] bond1: (slave bridge0): Releasing active interface [ 270.914512][ T29] audit: type=1400 audit(2000000112.840:12619): avc: denied { setopt } for pid=21892 comm="syz.4.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.061446][T21907] SELinux: policydb version 65545 does not match my version range 15-35 [ 271.079467][T21909] loop4: detected capacity change from 0 to 164 [ 271.086429][T21907] SELinux: failed to load policy [ 271.115891][T21909] bio_check_eod: 77705 callbacks suppressed [ 271.115913][T21909] syz.4.7674: attempt to access beyond end of device [ 271.115913][T21909] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 271.378851][T21928] bridge0: port 3(team0) entered disabled state [ 271.393174][T21928] bridge0: port 4(batadv0) entered disabled state [ 271.398860][T21924] loop7: detected capacity change from 0 to 8192 [ 271.417905][T21928] bridge_slave_0: left promiscuous mode [ 271.423658][T21928] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.434864][T21928] bridge_slave_1: left allmulticast mode [ 271.440854][T21928] bridge_slave_1: left promiscuous mode [ 271.446608][T21928] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.454846][T21924] loop7: p1 p2[DM] p4 [ 271.459365][T21924] loop7: p1 size 196608 extends beyond EOD, truncated [ 271.471967][T21928] bond0: (slave bond_slave_0): Releasing backup interface [ 271.476700][T21924] loop7: p2 start 4292936063 is beyond EOD, truncated [ 271.485929][T21924] loop7: p4 size 50331648 extends beyond EOD, truncated [ 271.497844][T21928] bond0: (slave bond_slave_1): Releasing backup interface [ 271.533479][T21928] team_slave_0: left promiscuous mode [ 271.539065][T21928] team_slave_0: left allmulticast mode [ 271.572903][T21928] team0: Port device team_slave_0 removed [ 271.591727][T21928] team_slave_1: left promiscuous mode [ 271.597278][T21928] team_slave_1: left allmulticast mode [ 271.605930][T21928] team0: Port device team_slave_1 removed [ 271.627232][T21928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.634721][T21928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.659273][T21928] bond1: (slave bridge1): Releasing active interface [ 271.866997][T21941] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 271.946342][T21951] loop9: detected capacity change from 0 to 164 [ 271.982132][T21951] syz.9.7691: attempt to access beyond end of device [ 271.982132][T21951] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.000611][T21957] loop1: detected capacity change from 0 to 1024 [ 272.011923][ T29] audit: type=1400 audit(2000000113.930:12620): avc: denied { accept } for pid=21955 comm="syz.4.7694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.034163][T21957] EXT4-fs: Ignoring removed orlov option [ 272.060552][T21957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.165204][T21963] veth0_to_team: entered promiscuous mode [ 272.298882][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7708'. [ 272.382219][T21975] loop7: detected capacity change from 0 to 164 [ 272.428392][T21975] Unsupported NM flag settings (8) [ 272.461448][T21981] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 272.491663][T19616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.542401][ T29] audit: type=1326 audit(2000000114.470:12621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 272.566085][ T29] audit: type=1326 audit(2000000114.470:12622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 272.589870][ T29] audit: type=1326 audit(2000000114.470:12623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f44017deec9 code=0x7ffc0000 [ 272.613479][ T29] audit: type=1326 audit(2000000114.470:12624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.9.7707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44017def03 code=0x7ffc0000 [ 272.641945][T21990] loop9: detected capacity change from 0 to 1024 [ 272.660221][T21990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.738911][T17942] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.805957][T22010] loop5: detected capacity change from 0 to 512 [ 272.831549][T22010] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 272.847428][T22010] EXT4-fs (loop5): orphan cleanup on readonly fs [ 272.860444][T22010] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7715: corrupted inode contents [ 272.901755][T22010] EXT4-fs (loop5): Remounting filesystem read-only [ 272.932638][T22010] EXT4-fs (loop5): 1 truncate cleaned up [ 272.938470][ T7442] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 272.949234][ T7442] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 273.021323][ T7442] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 273.033413][T22020] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 