last executing test programs: 8m22.444953552s ago: executing program 32 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r2], 0x2c}}, 0x4000080) 8m20.340114237s ago: executing program 33 (id=190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000180)="fc", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)=""/4, &(0x7f00000000c0)=0x4) 7m54.712784794s ago: executing program 34 (id=926): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x91, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="0cd1d5745c1b2ba15d48bd5398901feb3b2878ae4f0b3a3509c6d1fbe30137dc00d75ca3f93e724f9b6eb1d1090147ae", 0x30}], 0x1}}], 0x1, 0x4000080) 6m50.010014062s ago: executing program 35 (id=4412): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001300)={&(0x7f0000000340)={0x1d, r1, 0x3, {0x2, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f00000012c0)={&(0x7f0000001480)="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", 0xfffffc6d}, 0x1, 0x0, 0x0, 0x20040180}, 0x4000004) 6m47.831760073s ago: executing program 36 (id=4463): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$caif_stream(0x25, 0x1, 0x5) connect$caif(r0, 0x0, 0x0) 6m23.093455348s ago: executing program 37 (id=4912): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 6m6.07102826s ago: executing program 38 (id=5082): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 4m52.987043892s ago: executing program 39 (id=7410): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1200000, &(0x7f0000006940)=ANY=[], 0x1, 0x15e, &(0x7f00000003c0)="$eJzs27/K01AYB+C39q+6dBaHgItTUa9AkQpiQFE66KRQXVop2CU69VK8QUE6dTtSI62WOvSjacrX51nywo8czjskJyck7+9+noxn80+zV8voNRrRehxZrBrRjxvRjNIiAIDrZJVS/Ewppe4ibn6PlFLdMwIAqnbF9b9b+cQAgMrY/wPA5bH+A8DlefP23YsneT58nWW9iB+LYlSMymOZP3ueDx9kv/W3Zy2LYtTc5A/LPPs3b8etP/mjvXkn7t8r83X29GW+k9+OcfXtAwAAwEUYZBt79/eDwf/ysvrr/cDO/r0Vd1onawMAOMD867fJh+n04xfFEYt2HGnA9UNY/e2cqojjjBP9iHNo56CiE2cxjW1R950JqNrmok8+/QMAAAAAAAAAAAAAgHN1it+J6u4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdv0KAAD//zVIUEo=") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x230000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1e7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) 4m0.359191104s ago: executing program 40 (id=10227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m58.328035132s ago: executing program 41 (id=10259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) set_tid_address(0x0) 3m42.465735148s ago: executing program 42 (id=10949): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 3m28.458873842s ago: executing program 43 (id=11465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 3m12.740568114s ago: executing program 44 (id=12225): r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8003, 0x27a}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, 0x6, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3m12.077696855s ago: executing program 45 (id=12243): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m11.542512765s ago: executing program 46 (id=12256): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESHEX], 0xffdd) 2m46.023059282s ago: executing program 47 (id=13282): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x4, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) 2m39.015035389s ago: executing program 48 (id=12929): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000240)={[{@norecovery}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@norecovery}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x6, 0x67b, &(0x7f0000001300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0x7d}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) 2m24.853108437s ago: executing program 49 (id=14087): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r2, &(0x7f0000001280)='3', 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x43, r1, 0x0, 0x0, 0x7}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m23.512315312s ago: executing program 50 (id=14128): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 2m15.117435147s ago: executing program 1 (id=14479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004000000280000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) 2m15.060439052s ago: executing program 1 (id=14483): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r2, &(0x7f0000019200)=""/102400, 0x19000, 0x1000000000) 2m15.003061148s ago: executing program 1 (id=14490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0xf7}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}, 0x36) 2m14.851784192s ago: executing program 1 (id=14499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m14.783548348s ago: executing program 1 (id=14502): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m14.754148581s ago: executing program 1 (id=14505): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRES64, @ANYRES32], 0x1, 0x286, &(0x7f0000000640)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 1m59.681605383s ago: executing program 51 (id=14505): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x286, &(0x7f0000000640)="$eJzs2s9rHGUYB/BnYkw3LelG/EUL4ose1MvQ5OyhRSKIAUWNUAXp1GzsmnE3ZJbAipic9Oqf4Fk8ehOkRy+5+Bd48JZLjj2IK7O7iZsSaqxtUsrnc0geZua7M/O+sy/PwO69/t0X62tVvlb0YirLYupq7MSdLOZjKg7sxGuvXP/1hfevf/T2teXlxnjrYkrp4ou/fPzVjy/d7l348KeLP5+L3flP9vYX/9h9bvfS3l8f3GpXqV2lTrdXf1a32ytulq202q7W85TeLVtF1UrtTtXa7KUi3TzYv1Z2Nzb6qeiszp3f2GxVVSo6/bTe6qdeN/U2+6n4rGh3Up7nae58MHTr/mIrP9wZDGJ/8OSNGAwGs9/Hhdsx93s0I3sqZU9fzZ69kT2/k13aHwyad0dnH8BVc+buNf/nxsccO/88FsaL+tJ7KTUiym+3VrZWRv/rvY24thbtKKMVV2I2/oz6MRkb1W++tbx0JQ3Nxzfl9ji/vbXyREQMn6BRfiGaMX98fmGUTwf5OlX/rVf3w/MvRjOeOT6/eDQ/Mzp/I159eSKfRzN++zS6UcZq1NnYHg/B0tcLKb3xznI6ev2Xh8cBADxu8nSo7t/qpm2if4vI8yP7J/qjUX6iP2xO9Iczx/SHd/VX03F5+mzvnYiq/+V6UZatzfoFb1gcbjlBcfCG+N9SD7+Y+T/x2clhuWcRkU2O5cO7r6kjc3bKgzl9wtFQjIrskfs63FcR8flpLkSciX8m/V8PbZzKBQEAAAAAAAAAAHAip/FzwrO+RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH2dwAAAP//NLm0Nw==") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 1m48.186069755s ago: executing program 0 (id=15360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x66, &(0x7f0000001280)={0x0, 0x0, 0x3d, 0x1d, ""/29}, &(0x7f00000012c0)=0x3d, 0x0) 1m48.103093433s ago: executing program 0 (id=15364): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) faccessat2(0xffffffffffffffff, 0x0, 0x40, 0x200) 1m46.544734407s ago: executing program 0 (id=15413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 1m46.51235431s ago: executing program 0 (id=15415): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d303e002804de526a2962c96269574f352812653af3f6cd668c31a51bb3ea504a07f361244709ddea94f616bfbdb1850c78c12060f961cc4c0f80ed3390fb03dbe82a2014852c59665501cd64f0a6a4ba839cf58fe10e184c735b4692a267d276169f0c203459a3f8899e6c3ac3bd115cdd185ca2972692171eed646eb083d9c646931c7987d8c087efbb77b881ceaaef4cf13f59d8417bf2ba94f6f9bcf2d707ff2c4f28415a5fa5517f85d05882"], 0x4, 0x2d1, &(0x7f0000000740)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x40009, 0x1b) 1m46.450592665s ago: executing program 0 (id=15418): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000060696c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 1m46.194600969s ago: executing program 0 (id=15432): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nodiscard}, {@quota}]}, 0x1, 0x43a, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1m46.160066332s ago: executing program 52 (id=15432): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nodiscard}, {@quota}]}, 0x1, 0x43a, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1m10.274621198s ago: executing program 3 (id=16978): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x7f) 1m10.150105459s ago: executing program 3 (id=16984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1m10.115024142s ago: executing program 3 (id=16989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x24, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}]}, 0x24}}, 0x0) 1m10.053015598s ago: executing program 3 (id=17002): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) 1m10.012916922s ago: executing program 3 (id=16995): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x2e5, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x800) io_setup(0x200, &(0x7f0000000140)) 1m9.795243272s ago: executing program 3 (id=17003): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1m9.783782163s ago: executing program 53 (id=17003): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 40.713358808s ago: executing program 4 (id=18165): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2, 0xfeff}, 0x10) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4040}, 0x4048804) 40.682035651s ago: executing program 4 (id=18168): r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x37213db9}) syz_open_procfs$pagemap(r0, &(0x7f00000006c0)) 40.634875835s ago: executing program 4 (id=18173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 40.599882789s ago: executing program 4 (id=18177): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 40.572673681s ago: executing program 4 (id=18179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 40.420520136s ago: executing program 2 (id=18187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) 40.346328153s ago: executing program 4 (id=18188): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x5, 0x4) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {0x0}], 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 40.345807553s ago: executing program 2 (id=18189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@data_err_ignore}, {@bsdgroups}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4e7, &(0x7f0000000680)="$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") getresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,', @ANYRESDEC=r1]) 40.297180037s ago: executing program 54 (id=18188): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x5, 0x4) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {0x0}], 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 40.273652119s ago: executing program 2 (id=18192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000004000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 39.969080427s ago: executing program 2 (id=18203): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 39.944636429s ago: executing program 2 (id=18195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000001640)={0x1d, r1, 0x1, {0x2, 0xff, 0x3}, 0xff}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 39.420527978s ago: executing program 2 (id=18204): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x30, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 39.420337748s ago: executing program 55 (id=18204): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x30, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.123501406s ago: executing program 7 (id=19512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) 990.956368ms ago: executing program 7 (id=19527): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1c2f66216eb889af}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 865.21343ms ago: executing program 9 (id=19522): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 758.18236ms ago: executing program 9 (id=19525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 680.515377ms ago: executing program 9 (id=19529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 618.072073ms ago: executing program 9 (id=19532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000020000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) 550.497239ms ago: executing program 9 (id=19533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x42}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 533.790391ms ago: executing program 7 (id=19535): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 508.306353ms ago: executing program 6 (id=19536): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 464.878897ms ago: executing program 5 (id=19537): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 464.524097ms ago: executing program 6 (id=19538): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 462.657237ms ago: executing program 9 (id=19548): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 416.271151ms ago: executing program 6 (id=19540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 414.342811ms ago: executing program 5 (id=19541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 314.573751ms ago: executing program 5 (id=19542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) 314.32702ms ago: executing program 8 (id=19543): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 314.125891ms ago: executing program 8 (id=19545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 287.133993ms ago: executing program 5 (id=19546): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 286.716803ms ago: executing program 6 (id=19547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x606c) 183.292003ms ago: executing program 8 (id=19549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="34010380"], 0x154}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) 183.060423ms ago: executing program 8 (id=19550): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000440)=""/213) 182.864683ms ago: executing program 7 (id=19551): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) 138.268687ms ago: executing program 7 (id=19553): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 138.146497ms ago: executing program 5 (id=19554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x2, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 138.048437ms ago: executing program 6 (id=19555): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 136.448357ms ago: executing program 8 (id=19563): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}}, 0x1c}}, 0x40084) 46.831556ms ago: executing program 8 (id=19556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 659.209µs ago: executing program 6 (id=19557): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() r1 = getpid() kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 409.78µs ago: executing program 5 (id=19558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) 0s ago: executing program 7 (id=19559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 494.610124][T15688] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 494.626183][T15688] JBD2: no valid journal superblock found [ 494.632759][T15688] EXT4-fs (loop2): Could not load journal inode [ 494.656132][T15688] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 494.685129][T15702] loop2: detected capacity change from 0 to 128 [ 494.781974][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17400'. [ 494.809404][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17400'. [ 494.829761][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17400'. [ 494.836654][T15733] loop2: detected capacity change from 0 to 2048 [ 494.849912][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17400'. [ 494.869893][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17400'. [ 494.893821][T15733] Alternate GPT is invalid, using primary GPT. [ 494.901095][T15733] loop2: p2 p3 p7 [ 494.978972][T15762] loop2: detected capacity change from 0 to 128 [ 495.170775][T15704] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 495.196741][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.196741][T16030] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 495.222893][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.222893][T16030] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 495.250637][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.250637][T16030] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 495.281498][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.281498][T16030] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 495.318650][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.318650][T16030] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 495.333747][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.333747][T16030] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 495.355685][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.355685][T16030] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 495.369849][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.369849][T16030] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 495.383535][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.383535][T16030] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 495.397683][T16030] kworker/u8:65: attempt to access beyond end of device [ 495.397683][T16030] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 495.424599][T15790] netlink: 'syz.2.17410': attribute type 7 has an invalid length. [ 495.459298][T15796] loop8: detected capacity change from 0 to 128 [ 495.473532][T16030] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.483646][T15790] netlink: 'syz.2.17410': attribute type 7 has an invalid length. [ 495.494641][T16030] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.505146][T16030] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.543376][T15809] loop8: detected capacity change from 0 to 512 [ 495.568925][T15809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.589193][T16030] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.609357][T15809] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.17420: corrupted inode contents [ 495.633159][T15809] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.17420: mark_inode_dirty error [ 495.674040][T15809] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.17420: corrupted inode contents [ 495.691425][T15836] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.17420: corrupted inode contents [ 495.704746][T15836] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.17420: mark_inode_dirty error [ 495.726774][T15836] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.17420: corrupted inode contents [ 495.741460][T15836] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.17420: mark_inode_dirty error [ 495.757147][T15836] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.17420: corrupted inode contents [ 495.769442][T15836] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.17420: mark_inode_dirty error [ 495.796610][T15809] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.17420: corrupted inode contents [ 495.836330][T15846] ip6gre1: entered allmulticast mode [ 495.848773][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.904227][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 495.904243][ T29] audit: type=1400 audit(495.884:35319): avc: denied { wake_alarm } for pid=15855 comm="syz.4.17437" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 495.988719][T15872] loop2: detected capacity change from 0 to 512 [ 495.995907][T15872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 496.019533][T15872] EXT4-fs (loop2): 1 truncate cleaned up [ 496.026870][T15872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.043392][ T29] audit: type=1326 audit(496.024:35320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.102359][ T29] audit: type=1326 audit(496.024:35321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.126169][ T29] audit: type=1326 audit(496.024:35322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.149742][ T29] audit: type=1326 audit(496.024:35323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.173241][ T29] audit: type=1326 audit(496.024:35324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.197025][ T29] audit: type=1326 audit(496.024:35325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.220399][ T29] audit: type=1326 audit(496.024:35326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.244144][ T29] audit: type=1326 audit(496.054:35327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.6.17442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 496.267458][ T29] audit: type=1400 audit(496.064:35328): avc: denied { remove_name } for pid=15871 comm="syz.2.17443" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 496.291780][T14162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.555850][T16009] bond0: Unable to set up delay as MII monitoring is disabled [ 496.604982][T16044] SELinux: failed to load policy [ 496.614908][T16046] netlink: 'syz.9.17470': attribute type 7 has an invalid length. [ 496.623562][T16046] netlink: 'syz.9.17470': attribute type 7 has an invalid length. [ 496.763921][T16072] netlink: 'syz.2.17482': attribute type 7 has an invalid length. [ 496.782627][T16072] netlink: 'syz.2.17482': attribute type 7 has an invalid length. [ 496.833286][T16091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.028719][T16122] xt_hashlimit: max too large, truncated to 1048576 [ 497.036281][T16126] macvtap0: entered promiscuous mode [ 497.041624][T16126] macvtap0: entered allmulticast mode [ 497.099093][T16138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.160505][T14162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.595104][T16237] syz.9.17542: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 497.610763][T16237] CPU: 1 UID: 0 PID: 16237 Comm: syz.9.17542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 497.610801][T16237] Tainted: [W]=WARN [ 497.610808][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.610883][T16237] Call Trace: [ 497.610891][T16237] [ 497.610910][T16237] __dump_stack+0x1d/0x30 [ 497.610941][T16237] dump_stack_lvl+0x95/0xd0 [ 497.610969][T16237] dump_stack+0x15/0x1b [ 497.611050][T16237] warn_alloc+0x12b/0x1a0 [ 497.611077][T16237] ? __schedule+0x85f/0xcd0 [ 497.611101][T16237] ? __rcu_read_unlock+0x4f/0x70 [ 497.611126][T16237] __vmalloc_node_range_noprof+0xa0/0x1310 [ 497.611197][T16237] ? __futex_wait+0x1fa/0x260 [ 497.611220][T16237] ? __pfx_futex_wake_mark+0x10/0x10 [ 497.611250][T16237] ? __rcu_read_unlock+0x4f/0x70 [ 497.611309][T16237] ? avc_has_perm_noaudit+0xab/0x130 [ 497.611337][T16237] vmalloc_user_noprof+0x7d/0xb0 [ 497.611368][T16237] ? xskq_create+0x80/0xe0 [ 497.611469][T16237] xskq_create+0x80/0xe0 [ 497.611503][T16237] xsk_init_queue+0x95/0xf0 [ 497.611583][T16237] xsk_setsockopt+0x3f5/0x640 [ 497.611666][T16237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 497.611726][T16237] __sys_setsockopt+0x184/0x200 [ 497.611752][T16237] __x64_sys_setsockopt+0x64/0x80 [ 497.611783][T16237] x64_sys_call+0x21d5/0x3000 [ 497.611833][T16237] do_syscall_64+0xca/0x2b0 [ 497.611876][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.611941][T16237] RIP: 0033:0x7f0b9a19f749 [ 497.611959][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.611980][T16237] RSP: 002b:00007f0b98bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 497.612005][T16237] RAX: ffffffffffffffda RBX: 00007f0b9a3f5fa0 RCX: 00007f0b9a19f749 [ 497.612019][T16237] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 497.612031][T16237] RBP: 00007f0b9a223f91 R08: 0000000000000004 R09: 0000000000000000 [ 497.612063][T16237] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.612095][T16237] R13: 00007f0b9a3f6038 R14: 00007f0b9a3f5fa0 R15: 00007ffe778d3e98 [ 497.612113][T16237] [ 497.612121][T16237] Mem-Info: [ 497.836806][T16237] active_anon:44380 inactive_anon:51 isolated_anon:0 [ 497.836806][T16237] active_file:17293 inactive_file:12872 isolated_file:0 [ 497.836806][T16237] unevictable:0 dirty:299 writeback:0 [ 497.836806][T16237] slab_reclaimable:2592 slab_unreclaimable:22744 [ 497.836806][T16237] mapped:28808 shmem:18380 pagetables:1767 [ 497.836806][T16237] sec_pagetables:0 bounce:0 [ 497.836806][T16237] kernel_misc_reclaimable:0 [ 497.836806][T16237] free:1810421 free_pcp:15676 free_cma:0 [ 497.883084][T16237] Node 0 active_anon:177520kB inactive_anon:204kB active_file:69172kB inactive_file:51488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115232kB dirty:1196kB writeback:0kB shmem:73520kB kernel_stack:5664kB pagetables:7068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 497.911308][T16237] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.942372][T16237] lowmem_reserve[]: 0 2880 7859 7859 [ 497.947934][T16237] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 497.980811][T16237] lowmem_reserve[]: 0 0 4978 4978 [ 497.986083][T16237] Node 0 Normal free:4280436kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:177520kB inactive_anon:204kB active_file:69172kB inactive_file:51488kB unevictable:0kB writepending:1196kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:59244kB local_pcp:28424kB free_cma:0kB [ 498.020720][T16237] lowmem_reserve[]: 0 0 0 0 [ 498.025489][T16237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 498.038330][T16237] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 498.054517][T16237] Node 0 Normal: 3405*4kB (UME) 2944*8kB (UME) 921*16kB (UM) 1488*32kB (UM) 921*64kB (UME) 705*128kB (UME) 487*256kB (UME) 341*512kB (UM) 275*1024kB (UME) 161*2048kB (UME) 762*4096kB (UM) = 4280452kB [ 498.074427][T16237] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 498.083864][T16237] 48552 total pagecache pages [ 498.088857][T16237] 65 pages in swap cache [ 498.093204][T16237] Free swap = 124372kB [ 498.097488][T16237] Total swap = 124996kB [ 498.101705][T16237] 2097051 pages RAM [ 498.105831][T16237] 0 pages HighMem/MovableOnly [ 498.110925][T16237] 81271 pages reserved [ 498.254707][T16259] macvtap1: entered promiscuous mode [ 498.260186][T16259] macvtap1: entered allmulticast mode [ 498.376472][T16294] __nla_validate_parse: 12 callbacks suppressed [ 498.376490][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17565'. [ 498.546852][T16342] set_capacity_and_notify: 1 callbacks suppressed [ 498.546872][T16342] loop8: detected capacity change from 0 to 128 [ 498.831603][T16387] netlink: 'syz.2.17581': attribute type 29 has an invalid length. [ 498.860553][T16393] netlink: 'syz.9.17584': attribute type 10 has an invalid length. [ 498.868742][T16393] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17584'. [ 498.878980][T16393] dummy0: entered promiscuous mode [ 498.884887][T16393] bridge0: port 3(dummy0) entered blocking state [ 498.891478][T16393] bridge0: port 3(dummy0) entered disabled state [ 498.898105][T16393] dummy0: entered allmulticast mode [ 498.904181][T16393] bridge0: port 3(dummy0) entered blocking state [ 498.910549][T16393] bridge0: port 3(dummy0) entered forwarding state [ 499.137986][T16425] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17594'. [ 499.148394][T16425] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17594'. [ 499.171710][T16427] xt_hashlimit: max too large, truncated to 1048576 [ 499.181643][T16427] netlink: 16 bytes leftover after parsing attributes in process `syz.9.17595'. [ 499.581811][T16440] loop8: detected capacity change from 0 to 1024 [ 499.613821][T16440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.655475][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.688727][T16451] loop8: detected capacity change from 0 to 512 [ 499.713116][T16451] EXT4-fs (loop8): 1 truncate cleaned up [ 499.719743][T16451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.739822][T16451] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.17602: invalid indirect mapped block 234881024 (level 0) [ 499.781102][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.847474][T16474] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17612'. [ 499.908641][T16485] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17615'. [ 500.092111][T16513] xt_hashlimit: max too large, truncated to 1048576 [ 500.116435][T16513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17627'. [ 500.230655][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17635'. [ 500.298700][T16548] netlink: 14 bytes leftover after parsing attributes in process `syz.9.17638'. [ 500.314008][T16548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.328538][T16548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.340022][T16548] bond0 (unregistering): Released all slaves [ 500.340235][T16554] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 500.492350][T16608] xt_hashlimit: max too large, truncated to 1048576 [ 500.766062][T16645] xt_hashlimit: max too large, truncated to 1048576 [ 500.779362][ T2247] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.789959][ T2247] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.798988][ T2247] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.808031][ T2247] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.822372][T16650] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 500.831542][T16650] SELinux: failed to load policy [ 500.851885][T16652] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 500.998621][T16671] loop8: detected capacity change from 0 to 256 [ 501.589194][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 501.589211][ T29] audit: type=1400 audit(501.574:35528): avc: denied { setopt } for pid=16730 comm="syz.9.17689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 501.684573][ T29] audit: type=1326 audit(501.664:35529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.708472][ T29] audit: type=1326 audit(501.694:35530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.732193][ T29] audit: type=1326 audit(501.694:35531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.755813][ T29] audit: type=1326 audit(501.694:35532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.779664][ T29] audit: type=1326 audit(501.694:35533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.813114][T16747] netlink: 'syz.8.17697': attribute type 10 has an invalid length. [ 501.827749][T16747] dummy0: entered promiscuous mode [ 501.833696][T16747] bridge0: port 4(dummy0) entered blocking state [ 501.840675][T16747] bridge0: port 4(dummy0) entered disabled state [ 501.847402][T16747] dummy0: entered allmulticast mode [ 501.855037][T16747] bridge0: port 4(dummy0) entered blocking state [ 501.861595][T16747] bridge0: port 4(dummy0) entered forwarding state [ 501.862789][ T29] audit: type=1326 audit(501.694:35534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.891665][ T29] audit: type=1326 audit(501.694:35535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.914948][ T29] audit: type=1326 audit(501.694:35536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 501.939860][ T29] audit: type=1326 audit(501.694:35537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.6.17696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d578f749 code=0x7ffc0000 [ 502.230791][T16781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.244539][T16781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.267320][T16781] bond0 (unregistering): Released all slaves [ 503.314813][T16899] bond0 (unregistering): Released all slaves [ 503.410149][T16930] loop8: detected capacity change from 0 to 512 [ 503.481008][T16948] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 503.543360][T16961] __nla_validate_parse: 11 callbacks suppressed [ 503.543397][T16961] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17770'. [ 503.565115][T16961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.581381][T16961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.594300][T16961] bond0 (unregistering): Released all slaves [ 503.645954][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17766'. [ 503.721139][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.9.17773'. [ 503.740071][T17019] loop8: detected capacity change from 0 to 512 [ 503.755082][T17019] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.17774: iget: bad extra_isize 90 (inode size 256) [ 503.771910][T17019] EXT4-fs (loop8): Remounting filesystem read-only [ 503.801133][T17019] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 503.811525][T17019] EXT4-fs (loop8): 1 orphan inode deleted [ 503.821214][T17019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.827663][T17033] ip6gre1: entered promiscuous mode [ 503.839143][T17033] ip6gre1: entered allmulticast mode [ 503.881471][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.959711][ T3485] kernel read not supported for file /2739/coredump_filter (pid: 3485 comm: kworker/1:7) [ 503.997938][T17066] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17789'. [ 504.193447][T17092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17092 comm=syz.9.17805 [ 504.244496][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17807'. [ 504.577132][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17822'. [ 504.994306][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17837'. [ 505.003720][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17837'. [ 505.053532][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17837'. [ 505.062971][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17837'. [ 505.295099][T17202] loop8: detected capacity change from 0 to 128 [ 505.302530][T17202] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 505.315464][T17202] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 505.318148][T17205] bridge0: port 3(dummy0) entered disabled state [ 505.331881][T17205] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.339217][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.351335][T17205] bridge0: entered allmulticast mode [ 505.450242][T17226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17226 comm=syz.9.17857 [ 506.229879][T17302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.240065][T17302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.349111][T17311] netlink: 'syz.8.17894': attribute type 3 has an invalid length. [ 506.553089][T17339] loop8: detected capacity change from 0 to 512 [ 506.560771][T17339] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 506.577344][T17339] EXT4-fs (loop8): 1 truncate cleaned up [ 506.583745][T17339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.596659][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 506.596676][ T29] audit: type=1400 audit(506.584:35744): avc: denied { mount } for pid=17324 comm="syz.8.17898" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 506.628233][ T29] audit: type=1400 audit(506.584:35745): avc: denied { add_name } for pid=17324 comm="syz.8.17898" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.649035][ T29] audit: type=1400 audit(506.584:35746): avc: denied { create } for pid=17324 comm="syz.8.17898" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 506.669148][ T29] audit: type=1400 audit(506.584:35747): avc: denied { write open } for pid=17324 comm="syz.8.17898" path="/836/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 506.714823][ T29] audit: type=1400 audit(506.654:35748): avc: denied { unmount } for pid=4925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 506.719852][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.780065][T17356] loop8: detected capacity change from 0 to 512 [ 506.799530][T17356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.825570][ T29] audit: type=1400 audit(506.804:35749): avc: denied { remount } for pid=17353 comm="wg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 506.844787][T17356] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 506.857446][ T29] audit: type=1400 audit(506.844:35750): avc: denied { sys_module } for pid=17361 comm="syz.9.17909" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.890110][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.910402][ T29] audit: type=1400 audit(506.894:35751): avc: denied { create } for pid=17369 comm="syz.6.17911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.931431][ T29] audit: type=1400 audit(506.904:35752): avc: denied { write } for pid=17369 comm="syz.6.17911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.951387][ T29] audit: type=1400 audit(506.904:35753): avc: denied { nlmsg_write } for pid=17369 comm="syz.6.17911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 507.181378][T17397] vlan3: entered allmulticast mode [ 507.186879][T17397] geneve1: entered allmulticast mode [ 507.198914][T17400] xt_hashlimit: max too large, truncated to 1048576 [ 507.527407][T17466] netlink: 'syz.8.17947': attribute type 14 has an invalid length. [ 507.535613][T17466] netlink: 'syz.8.17947': attribute type 14 has an invalid length. [ 507.546414][T17468] serio: Serial port ptm0 [ 507.579479][T17473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.648964][T17482] tipc: Started in network mode [ 507.653976][T17482] tipc: Node identity ac14140f, cluster identity 4711 [ 507.665547][T17482] tipc: New replicast peer: 255.255.255.255 [ 507.665927][T17486] sd 0:0:1:0: device reset [ 507.671954][T17482] tipc: Enabled bearer , priority 10 [ 507.724604][T17497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17497 comm=syz.6.17958 [ 508.666318][ T9] tipc: Node number set to 2886997007 [ 508.685424][T17545] hub 6-0:1.0: USB hub found [ 508.701693][T17545] hub 6-0:1.0: 8 ports detected [ 508.727957][T17548] program syz.8.17981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.890050][T17560] openvswitch: netlink: Missing key (keys=40, expected=80) [ 508.922592][T17564] __nla_validate_parse: 7 callbacks suppressed [ 508.922611][T17564] netlink: 9 bytes leftover after parsing attributes in process `syz.9.17987'. [ 508.941575][T17564] netlink: 9 bytes leftover after parsing attributes in process `syz.9.17987'. [ 508.992700][T17569] tipc: Enabling of bearer rejected, failed to enable media [ 509.079821][T17583] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 509.192907][T17606] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 509.232408][T17611] xt_hashlimit: max too large, truncated to 1048576 [ 509.240256][T17611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.332440][T17616] cgroup: fork rejected by pids controller in /syz9 [ 509.340778][T17650] netlink: 'syz.6.18016': attribute type 3 has an invalid length. [ 509.537056][T18849] netlink: 'syz.8.18025': attribute type 29 has an invalid length. [ 509.611783][T18888] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18888 comm=syz.9.18030 [ 509.613000][T18886] can0: slcan on ttyS3. [ 509.624784][T18888] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18888 comm=syz.9.18030 [ 509.676433][T18892] can0 (unregistered): slcan off ttyS3. [ 509.719670][T18906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18035'. [ 509.818355][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18042'. [ 509.866777][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18045'. [ 509.876329][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18045'. [ 509.885647][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18045'. [ 509.901073][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18045'. [ 509.911088][T18930] netlink: 'syz.8.18045': attribute type 6 has an invalid length. [ 510.048276][T18947] netlink: 16 bytes leftover after parsing attributes in process `syz.9.18052'. [ 510.210641][T18967] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.329327][T18985] netlink: 'syz.8.18079': attribute type 1 has an invalid length. [ 510.337460][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.354469][T18985] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.362145][T18985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.406616][T18993] netlink: 'syz.4.18073': attribute type 29 has an invalid length. [ 510.500054][T19008] rdma_rxe: rxe_newlink: failed to add lo [ 510.554341][T19017] netlink: 'syz.6.18084': attribute type 6 has an invalid length. [ 510.700568][T19034] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 510.708439][T19034] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 510.767991][T19047] netlink: 'syz.4.18097': attribute type 6 has an invalid length. [ 510.938843][T19069] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 510.946789][T19068] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.954685][T19068] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.961959][T19068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.124113][T19086] loop8: detected capacity change from 0 to 512 [ 511.146387][T19086] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 511.177512][T19086] EXT4-fs (loop8): 1 truncate cleaned up [ 511.183660][T19086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.217623][T19086] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.427207][T19110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 511.438829][T19107] IPVS: stopping master sync thread 19110 ... [ 511.623042][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 511.623062][ T29] audit: type=1326 audit(511.604:35952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.18133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b019ef749 code=0x7ffc0000 [ 511.689064][ T29] audit: type=1326 audit(511.604:35953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.18133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b019ef749 code=0x7ffc0000 [ 511.713158][ T29] audit: type=1326 audit(511.604:35954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.18133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b019ef749 code=0x7ffc0000 [ 511.737242][ T29] audit: type=1326 audit(511.644:35955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.18133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b019ef749 code=0x7ffc0000 [ 511.760857][ T29] audit: type=1326 audit(511.644:35956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.18133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f6b019ef749 code=0x7ffc0000 [ 511.775318][T19126] rdma_rxe: rxe_newlink: failed to add lo [ 511.784463][ T29] audit: type=1326 audit(511.644:35957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.18133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b019ef749 code=0x7ffc0000 [ 511.831623][T19128] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 511.892485][T19136] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 511.904993][ T29] audit: type=1326 audit(511.884:35958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19135 comm="syz.9.18148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 511.909353][T19136] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 511.965857][ T29] audit: type=1326 audit(511.914:35959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19135 comm="syz.9.18148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 511.989691][ T29] audit: type=1326 audit(511.924:35960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19135 comm="syz.9.18148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 512.013703][ T29] audit: type=1326 audit(511.924:35961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19135 comm="syz.9.18148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 512.084977][T19149] 9p: Bad value for 'rfdno' [ 512.155954][T19161] loop8: detected capacity change from 0 to 512 [ 512.167813][T19161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.202660][T19161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.233590][T19178] validate_nla: 1 callbacks suppressed [ 512.233675][T19178] netlink: 'syz.9.18155': attribute type 6 has an invalid length. [ 512.247157][T19178] netlink: 'syz.9.18155': attribute type 5 has an invalid length. [ 512.273092][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.298920][T19184] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 512.367813][T19192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19192 comm=syz.2.18161 [ 512.612039][T19236] loop8: detected capacity change from 0 to 512 [ 512.619611][T19236] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 512.631866][T19236] EXT4-fs (loop8): 1 truncate cleaned up [ 512.638482][T19236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.787172][T15991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.880299][T15991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.946999][T15991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.048151][T15991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.194218][T15991] batadv1: left allmulticast mode [ 513.199377][T15991] batadv1: left promiscuous mode [ 513.204634][T15991] bridge0: port 3(batadv1) entered disabled state [ 513.233383][T15991] bridge_slave_1: left allmulticast mode [ 513.239461][T15991] bridge_slave_1: left promiscuous mode [ 513.245287][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.260576][T15991] bridge_slave_0: left allmulticast mode [ 513.266491][T15991] bridge_slave_0: left promiscuous mode [ 513.272392][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.500476][T15991] tipc: Disabling bearer [ 513.505515][T15991] tipc: Left network mode [ 513.528741][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.592681][T15991] hsr_slave_0: left promiscuous mode [ 513.607360][T15991] hsr_slave_1: left promiscuous mode [ 513.624816][T15991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.632605][T15991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.641983][T19370] netlink: 'syz.9.18202': attribute type 3 has an invalid length. [ 513.649947][T19370] netlink: 'syz.9.18202': attribute type 1 has an invalid length. [ 513.682590][T15991] veth1_to_hsr: left promiscuous mode [ 513.712986][T15991] veth1_vlan: left promiscuous mode [ 513.719706][T15991] veth0_vlan: left promiscuous mode [ 513.787765][T15991] team0 (unregistering): Port device team_slave_1 removed [ 513.801239][T15991] team0 (unregistering): Port device team_slave_0 removed [ 513.882445][T19260] chnl_net:caif_netlink_parms(): no params data found [ 513.948004][T19260] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.955581][T19260] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.969973][T19260] bridge_slave_0: entered allmulticast mode [ 513.977327][T19260] bridge_slave_0: entered promiscuous mode [ 513.984393][T19260] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.991604][T19260] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.999522][T19260] bridge_slave_1: entered allmulticast mode [ 514.007076][T19260] bridge_slave_1: entered promiscuous mode [ 514.056898][T19260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.069318][T19260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.093167][T19260] team0: Port device team_slave_0 added [ 514.100556][T19260] team0: Port device team_slave_1 added [ 514.160515][T19260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.167605][T19260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.194067][T19260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.221530][T19260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.228743][T19260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.255136][T19260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.318473][T19260] hsr_slave_0: entered promiscuous mode [ 514.324934][T19260] hsr_slave_1: entered promiscuous mode [ 514.331546][T19260] debugfs: 'hsr0' already exists in 'hsr' [ 514.337665][T19260] Cannot create hsr debugfs directory [ 514.349014][T15991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.359610][T15991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.433352][T15991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.445017][T15991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.487046][T19376] chnl_net:caif_netlink_parms(): no params data found [ 514.499583][T15991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.510462][T15991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.561642][T15991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.572679][T15991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.614983][T19376] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.622605][T19376] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.630243][T19376] bridge_slave_0: entered allmulticast mode [ 514.638719][T19376] bridge_slave_0: entered promiscuous mode [ 514.672305][T15991] bridge_slave_1: left allmulticast mode [ 514.678540][T15991] bridge_slave_1: left promiscuous mode [ 514.684331][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.695212][T15991] bridge_slave_0: left allmulticast mode [ 514.701714][T15991] bridge_slave_0: left promiscuous mode [ 514.708131][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.828601][T15991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.839390][T15991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.849470][T15991] bond0 (unregistering): Released all slaves [ 514.859821][T19376] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.867333][T19376] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.875073][T19376] bridge_slave_1: entered allmulticast mode [ 514.882397][T19376] bridge_slave_1: entered promiscuous mode [ 514.935897][T19376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.948854][T15991] hsr_slave_0: left promiscuous mode [ 514.955361][T15991] hsr_slave_1: left promiscuous mode [ 514.962531][T15991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.970284][T15991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.979110][T15991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.987085][T15991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.998571][T15991] veth1_macvtap: left promiscuous mode [ 515.004337][T15991] veth0_macvtap: left promiscuous mode [ 515.010031][T15991] veth1_vlan: left promiscuous mode [ 515.015640][T15991] veth0_vlan: left promiscuous mode [ 515.083239][T15991] team0 (unregistering): Port device team_slave_1 removed [ 515.093962][T15991] team0 (unregistering): Port device team_slave_0 removed [ 515.131987][T19376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.158388][T19376] team0: Port device team_slave_0 added [ 515.165672][T19376] team0: Port device team_slave_1 added [ 515.189637][T19376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.196918][T19376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.224424][T19376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.238746][T19376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.245885][T19376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.272200][T19376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.325788][T19376] hsr_slave_0: entered promiscuous mode [ 515.332196][T19376] hsr_slave_1: entered promiscuous mode [ 515.391846][T19260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 515.404494][T19260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 515.419217][T19260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 515.440268][T19260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 515.486893][T19260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.501038][T19260] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.510407][T16007] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.518104][T16007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.529378][T16007] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.537046][T16007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.603078][T19260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.689968][T19376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 515.699305][T19376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 515.709636][T19376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 515.718941][T19376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 515.740234][T19260] veth0_vlan: entered promiscuous mode [ 515.752301][T19260] veth1_vlan: entered promiscuous mode [ 515.776945][T19260] veth0_macvtap: entered promiscuous mode [ 515.789101][T19260] veth1_macvtap: entered promiscuous mode [ 515.803741][T19376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.812587][T19260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.825685][T19260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.841805][T15991] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.851068][T15991] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.860665][T15991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.871245][T19376] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.878668][T15991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.894361][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.901689][T15991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.914999][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.922188][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.009718][T19376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.110425][T20128] __nla_validate_parse: 22 callbacks suppressed [ 516.110452][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18235'. [ 516.126590][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18235'. [ 516.157825][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18235'. [ 516.167410][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18235'. [ 516.196063][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18235'. [ 516.205429][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18235'. [ 516.246907][T19376] veth0_vlan: entered promiscuous mode [ 516.255339][T19376] veth1_vlan: entered promiscuous mode [ 516.290426][T19376] veth0_macvtap: entered promiscuous mode [ 516.299894][T19376] veth1_macvtap: entered promiscuous mode [ 516.321313][T19376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.333712][T19376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.348664][ T899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.370135][ T899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.396765][ T899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.417317][ T899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.481387][T20172] netlink: 140 bytes leftover after parsing attributes in process `syz.5.18254'. [ 516.491683][T20172] netlink: 140 bytes leftover after parsing attributes in process `syz.5.18254'. [ 516.593404][T20187] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 516.712506][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 516.712563][ T29] audit: type=1326 audit(516.694:36112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 516.744151][T20202] loop5: detected capacity change from 0 to 512 [ 516.749023][ T29] audit: type=1326 audit(516.704:36113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 516.752968][T20202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 516.774199][ T29] audit: type=1326 audit(516.704:36114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 516.774308][ T29] audit: type=1326 audit(516.704:36115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 516.774332][ T29] audit: type=1326 audit(516.704:36116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 516.855617][ T29] audit: type=1326 audit(516.704:36117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8da40f783 code=0x7ffc0000 [ 516.870720][T20208] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18265'. [ 516.879711][ T29] audit: type=1326 audit(516.704:36118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd8da40e1ff code=0x7ffc0000 [ 516.879747][ T29] audit: type=1326 audit(516.714:36119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd8da40f7d7 code=0x7ffc0000 [ 516.936239][ T29] audit: type=1326 audit(516.724:36120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8da40df90 code=0x7ffc0000 [ 516.959543][ T29] audit: type=1326 audit(516.724:36121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20201 comm="syz.5.18264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8da40f34b code=0x7ffc0000 [ 516.991322][T20202] EXT4-fs (loop5): 1 truncate cleaned up [ 516.998001][T20202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.067735][T20216] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 517.099647][T19260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.219928][T20240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18278'. [ 517.254644][T20248] netlink: 'syz.5.18280': attribute type 5 has an invalid length. [ 517.333472][T20241] cgroup: fork rejected by pids controller in /syz7 [ 517.613482][T20290] netlink: 'syz.9.18297': attribute type 14 has an invalid length. [ 517.629723][T20290] netlink: 'syz.9.18297': attribute type 14 has an invalid length. [ 518.101229][T20329] vlan2: entered allmulticast mode [ 518.106603][T20329] geneve1: entered allmulticast mode [ 518.247497][T20339] loop5: detected capacity change from 0 to 128 [ 518.263866][T20339] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 518.274861][T20344] loop8: detected capacity change from 0 to 1024 [ 518.283843][T20344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.291438][T20344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.304916][T20344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.331911][T19260] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.363572][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.739707][T20380] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 518.909905][T20405] sd 0:0:1:0: device reset [ 518.961148][T20408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.970138][T20408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.017372][T20416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.121510][T20430] vlan0: entered allmulticast mode [ 519.126719][T20430] bridge_slave_0: entered allmulticast mode [ 519.144194][T20437] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 519.190427][T20444] xt_hashlimit: max too large, truncated to 1048576 [ 519.252393][T16013] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.509657][T20460] chnl_net:caif_netlink_parms(): no params data found [ 519.517496][T20580] xt_hashlimit: max too large, truncated to 1048576 [ 519.561321][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.568968][T20460] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.576741][T20460] bridge_slave_0: entered allmulticast mode [ 519.583460][T20460] bridge_slave_0: entered promiscuous mode [ 519.590752][T20460] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.598142][T20460] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.605806][T20460] bridge_slave_1: entered allmulticast mode [ 519.612637][T20460] bridge_slave_1: entered promiscuous mode [ 519.631618][T20460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.642776][T20460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.663360][T20460] team0: Port device team_slave_0 added [ 519.670168][T20460] team0: Port device team_slave_1 added [ 519.687473][T20460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.694663][T20460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.721110][T20460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.733247][T20460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.740600][T20460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.767208][T20460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.800027][T20460] hsr_slave_0: entered promiscuous mode [ 519.807723][T20460] hsr_slave_1: entered promiscuous mode [ 519.813799][T20460] debugfs: 'hsr0' already exists in 'hsr' [ 519.819781][T20460] Cannot create hsr debugfs directory [ 519.853289][T20742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.469225][T16013] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.528721][T16013] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.609547][T16013] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.673164][T16013] bridge_slave_1: left allmulticast mode [ 520.679035][T16013] bridge_slave_1: left promiscuous mode [ 520.684877][T16013] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.692848][T16013] bridge_slave_0: left allmulticast mode [ 520.698528][T16013] bridge_slave_0: left promiscuous mode [ 520.704260][T16013] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.769643][T16013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.779986][T16013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.790278][T16013] bond0 (unregistering): Released all slaves [ 520.852864][T16013] hsr_slave_0: left promiscuous mode [ 520.858964][T16013] hsr_slave_1: left promiscuous mode [ 520.864712][T16013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.872210][T16013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.880004][T16013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.887872][T16013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.900033][T16013] veth1_macvtap: left promiscuous mode [ 520.905585][T16013] veth0_macvtap: left promiscuous mode [ 520.911227][T16013] veth1_vlan: left promiscuous mode [ 520.916666][T16013] veth0_vlan: left promiscuous mode [ 520.979614][T16013] team0 (unregistering): Port device team_slave_1 removed [ 520.989041][T16013] team0 (unregistering): Port device team_slave_0 removed [ 521.142355][T20460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 521.151120][T20460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 521.159462][T20460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 521.168460][T20460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 521.200695][T20460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.211953][T20460] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.222013][T16018] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.229142][T16018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.240088][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.247218][T15978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.311559][T20460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.411702][T20460] veth0_vlan: entered promiscuous mode [ 521.419620][T20460] veth1_vlan: entered promiscuous mode [ 521.437304][T20460] veth0_macvtap: entered promiscuous mode [ 521.445135][T20460] veth1_macvtap: entered promiscuous mode [ 521.455468][T20460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.467039][T20460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.477903][ T899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.489618][ T899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.501374][ T899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.510911][ T899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.574000][T20905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.660727][T20918] openvswitch: netlink: Missing key (keys=40, expected=80) [ 521.688456][T20922] loop5: detected capacity change from 0 to 512 [ 521.713885][T20922] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.752301][T20922] EXT4-fs (loop5): mount failed [ 521.792520][T20942] vlan2: entered allmulticast mode [ 521.804604][T20942] dummy0: entered allmulticast mode [ 521.892064][T20964] __nla_validate_parse: 12 callbacks suppressed [ 521.892147][T20964] netlink: 256 bytes leftover after parsing attributes in process `syz.7.18411'. [ 522.025627][T20985] loop7: detected capacity change from 0 to 764 [ 522.046884][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 522.046901][ T29] audit: type=1400 audit(522.034:36243): avc: denied { mount } for pid=20984 comm="syz.7.18417" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 522.083056][T20985] Symlink component flag not implemented [ 522.089147][T20985] Symlink component flag not implemented (116) [ 522.131321][ T29] audit: type=1400 audit(522.114:36244): avc: denied { unmount } for pid=20460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 522.182742][ T29] audit: type=1326 audit(522.164:36245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.266299][ T29] audit: type=1326 audit(522.194:36246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.289688][ T29] audit: type=1326 audit(522.194:36247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.313049][ T29] audit: type=1326 audit(522.194:36248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.336726][ T29] audit: type=1326 audit(522.194:36249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.360855][ T29] audit: type=1326 audit(522.194:36250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.384206][ T29] audit: type=1326 audit(522.194:36251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.407450][ T29] audit: type=1326 audit(522.194:36252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.9.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 522.736684][T21024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 522.748291][T21021] IPVS: stopping master sync thread 21024 ... [ 522.828653][T21036] program syz.6.18435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.129292][T21069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21069 comm=syz.9.18443 [ 523.172334][T21073] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 523.586882][T21118] loop5: detected capacity change from 0 to 1024 [ 523.597603][T21118] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 523.609106][T21118] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 523.630985][T21118] JBD2: no valid journal superblock found [ 523.637015][T21118] EXT4-fs (loop5): Could not load journal inode [ 523.649459][T21118] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 523.742185][T21154] loop8: detected capacity change from 0 to 1024 [ 523.759479][T21154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.792414][T21154] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.18467: missing EA_INODE flag [ 523.806349][T21154] EXT4-fs (loop8): Remounting filesystem read-only [ 523.824842][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.031490][T21189] vlan0: entered promiscuous mode [ 524.036610][T21189] bridge0: entered promiscuous mode [ 524.041927][T21189] vlan0: entered allmulticast mode [ 524.047105][T21189] bridge0: entered allmulticast mode [ 524.712643][T21268] bridge1: entered promiscuous mode [ 524.718233][T21268] bridge1: entered allmulticast mode [ 524.727871][T21268] team0: Port device bridge1 added [ 524.736924][T21268] bridge0: port 3(team0) entered blocking state [ 524.743267][T21268] bridge0: port 3(team0) entered disabled state [ 524.750419][T21268] team0: entered allmulticast mode [ 524.755604][T21268] team_slave_0: entered allmulticast mode [ 524.761842][T21268] team_slave_1: entered allmulticast mode [ 524.769631][T21268] team0: entered promiscuous mode [ 524.774980][T21268] team_slave_0: entered promiscuous mode [ 524.780937][T21268] team_slave_1: entered promiscuous mode [ 524.787293][T21268] bridge0: port 3(team0) entered blocking state [ 524.793670][T21268] bridge0: port 3(team0) entered forwarding state [ 524.800932][T21276] netlink: 96 bytes leftover after parsing attributes in process `ÿ'. [ 525.130719][T21316] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18514'. [ 525.231558][T21339] netlink: 216 bytes leftover after parsing attributes in process `syz.6.18520'. [ 525.241508][T21339] netlink: 40 bytes leftover after parsing attributes in process `syz.6.18520'. [ 525.323250][T21350] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.18526'. [ 525.333346][T21350] netlink: zone id is out of range [ 525.338574][T21350] netlink: zone id is out of range [ 525.344049][T21350] netlink: zone id is out of range [ 525.362927][T21350] netlink: set zone limit has 8 unknown bytes [ 525.390240][T21357] netlink: 332 bytes leftover after parsing attributes in process `syz.9.18529'. [ 525.693973][T21375] xt_l2tp: v2 tid > 0xffff: 37482740 [ 525.782813][T21400] netlink: 'syz.5.18546': attribute type 1 has an invalid length. [ 525.876113][T21423] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 525.922561][T21431] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.18560'. [ 525.932568][T21431] netlink: zone id is out of range [ 525.932583][T21431] netlink: zone id is out of range [ 525.932992][T21431] netlink: zone id is out of range [ 525.933469][T21431] netlink: zone id is out of range [ 525.951911][T21431] netlink: set zone limit has 8 unknown bytes [ 526.003416][T21458] loop8: detected capacity change from 0 to 512 [ 526.013340][T21458] EXT4-fs (loop8): orphan cleanup on readonly fs [ 526.019892][T21458] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 526.028611][T21458] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 526.043977][T21458] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.18565: attempt to clear invalid blocks 2 len 1 [ 526.058455][T21458] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.18565: invalid indirect mapped block 1819239214 (level 0) [ 526.062277][T21466] tipc: Enabled bearer , priority 0 [ 526.073375][T21458] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.18565: invalid indirect mapped block 1819239214 (level 1) [ 526.094265][T21458] EXT4-fs (loop8): 1 truncate cleaned up [ 526.100963][T21458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.101733][T21466] tipc: Disabling bearer [ 526.119717][T21458] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 526.130375][T21458] EXT4-fs error (device loop8): __ext4_remount:6789: comm syz.8.18565: Abort forced by user [ 526.140808][T21458] EXT4-fs (loop8): Remounting filesystem read-only [ 526.147543][T21458] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 526.165379][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.412711][T21512] loop8: detected capacity change from 0 to 512 [ 526.432268][T21512] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 526.443337][T21512] EXT4-fs (loop8): orphan cleanup on readonly fs [ 526.456780][T21512] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 526.473366][T21512] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 526.482309][T21512] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.18586: bg 0: block 40: padding at end of block bitmap is not set [ 526.500693][T21512] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 526.520038][T21512] EXT4-fs (loop8): 1 truncate cleaned up [ 526.537279][T21512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.591166][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.632477][T21545] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.18601'. [ 526.682725][T21542] SELinux: security_context_str_to_sid (sys) failed with errno=-22 [ 526.699368][T21555] netlink: 'syz.7.18605': attribute type 9 has an invalid length. [ 526.887953][T21581] bond0 (unregistering): Released all slaves [ 526.914312][T21570] __nla_validate_parse: 2 callbacks suppressed [ 526.914331][T21570] netlink: 14 bytes leftover after parsing attributes in process `syz.8.18614'. [ 526.946636][ T1052] kernel read not supported for file 6903/task/6904/auxv (pid: 1052 comm: kworker/1:2) [ 526.956968][T21550] loop5: detected capacity change from 0 to 32768 [ 526.988335][T21550] loop5: p1 p3 < > [ 526.998541][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18621'. [ 527.007688][T21658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18621'. [ 527.046937][T21674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 527.056119][T21658] wireguard0: entered promiscuous mode [ 527.061947][T21658] wireguard0: entered allmulticast mode [ 527.077675][T21675] batadv_slave_1: entered promiscuous mode [ 527.094260][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 527.094279][ T29] audit: type=1326 audit(527.074:36378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.138061][T21663] batadv_slave_1: left promiscuous mode [ 527.151355][ T29] audit: type=1326 audit(527.074:36379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.175539][ T29] audit: type=1326 audit(527.074:36380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.201237][ T29] audit: type=1326 audit(527.074:36381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.225023][ T29] audit: type=1326 audit(527.114:36382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.248840][ T29] audit: type=1326 audit(527.114:36383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.272369][ T29] audit: type=1400 audit(527.164:36384): avc: denied { watch } for pid=21678 comm="syz.7.18627" path="/52" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 527.295402][ T29] audit: type=1326 audit(527.284:36385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.318921][ T29] audit: type=1326 audit(527.284:36386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.342355][ T29] audit: type=1326 audit(527.284:36387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21676 comm="syz.8.18626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 527.485678][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18637'. [ 527.507648][T21719] 9p: Bad value for 'rfdno' [ 527.542265][T21728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18643'. [ 527.551657][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18643'. [ 527.560821][T21728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18643'. [ 527.570581][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18643'. [ 527.579830][T21728] netlink: 'syz.5.18643': attribute type 6 has an invalid length. [ 527.669331][T21743] gretap1: entered promiscuous mode [ 528.292841][T21791] netlink: 80 bytes leftover after parsing attributes in process `syz.5.18667'. [ 528.328206][T21794] loop8: detected capacity change from 0 to 512 [ 528.363078][T21794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.412585][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.458246][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18673'. [ 528.821396][T21901] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 528.830822][T21901] vhci_hcd vhci_hcd.2: invalid port number 96 [ 528.837450][T21901] vhci_hcd vhci_hcd.2: default hub control req: 030b vfffa i0060 l0 [ 528.847138][T21908] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 528.854592][T21908] vhci_hcd vhci_hcd.2: invalid port number 96 [ 528.860749][T21908] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 528.874692][T21914] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 528.891328][T21918] loop8: detected capacity change from 0 to 164 [ 528.905610][T21918] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 528.929009][T21918] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 528.951391][T21918] Symlink component flag not implemented [ 528.957238][T21918] Symlink component flag not implemented [ 528.973717][T21931] serio: Serial port ptm0 [ 529.043269][T21945] program syz.8.18722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.052839][T21945] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 529.157708][T21931] serio: Serial port ptm0 [ 529.367479][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1 [ 529.375368][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.382913][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.390864][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.398558][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.406066][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.425958][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.433769][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.441695][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x2 [ 529.449261][ T3512] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 529.462661][ T3512] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz0] on syz1 [ 529.510562][T22023] loop8: detected capacity change from 0 to 512 [ 529.539199][T22023] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 529.663259][T22044] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 529.674807][T22044] vhci_hcd vhci_hcd.2: invalid port number 96 [ 529.681697][T22044] vhci_hcd vhci_hcd.2: default hub control req: 030b vfffa i0060 l0 [ 529.697888][T22055] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 529.762859][T22066] loop5: detected capacity change from 0 to 164 [ 529.772303][T22066] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 529.793159][T22066] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 529.826332][T22066] Symlink component flag not implemented [ 529.832338][T22066] Symlink component flag not implemented [ 529.876913][T22086] program syz.7.18780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.901339][T22086] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 529.943516][T22101] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 529.998844][T22107] program syz.6.18801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.037168][T22109] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 530.048162][T22107] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 530.057076][T22109] vhci_hcd vhci_hcd.2: invalid port number 96 [ 530.063424][T22109] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 530.183231][T22143] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 530.192198][T22146] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 530.217756][ T3512] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz0] on syz1 [ 530.252143][T22143] vhci_hcd vhci_hcd.2: invalid port number 96 [ 530.258342][T22143] vhci_hcd vhci_hcd.2: default hub control req: 030b vfffa i0060 l0 [ 530.289216][T22161] loop5: detected capacity change from 0 to 512 [ 530.309340][T22161] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 530.323603][T22161] EXT4-fs (loop5): orphan cleanup on readonly fs [ 530.337858][T22174] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 530.345857][T22161] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.18812: corrupted inode contents [ 530.361398][T22161] EXT4-fs (loop5): Remounting filesystem read-only [ 530.368302][T22161] EXT4-fs (loop5): 1 truncate cleaned up [ 530.374119][T16018] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 530.385203][T16018] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 530.404136][T22180] netlink: 'syz.7.18820': attribute type 5 has an invalid length. [ 530.414973][T16018] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 530.429338][T22161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.460444][T19260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.531140][ T3512] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.00 Device [syz0] on syz1 [ 530.655652][T22218] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 530.739951][T22231] loop7: detected capacity change from 0 to 512 [ 530.761399][T22231] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 530.778568][T22231] EXT4-fs (loop7): orphan cleanup on readonly fs [ 530.797223][T22231] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.18835: corrupted inode contents [ 530.813445][T22231] EXT4-fs (loop7): Remounting filesystem read-only [ 530.823260][T22231] EXT4-fs (loop7): 1 truncate cleaned up [ 530.829549][T16018] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 530.840581][T16018] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 530.869992][T16018] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 530.881933][T22231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.913335][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.976532][T22252] loop5: detected capacity change from 0 to 512 [ 531.016730][T22252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.050408][T19260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.076393][T22267] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 531.253866][T22300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.264891][T16013] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.273898][T22304] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 533.130065][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 533.130084][ T29] audit: type=1326 audit(533.119:36707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.159866][ T29] audit: type=1326 audit(533.119:36708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.223486][ T29] audit: type=1326 audit(533.119:36709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.246871][ T29] audit: type=1326 audit(533.119:36710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.270280][ T29] audit: type=1326 audit(533.119:36711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.277099][T22376] lo speed is unknown, defaulting to 1000 [ 533.293700][ T29] audit: type=1326 audit(533.119:36712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.300823][T22376] lo speed is unknown, defaulting to 1000 [ 533.323131][ T29] audit: type=1326 audit(533.119:36713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.330182][T22376] lo speed is unknown, defaulting to 1000 [ 533.352563][ T29] audit: type=1326 audit(533.119:36714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.361101][T22376] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 533.381623][ T29] audit: type=1326 audit(533.119:36715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.381659][ T29] audit: type=1326 audit(533.119:36716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.9.18877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9a19f749 code=0x7ffc0000 [ 533.392651][T22376] lo speed is unknown, defaulting to 1000 [ 533.460320][T22376] lo speed is unknown, defaulting to 1000 [ 533.466927][T22376] lo speed is unknown, defaulting to 1000 [ 533.473157][T22376] lo speed is unknown, defaulting to 1000 [ 533.503403][T22376] lo speed is unknown, defaulting to 1000 [ 533.511443][T22376] lo speed is unknown, defaulting to 1000 [ 533.525796][T22384] __nla_validate_parse: 8 callbacks suppressed [ 533.525815][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18892'. [ 533.542494][T22384] netlink: 312 bytes leftover after parsing attributes in process `syz.9.18892'. [ 533.552239][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18892'. [ 533.578043][T22390] netlink: 60 bytes leftover after parsing attributes in process `syz.7.18894'. [ 533.580937][T22394] loop8: detected capacity change from 0 to 256 [ 533.612833][T22395] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 533.680414][T22403] vlan2: entered allmulticast mode [ 533.773278][T22428] macvtap0: refused to change device tx_queue_len [ 534.011059][T22455] loop8: detected capacity change from 0 to 1024 [ 534.015708][T22453] vlan2: entered allmulticast mode [ 534.036487][T22455] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 534.047643][T22455] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 534.058957][T22455] JBD2: no valid journal superblock found [ 534.064815][T22455] EXT4-fs (loop8): Could not load journal inode [ 534.098795][T22455] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 534.419328][T22496] lo speed is unknown, defaulting to 1000 [ 534.448514][T22496] cgroup: fork rejected by pids controller in /syz6 [ 534.836437][ T8660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.849585][T16013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.872806][T22535] loop7: detected capacity change from 0 to 1024 [ 534.896866][T22535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.908849][T22535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 534.909215][T16013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.941248][T22535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.967399][T16013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.029152][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.039054][T16013] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 535.046303][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.052366][T16013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.179375][T16013] team0: Port device gtp0 removed [ 535.209831][T22598] netlink: 'syz.8.18961': attribute type 4 has an invalid length. [ 535.218066][T22598] netlink: 152 bytes leftover after parsing attributes in process `syz.8.18961'. [ 535.317795][T16013] bond1 (unregistering): Released all slaves [ 535.326331][T16013] bond2 (unregistering): Released all slaves [ 535.335254][T16013] bond3 (unregistering): Released all slaves [ 535.343558][T22547] lo speed is unknown, defaulting to 1000 [ 535.349452][T22600] macvtap0: refused to change device tx_queue_len [ 535.383109][T16013] tipc: Left network mode [ 535.408334][T22634] siw: device registration error -23 [ 535.430603][T22673] netlink: 60 bytes leftover after parsing attributes in process `syz.8.18953'. [ 535.467421][T22547] chnl_net:caif_netlink_parms(): no params data found [ 535.492401][T22709] loop8: detected capacity change from 0 to 1024 [ 535.510082][T22709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.528601][T15978] smc: removing ib device syz! [ 535.550439][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.604968][T22736] loop8: detected capacity change from 0 to 1024 [ 535.612354][T22736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.623425][T22736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 535.637278][T22736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.669133][T22547] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.676626][T22547] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.684508][T22547] bridge_slave_0: entered allmulticast mode [ 535.685256][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.692227][T22547] bridge_slave_0: entered promiscuous mode [ 535.707212][T22547] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.714687][T22547] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.722372][T22547] bridge_slave_1: entered allmulticast mode [ 535.729720][T22547] bridge_slave_1: entered promiscuous mode [ 535.791085][T22547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.803052][T22547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.869551][T16013] IPVS: stop unused estimator thread 0... [ 535.876916][T22547] team0: Port device team_slave_0 added [ 535.884029][T22547] team0: Port device team_slave_1 added [ 535.915407][T22547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.922784][T22547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.949218][T22547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.974299][T22547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.981381][T22547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.007655][T22547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.011657][T22880] netlink: 60 bytes leftover after parsing attributes in process `syz.9.18968'. [ 536.059394][T22547] hsr_slave_0: entered promiscuous mode [ 536.084275][T22547] hsr_slave_1: entered promiscuous mode [ 536.090305][T22908] loop8: detected capacity change from 0 to 4096 [ 536.101587][T22908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.167427][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.233337][T22982] siw: device registration error -23 [ 536.239580][T22984] rdma_op ffff888102108180 conn xmit_rdma 0000000000000000 [ 536.386181][T23011] netlink: 76 bytes leftover after parsing attributes in process `syz.9.18982'. [ 536.458122][T22547] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 536.471823][T22547] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.484648][T22547] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 536.501462][T22547] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.562404][T23054] rdma_op ffff888105954d80 conn xmit_rdma 0000000000000000 [ 536.618121][T23058] netlink: 'syz.5.18996': attribute type 21 has an invalid length. [ 536.627213][T22547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.635104][T23058] netlink: 'syz.5.18996': attribute type 1 has an invalid length. [ 536.643069][T23058] netlink: 144 bytes leftover after parsing attributes in process `syz.5.18996'. [ 536.669236][T22547] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.688917][T16013] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.696350][T16013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.729099][T23069] vlan3: entered allmulticast mode [ 536.747454][T16013] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.754549][T16013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.784742][T23082] netlink: 'syz.9.19002': attribute type 3 has an invalid length. [ 536.798805][T23084] loop7: detected capacity change from 0 to 512 [ 536.837293][T23084] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 536.855741][T23084] EXT4-fs (loop7): mount failed [ 536.896914][T22547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.065094][T23134] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 537.077245][T23133] IPVS: stopping master sync thread 23134 ... [ 537.117855][T22547] veth0_vlan: entered promiscuous mode [ 537.139507][T22547] veth1_vlan: entered promiscuous mode [ 537.170781][T22547] veth0_macvtap: entered promiscuous mode [ 537.189813][T22547] veth1_macvtap: entered promiscuous mode [ 537.202178][T22547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.214618][T22547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.232256][T23152] vlan2: entered allmulticast mode [ 537.238839][T23152] dummy0: entered allmulticast mode [ 537.250981][ T873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.263382][ T873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.275711][ T873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.294242][T16014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.390629][T23184] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 537.392148][T23182] IPVS: stopping master sync thread 23184 ... [ 537.458752][T23187] loop6: detected capacity change from 0 to 512 [ 537.480190][T23187] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 537.513520][T23187] EXT4-fs (loop6): mount failed [ 537.622272][T23219] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 537.633425][T23216] IPVS: stopping master sync thread 23219 ... [ 537.675455][T23225] loop7: detected capacity change from 0 to 512 [ 537.707930][T23225] EXT4-fs (loop7): too many log groups per flexible block group [ 537.726351][T23225] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 537.739603][T23225] EXT4-fs (loop7): mount failed [ 540.984883][T23264] netlink: 96 bytes leftover after parsing attributes in process `ÿ'. [ 541.006307][T23269] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 541.017779][T23266] IPVS: stopping master sync thread 23269 ... [ 541.099027][T23281] lo speed is unknown, defaulting to 1000 [ 541.138507][T23310] netlink: 332 bytes leftover after parsing attributes in process `syz.5.19077'. [ 541.212872][T23320] bridge1: entered promiscuous mode [ 541.218194][T23320] bridge1: entered allmulticast mode [ 541.225383][T23320] team0: Port device bridge1 added [ 541.237686][T23320] bridge0: port 3(team0) entered blocking state [ 541.244111][T23320] bridge0: port 3(team0) entered disabled state [ 541.250942][T23320] team0: entered allmulticast mode [ 541.256091][T23320] team_slave_0: entered allmulticast mode [ 541.261993][T23320] team_slave_1: entered allmulticast mode [ 541.269151][T23320] team0: entered promiscuous mode [ 541.274289][T23320] team_slave_0: entered promiscuous mode [ 541.280126][T23320] team_slave_1: entered promiscuous mode [ 541.286606][T23320] bridge0: port 3(team0) entered blocking state [ 541.292930][T23320] bridge0: port 3(team0) entered forwarding state [ 541.374052][T23333] netlink: 'syz.9.19088': attribute type 1 has an invalid length. [ 541.413799][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 541.413815][ T29] audit: type=1400 audit(541.399:36790): avc: denied { bind } for pid=23334 comm="syz.5.19087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 541.440167][ T29] audit: type=1400 audit(541.399:36791): avc: denied { node_bind } for pid=23334 comm="syz.5.19087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 541.482600][T23344] lo speed is unknown, defaulting to 1000 [ 541.567834][T23378] bridge1: entered promiscuous mode [ 541.573114][T23378] bridge1: entered allmulticast mode [ 541.622961][T23378] team0: Port device bridge1 added [ 541.630017][T23388] bridge0: port 5(team0) entered blocking state [ 541.636395][T23388] bridge0: port 5(team0) entered disabled state [ 541.644358][T23388] team0: entered allmulticast mode [ 541.649594][T23388] team_slave_0: entered allmulticast mode [ 541.655888][T23388] team_slave_1: entered allmulticast mode [ 541.662648][T23388] team0: entered promiscuous mode [ 541.667733][T23388] team_slave_0: entered promiscuous mode [ 541.673585][T23388] team_slave_1: entered promiscuous mode [ 541.679950][T23388] bridge0: port 5(team0) entered blocking state [ 541.686376][T23388] bridge0: port 5(team0) entered forwarding state [ 541.764101][T23396] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19103'. [ 541.819279][T23400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 541.872113][T23413] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.19107'. [ 541.881754][ T29] audit: type=1401 audit(541.869:36792): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 541.907893][T23413] netlink: zone id is out of range [ 541.910320][ T29] audit: type=1400 audit(541.899:36793): avc: denied { create } for pid=23419 comm="syz.9.19111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.913056][T23413] netlink: zone id is out of range [ 541.913460][T23413] netlink: zone id is out of range [ 541.976772][T23413] netlink: zone id is out of range [ 541.988088][T23425] bridge1: entered promiscuous mode [ 541.993357][T23425] bridge1: entered allmulticast mode [ 541.994593][T23413] netlink: set zone limit has 8 unknown bytes [ 542.003458][ T29] audit: type=1400 audit(541.899:36794): avc: denied { mount } for pid=23416 comm="syz.6.19110" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 542.026715][T23425] team0: Port device bridge1 added [ 542.027866][ T29] audit: type=1400 audit(541.929:36795): avc: denied { bind } for pid=23419 comm="syz.9.19111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 542.053083][ T29] audit: type=1326 audit(541.939:36796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23415 comm="syz.5.19109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 542.076622][ T29] audit: type=1326 audit(541.939:36797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23415 comm="syz.5.19109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 542.100741][ T29] audit: type=1326 audit(541.939:36798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23415 comm="syz.5.19109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 542.124120][ T29] audit: type=1326 audit(541.939:36799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23415 comm="syz.5.19109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8da40f749 code=0x7ffc0000 [ 542.186538][T23425] bridge0: port 3(team0) entered blocking state [ 542.193195][T23425] bridge0: port 3(team0) entered disabled state [ 542.210133][T23425] team0: entered allmulticast mode [ 542.215311][T23425] team_slave_0: entered allmulticast mode [ 542.221174][T23425] team_slave_1: entered allmulticast mode [ 542.242744][T23425] team0: entered promiscuous mode [ 542.248086][T23425] team_slave_0: entered promiscuous mode [ 542.254156][T23425] team_slave_1: entered promiscuous mode [ 542.260635][T23425] bridge0: port 3(team0) entered blocking state [ 542.267082][T23425] bridge0: port 3(team0) entered forwarding state [ 542.283222][T23440] netlink: 332 bytes leftover after parsing attributes in process `syz.7.19119'. [ 542.289932][T23438] lo speed is unknown, defaulting to 1000 [ 542.361733][T23472] loop6: detected capacity change from 0 to 512 [ 542.386418][T23472] EXT4-fs (loop6): orphan cleanup on readonly fs [ 542.393199][T23472] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 542.403942][T23472] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 542.419388][T23472] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.19126: attempt to clear invalid blocks 2 len 1 [ 542.434903][T23472] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.19126: invalid indirect mapped block 1819239214 (level 0) [ 542.449896][T23472] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.19126: invalid indirect mapped block 1819239214 (level 1) [ 542.474615][T23472] EXT4-fs (loop6): 1 truncate cleaned up [ 542.492455][T23472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.530487][T23472] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 542.542506][T23472] EXT4-fs error (device loop6): __ext4_remount:6789: comm syz.6.19126: Abort forced by user [ 542.554324][T23472] EXT4-fs (loop6): Remounting filesystem read-only [ 542.561004][T23472] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 542.605760][T22547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.661936][T23490] infiniband syz!: set active [ 542.666768][T23490] infiniband syz!: added team_slave_0 [ 542.689485][T23490] RDS/IB: syz!: added [ 542.694475][T23490] smc: adding ib device syz! with port count 1 [ 542.700874][T23490] smc: ib device syz! port 1 has no pnetid [ 542.706433][T23503] bridge1: entered promiscuous mode [ 542.712682][T23503] bridge1: entered allmulticast mode [ 542.720719][T23503] team0: Port device bridge1 added [ 542.737003][T23503] bridge0: port 4(team0) entered blocking state [ 542.743472][T23503] bridge0: port 4(team0) entered disabled state [ 542.765399][T23503] team0: entered allmulticast mode [ 542.770788][T23503] team_slave_0: entered allmulticast mode [ 542.776765][T23503] team_slave_1: entered allmulticast mode [ 542.783470][T23503] team0: entered promiscuous mode [ 542.788602][T23503] team_slave_0: entered promiscuous mode [ 542.794440][T23503] team_slave_1: entered promiscuous mode [ 542.905541][T23527] tipc: Enabling of bearer rejected, failed to enable media [ 543.007800][T23540] lo speed is unknown, defaulting to 1000 [ 543.116279][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.147677][T23570] netlink: 'syz.6.19152': attribute type 1 has an invalid length. [ 543.340304][T23608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 543.355305][T23607] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.19164'. [ 543.370862][T23612] netlink: 'syz.8.19168': attribute type 1 has an invalid length. [ 543.375790][T23607] netlink: zone id is out of range [ 543.384100][T23607] netlink: zone id is out of range [ 543.405270][T23607] netlink: zone id is out of range [ 543.416896][T23607] netlink: zone id is out of range [ 543.431739][T23618] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 543.465408][T23607] netlink: set zone limit has 8 unknown bytes [ 543.554659][T23630] loop7: detected capacity change from 0 to 512 [ 543.578163][T23630] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 543.589576][T23630] EXT4-fs (loop7): orphan cleanup on readonly fs [ 543.596903][T23630] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 543.612507][T23630] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 543.620686][T23630] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.19176: bg 0: block 40: padding at end of block bitmap is not set [ 543.637356][T23630] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 543.647488][T23630] EXT4-fs (loop7): 1 truncate cleaned up [ 543.653492][T23630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.679627][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.696928][T23637] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.19188'. [ 543.703384][T23641] loop8: detected capacity change from 0 to 512 [ 543.732890][T23641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.752036][T23641] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 543.778106][T15993] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 543.791361][T15993] EXT4-fs (loop8): This should not happen!! Data will be lost [ 543.791361][T15993] [ 543.801098][T15993] EXT4-fs (loop8): Total free blocks count 0 [ 543.807366][T15993] EXT4-fs (loop8): Free/Dirty block details [ 543.813359][T15993] EXT4-fs (loop8): free_blocks=65280 [ 543.818773][T15993] EXT4-fs (loop8): dirty_blocks=1 [ 543.823898][T15993] EXT4-fs (loop8): Block reservation details [ 543.830171][T15993] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 543.837265][ T4925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.887293][T23659] netlink: 'syz.7.19179': attribute type 1 has an invalid length. [ 543.944470][T23670] netlink: 'syz.9.19184': attribute type 9 has an invalid length. [ 543.962640][T23670] netlink: 16166 bytes leftover after parsing attributes in process `syz.9.19184'. [ 543.977388][T23669] tipc: Started in network mode [ 543.982386][T23669] tipc: Node identity baa7c0e0e07d, cluster identity 4711 [ 543.989834][T23669] tipc: Enabled bearer , priority 0 [ 544.010727][T23677] lo speed is unknown, defaulting to 1000 [ 544.019800][T23669] tipc: Disabling bearer [ 544.068554][T23693] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.19192'. [ 544.096864][T23690] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.19194'. [ 544.460814][T23755] tipc: Started in network mode [ 544.465758][T23755] tipc: Node identity ea2b1d2d9d69, cluster identity 4711 [ 544.473560][T23755] tipc: Enabled bearer , priority 0 [ 544.502106][T23751] bond0 (unregistering): Released all slaves [ 544.537817][T23755] tipc: Disabling bearer [ 544.644251][T23835] lo speed is unknown, defaulting to 1000 [ 544.806103][T32203] kernel read not supported for file 2349/task/2350/auxv (pid: 32203 comm: kworker/0:10) [ 544.846626][T23889] SELinux: security_context_str_to_sid (sys) failed with errno=-22 [ 544.984386][T23893] wireguard0: entered promiscuous mode [ 544.990133][T23893] wireguard0: entered allmulticast mode [ 545.040085][T23898] tipc: Started in network mode [ 545.045730][T23898] tipc: Node identity ca4d8f31de8c, cluster identity 4711 [ 545.053197][T23898] tipc: Enabled bearer , priority 0 [ 545.078593][T23898] tipc: Disabling bearer [ 545.152243][T23916] 9p: Bad value for 'rfdno' [ 545.157873][T23917] batadv_slave_1: entered promiscuous mode [ 545.167274][T23914] batadv_slave_1: left promiscuous mode [ 545.221667][T23905] loop8: detected capacity change from 0 to 32768 [ 545.266907][T23905] loop8: p1 p3 < > [ 545.488710][T23946] netlink: 'syz.7.19244': attribute type 6 has an invalid length. [ 545.536941][T23953] lo speed is unknown, defaulting to 1000 [ 545.550274][T23957] tipc: Enabled bearer , priority 0 [ 545.559210][T23957] tipc: Disabling bearer [ 546.186292][T24054] loop6: detected capacity change from 0 to 512 [ 546.229835][T24054] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 546.245129][T24063] lo speed is unknown, defaulting to 1000 [ 546.253091][T24054] EXT4-fs (loop6): orphan cleanup on readonly fs [ 546.266718][T24054] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 546.282016][T24054] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 546.294748][T24071] gretap1: entered promiscuous mode [ 546.311063][T24054] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.19271: bg 0: block 40: padding at end of block bitmap is not set [ 546.327526][T24054] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 546.338200][T24054] EXT4-fs (loop6): 1 truncate cleaned up [ 546.345104][T24054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.423021][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 546.423040][ T29] audit: type=1400 audit(546.409:36955): avc: denied { ioctl } for pid=24077 comm="syz.8.19293" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 546.469803][T22547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.491007][ T29] audit: type=1400 audit(546.459:36956): avc: denied { unmount } for pid=22547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 546.544499][ T29] audit: type=1400 audit(546.519:36957): avc: denied { create } for pid=24110 comm="syz.6.19287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.564197][ T29] audit: type=1400 audit(546.519:36958): avc: denied { getopt } for pid=24110 comm="syz.6.19287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.583797][ T29] audit: type=1400 audit(546.519:36959): avc: denied { connect } for pid=24110 comm="syz.6.19287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.603305][ T29] audit: type=1400 audit(546.519:36960): avc: denied { name_connect } for pid=24110 comm="syz.6.19287" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 546.682794][ T29] audit: type=1400 audit(546.649:36961): avc: denied { write } for pid=24110 comm="syz.6.19287" lport=42017 faddr=::ffff:10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.731438][T24118] netlink: 'syz.8.19299': attribute type 9 has an invalid length. [ 546.739553][T24118] __nla_validate_parse: 10 callbacks suppressed [ 546.739644][T24118] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.19299'. [ 546.828434][ T29] audit: type=1326 audit(546.819:36962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24125 comm="syz.8.19291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 546.894627][ T29] audit: type=1326 audit(546.839:36963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24125 comm="syz.8.19291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 546.918020][ T29] audit: type=1326 audit(546.839:36964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24125 comm="syz.8.19291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00492f749 code=0x7ffc0000 [ 546.977172][T24134] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.19297'. [ 547.045642][T24146] loop7: detected capacity change from 0 to 512 [ 547.076591][T24146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.087954][T24158] netlink: 'syz.6.19304': attribute type 9 has an invalid length. [ 547.097654][T24158] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.19304'. [ 547.112651][T24146] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 547.142374][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 547.155603][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 547.155603][ T31] [ 547.165552][ T31] EXT4-fs (loop7): Total free blocks count 0 [ 547.171708][ T31] EXT4-fs (loop7): Free/Dirty block details [ 547.178243][ T31] EXT4-fs (loop7): free_blocks=65280 [ 547.184081][ T31] EXT4-fs (loop7): dirty_blocks=1 [ 547.189904][ T31] EXT4-fs (loop7): Block reservation details [ 547.196126][ T31] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 547.204294][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.314326][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19327'. [ 547.340887][T24183] netlink: 80 bytes leftover after parsing attributes in process `syz.6.19313'. [ 547.413577][T24192] loop7: detected capacity change from 0 to 512 [ 547.470509][T24192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.518721][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.530471][T24202] loop6: detected capacity change from 0 to 512 [ 547.573654][T24202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.592810][T24202] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 547.641221][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 547.654110][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 547.654110][ T31] [ 547.663988][ T31] EXT4-fs (loop6): Total free blocks count 0 [ 547.670282][ T31] EXT4-fs (loop6): Free/Dirty block details [ 547.676394][ T31] EXT4-fs (loop6): free_blocks=65280 [ 547.682309][ T31] EXT4-fs (loop6): dirty_blocks=1 [ 547.687787][ T31] EXT4-fs (loop6): Block reservation details [ 547.694239][ T31] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 547.701399][T22547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.997471][T24284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.018353][T24284] bond0: (slave bond1): Enslaving as an active interface with an up link [ 548.029856][T24325] netlink: 14 bytes leftover after parsing attributes in process `syz.7.19348'. [ 548.088943][T24325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.129499][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19363'. [ 548.139140][T24330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19363'. [ 548.168568][T24325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.195960][T24325] bond0 (unregistering): (slave bond1): Releasing backup interface [ 548.217465][T24336] net_ratelimit: 21 callbacks suppressed [ 548.217483][T24336] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 548.243684][T24325] bond0 (unregistering): Released all slaves [ 548.279168][T24330] wireguard0: entered promiscuous mode [ 548.284888][T24330] wireguard0: entered allmulticast mode [ 548.305014][T24374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19357'. [ 548.369551][T24376] 9p: Bad value for 'rfdno' [ 548.488816][ T1052] kernel read not supported for file 442/task/443/auxv (pid: 1052 comm: kworker/1:2) [ 548.639462][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19373'. [ 548.657921][T24402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.670477][T24402] bond0: (slave bond1): Enslaving as an active interface with an up link [ 548.682904][T24400] wireguard0: entered promiscuous mode [ 548.688707][T24400] wireguard0: entered allmulticast mode [ 548.695857][T24439] netlink: 'syz.6.19374': attribute type 6 has an invalid length. [ 548.711723][T24402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.733936][T24402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.747582][T24402] bond0 (unregistering): (slave bond1): Releasing backup interface [ 548.757898][T24402] bond0 (unregistering): Released all slaves [ 548.770976][T24445] batadv_slave_1: entered promiscuous mode [ 548.778447][T24443] batadv_slave_1: left promiscuous mode [ 548.843009][T24498] 9p: Bad value for 'rfdno