273.042813][T22010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.107974][T17903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.150062][T22029] syzkaller0: entered allmulticast mode [ 273.155978][T22029] syzkaller0: entered promiscuous mode [ 273.164068][T22029] syzkaller0 (unregistering): left allmulticast mode [ 273.170877][T22029] syzkaller0 (unregistering): left promiscuous mode [ 274.181125][ T5478] hid_parser_main: 18 callbacks suppressed [ 274.181152][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.194651][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.202147][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.214910][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.222410][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.230016][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.230114][T22171] loop4: detected capacity change from 0 to 512 [ 274.237551][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.251344][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.258824][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.266337][ T5478] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 274.274820][ T5478] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz0] on syz1 [ 274.312169][T22171] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 274.315215][T22180] loop7: detected capacity change from 0 to 1024 [ 274.326702][T22171] EXT4-fs (loop4): orphan cleanup on readonly fs [ 274.334037][T22180] EXT4-fs: Ignoring removed orlov option [ 274.340464][T22179] syzkaller0: entered allmulticast mode [ 274.341818][T22171] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.7732: corrupted inode contents [ 274.346372][T22179] syzkaller0: entered promiscuous mode [ 274.380605][T22179] syzkaller0 (unregistering): left allmulticast mode [ 274.387312][T22171] EXT4-fs (loop4): Remounting filesystem read-only [ 274.387444][T22171] EXT4-fs (loop4): 1 truncate cleaned up [ 274.393863][T22179] syzkaller0 (unregistering): left promiscuous mode [ 274.406259][ T7478] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 274.416847][ T7478] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 274.428638][ T7478] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 274.429491][T22180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.453970][T22171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.524709][T20272] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.555882][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.632674][T22196] loop7: detected capacity change from 0 to 2048 [ 274.660667][T22196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.689739][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 274.689754][ T29] audit: type=1400 audit(2000000116.620:12834): avc: denied { read } for pid=22194 comm="syz.7.7742" path="/131/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.695659][T22210] loop4: detected capacity change from 0 to 1024 [ 274.727677][T22196] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7742: bg 0: block 234: padding at end of block bitmap is not set [ 274.752663][ T29] audit: type=1400 audit(2000000116.680:12835): avc: denied { read } for pid=22211 comm="syz.1.7751" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 274.784701][T22210] EXT4-fs: Ignoring removed orlov option [ 274.792244][T20272] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.797404][ T29] audit: type=1400 audit(2000000116.680:12836): avc: denied { open } for pid=22211 comm="syz.1.7751" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 274.825028][ T29] audit: type=1400 audit(2000000116.680:12837): avc: denied { ioctl } for pid=22211 comm="syz.1.7751" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 274.828931][T22210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.167002][ T29] audit: type=1400 audit(2000000117.090:12838): avc: denied { connect } for pid=22234 comm="syz.7.7760" lport=39346 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 275.180764][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.191523][ T29] audit: type=1400 audit(2000000117.090:12839): avc: denied { name_connect } for pid=22234 comm="syz.7.7760" dest=20002 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 275.224607][ T29] audit: type=1400 audit(2000000117.140:12840): avc: denied { mounton } for pid=22235 comm="syz.5.7761" path="/proc/751/cgroup" dev="proc" ino=72529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 275.273864][ T29] audit: type=1326 audit(2000000117.200:12841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.5.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 275.297610][ T29] audit: type=1326 audit(2000000117.200:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.5.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 275.321466][ T29] audit: type=1326 audit(2000000117.200:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.5.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc5f187eec9 code=0x7ffc0000 [ 275.356259][T22247] loop4: detected capacity change from 0 to 1024 [ 275.370213][T22247] EXT4-fs: Ignoring removed orlov option [ 275.394784][T22247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.431768][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.522604][T22262] loop5: detected capacity change from 0 to 164 [ 275.531157][T22262] Unable to read rock-ridge attributes [ 275.554375][T22262] Unable to read rock-ridge attributes [ 275.570597][T22262] syz.5.7772: attempt to access beyond end of device [ 275.570597][T22262] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 275.578866][T22264] loop7: detected capacity change from 0 to 4096 [ 275.596437][T22262] syz.5.7772: attempt to access beyond end of device [ 275.596437][T22262] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 275.605422][T22264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.610449][T22268] loop4: detected capacity change from 0 to 512 [ 275.614074][T22268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 275.639084][T22264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.654671][T22268] EXT4-fs (loop4): 1 truncate cleaned up [ 275.677848][T22268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.680638][T22264] Invalid ELF header magic: != ELF [ 275.752882][T20272] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.764960][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.817821][T22285] can0: slcan on ttyS3. [ 275.881835][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7785'. [ 275.891145][T22285] can0 (unregistered): slcan off ttyS3. [ 275.917346][T22293] loop4: detected capacity change from 0 to 1024 [ 275.962434][T22293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.006845][T17972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.050489][T22309] loop9: detected capacity change from 0 to 1024 [ 276.057394][T22309] EXT4-fs: Ignoring removed orlov option [ 276.071616][T22309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.119932][T22316] loop4: detected capacity change from 0 to 1024 [ 276.174008][T22323] netlink: 'syz.7.7797': attribute type 30 has an invalid length. [ 276.312970][T22341] loop5: detected capacity change from 0 to 256 [ 276.373953][T22343] loop4: detected capacity change from 0 to 2048 [ 276.388484][T22341] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 276.395899][T22341] FAT-fs (loop5): Filesystem has been set read-only [ 276.405495][T22341] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.432712][T22343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7806: bg 0: block 234: padding at end of block bitmap is not set [ 276.452666][T22354] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.463814][T22354] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.500153][T22356] loop7: detected capacity change from 0 to 1024 [ 276.562193][T22360] netlink: 'syz.9.7814': attribute type 16 has an invalid length. [ 276.570552][T22360] netlink: 156 bytes leftover after parsing attributes in process `syz.9.7814'. [ 276.612414][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7816'. [ 276.631795][T22369] netlink: 121 bytes leftover after parsing attributes in process `syz.5.7816'. [ 276.653592][T22380] netlink: 404 bytes leftover after parsing attributes in process `syz.9.7821'. [ 276.851640][T22406] loop1: detected capacity change from 0 to 1024 [ 276.916113][T22413] loop1: detected capacity change from 0 to 1024 [ 276.927625][T22413] EXT4-fs: Ignoring removed orlov option [ 277.028861][T22428] loop1: detected capacity change from 0 to 512 [ 277.056317][T22428] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.084633][T22436] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7844'. [ 277.085436][T22428] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7838: bg 0: block 328: padding at end of block bitmap is not set [ 277.130944][T22440] can0: slcan on ttyS3. [ 277.146120][T22442] serio: Serial port ptm0 [ 277.206084][T22445] loop9: detected capacity change from 0 to 1024 [ 277.227255][T22440] can0 (unregistered): slcan off ttyS3. [ 277.317650][T22459] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7853'. [ 277.387031][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7856'. [ 277.481781][T22481] loop9: detected capacity change from 0 to 128 [ 277.503919][T22481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 277.519492][T22481] System zones: 1-3, 19-19, 35-36 [ 277.533007][T22481] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.709348][T22496] netlink: 404 bytes leftover after parsing attributes in process `syz.5.7869'. [ 277.953937][T22509] 9pnet_fd: Insufficient options for proto=fd [ 278.059444][T22517] loop5: detected capacity change from 0 to 1024 [ 278.066429][T22517] EXT4-fs: Ignoring removed orlov option [ 278.280432][T22540] 9pnet_fd: Insufficient options for proto=fd [ 278.362768][T22548] can0: slcan on ttyS3. [ 278.366768][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7893'. [ 278.389551][T22547] netlink: 121 bytes leftover after parsing attributes in process `syz.7.7893'. [ 278.435098][T22551] loop9: detected capacity change from 0 to 512 [ 278.447962][T22550] loop1: detected capacity change from 0 to 1024 [ 278.457431][T22548] can0 (unregistered): slcan off ttyS3. [ 278.475618][T22551] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 278.484902][T22551] EXT4-fs (loop9): orphan cleanup on readonly fs [ 278.511799][T22551] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7894: corrupted inode contents [ 278.539161][T22551] EXT4-fs (loop9): Remounting filesystem read-only [ 278.558866][T22551] EXT4-fs (loop9): 1 truncate cleaned up [ 278.566899][T22559] netlink: 'syz.7.7898': attribute type 1 has an invalid length. [ 278.574778][ T7433] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 278.585403][ T7433] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 278.591007][T22559] bond2: (slave ip6gretap1): making interface the new active one [ 278.604340][T22559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.612139][T22559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.620051][T22559] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 278.667355][ T7433] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 278.736159][T22573] loop1: detected capacity change from 0 to 164 [ 278.756979][T22573] Unable to read rock-ridge attributes [ 278.784373][T22573] Unable to read rock-ridge attributes [ 278.803166][T22579] loop5: detected capacity change from 0 to 128 [ 278.811102][T22573] syz.1.7897: attempt to access beyond end of device [ 278.811102][T22573] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.829903][T22579] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.858090][T22573] syz.1.7897: attempt to access beyond end of device [ 278.858090][T22573] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.048932][T22604] loop7: detected capacity change from 0 to 512 [ 279.088914][T22604] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 279.107198][T22604] EXT4-fs (loop7): orphan cleanup on readonly fs [ 279.118151][T22606] loop9: detected capacity change from 0 to 4096 [ 279.124923][T22606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.144241][T22604] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7917: corrupted inode contents [ 279.186398][T22606] Invalid ELF header magic: != ELF [ 279.194349][T22604] EXT4-fs (loop7): Remounting filesystem read-only [ 279.214960][T22604] EXT4-fs (loop7): 1 truncate cleaned up [ 279.230724][ T7433] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 279.241442][ T7433] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 279.295340][T22618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7931'. [ 279.323122][ T7433] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 279.386241][T22623] loop9: detected capacity change from 0 to 164 [ 279.405212][T22623] Unable to read rock-ridge attributes [ 279.415214][T22623] Unable to read rock-ridge attributes [ 279.422522][T22623] syz.9.7921: attempt to access beyond end of device [ 279.422522][T22623] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 279.455123][T22623] syz.9.7921: attempt to access beyond end of device [ 279.455123][T22623] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.513868][T22638] $Hÿ: renamed from bond0 (while UP) [ 279.525149][T22638] $Hÿ: entered promiscuous mode [ 279.567806][T22643] loop4: detected capacity change from 0 to 4096 [ 279.574478][T22643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.590319][T22643] Invalid ELF header magic: != ELF [ 279.602846][T22648] loop1: detected capacity change from 0 to 128 [ 279.613070][T22648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 279.621312][T22648] System zones: 1-3, 19-19, 35-36 [ 279.627414][T22648] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.719506][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 279.719524][ T29] audit: type=1400 audit(2000000121.650:13068): avc: denied { create } for pid=22655 comm="syz.1.7937" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.774270][ T29] audit: type=1400 audit(2000000121.680:13069): avc: denied { write } for pid=22655 comm="syz.1.7937" name="file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.797035][ T29] audit: type=1400 audit(2000000121.680:13070): avc: denied { open } for pid=22655 comm="syz.1.7937" path="/206/file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.820247][ T29] audit: type=1400 audit(2000000121.680:13071): avc: denied { ioctl } for pid=22655 comm="syz.1.7937" path="/206/file0" dev="tmpfs" ino=1091 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.844884][ T29] audit: type=1400 audit(2000000121.690:13072): avc: denied { unlink } for pid=19616 comm="syz-executor" name="file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.874152][ T29] audit: type=1400 audit(2000000121.800:13073): avc: denied { write } for pid=22663 comm="syz.4.7941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 279.950417][T22676] can0: slcan on ttyS3. [ 279.964922][ T29] audit: type=1400 audit(2000000121.890:13074): avc: denied { create } for pid=22677 comm="syz.4.7946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.985013][ T29] audit: type=1400 audit(2000000121.890:13075): avc: denied { setopt } for pid=22677 comm="syz.4.7946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.027434][T22676] can0 (unregistered): slcan off ttyS3. [ 280.038590][T22679] loop7: detected capacity change from 0 to 1024 [ 280.094081][ T29] audit: type=1400 audit(2000000122.000:13076): avc: denied { firmware_load } for pid=22680 comm="syz.4.7947" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 280.135372][T22685] netlink: 664 bytes leftover after parsing attributes in process `syz.7.7948'. [ 280.165540][ T29] audit: type=1400 audit(2000000122.090:13077): avc: denied { read write } for pid=22686 comm="syz.5.7950" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 280.366863][T22712] loop5: detected capacity change from 0 to 512 [ 280.386472][T22712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 280.416845][T22712] EXT4-fs (loop5): 1 truncate cleaned up [ 280.517659][T22723] netlink: 'syz.4.7965': attribute type 4 has an invalid length. [ 280.611413][T22733] loop9: detected capacity change from 0 to 512 [ 280.637595][T22733] journal_path: Non-blockdev passed as './bus' [ 280.643833][T22733] EXT4-fs: error: could not find journal device path [ 280.683413][T22740] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7971'. [ 280.749839][T22745] loop1: detected capacity change from 0 to 512 [ 280.765723][T22745] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.778273][T22745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 280.810556][T22751] $Hÿ: renamed from bond0 (while UP) [ 280.816259][T22745] EXT4-fs (loop1): 1 truncate cleaned up [ 280.834050][T22751] $Hÿ: entered promiscuous mode [ 280.941240][T22745] ================================================================== [ 280.949390][T22745] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 280.957790][T22745] [ 280.960151][T22745] write to 0xffff88811a415c9c of 4 bytes by task 22755 on cpu 1: [ 280.967890][T22745] __xa_set_mark+0x172/0x1a0 [ 280.972519][T22745] __folio_mark_dirty+0x3af/0x4d0 [ 280.977568][T22745] mark_buffer_dirty+0x11e/0x210 [ 280.982555][T22745] block_write_end+0x12d/0x210 [ 280.987352][T22745] ext4_write_end+0x134/0x730 [ 280.992047][T22745] generic_perform_write+0x30f/0x490 [ 280.997384][T22745] ext4_buffered_write_iter+0x1ee/0x3c0 [ 281.002987][T22745] ext4_file_write_iter+0xdbf/0xf00 [ 281.008217][T22745] iter_file_splice_write+0x663/0xa60 [ 281.013635][T22745] direct_splice_actor+0x156/0x2a0 [ 281.018785][T22745] splice_direct_to_actor+0x312/0x680 [ 281.024196][T22745] do_splice_direct+0xda/0x150 [ 281.029000][T22745] do_sendfile+0x380/0x650 [ 281.033458][T22745] __x64_sys_sendfile64+0x105/0x150 [ 281.038717][T22745] x64_sys_call+0x2bb4/0x3000 [ 281.043428][T22745] do_syscall_64+0xd2/0x200 [ 281.047991][T22745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.053908][T22745] [ 281.056517][T22745] read to 0xffff88811a415c9c of 4 bytes by task 22745 on cpu 0: [ 281.064160][T22745] filemap_write_and_wait_range+0xfc/0x340 [ 281.070026][T22745] ext4_file_write_iter+0xe04/0xf00 [ 281.075274][T22745] iter_file_splice_write+0x663/0xa60 [ 281.080690][T22745] direct_splice_actor+0x156/0x2a0 [ 281.085845][T22745] splice_direct_to_actor+0x312/0x680 [ 281.091269][T22745] do_splice_direct+0xda/0x150 [ 281.096079][T22745] do_sendfile+0x380/0x650 [ 281.100539][T22745] __x64_sys_sendfile64+0x105/0x150 [ 281.105769][T22745] x64_sys_call+0x2bb4/0x3000 [ 281.110480][T22745] do_syscall_64+0xd2/0x200 [ 281.115014][T22745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.120927][T22745] [ 281.123266][T22745] value changed: 0x00000021 -> 0x0a000021 [ 281.129022][T22745] [ 281.131376][T22745] Reported by Kernel Concurrency Sanitizer on: [ 281.137607][T22745] CPU: 0 UID: 0 PID: 22745 Comm: syz.1.7974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.147426][T22745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.157518][T22745] ================================================================== [ 290.327273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog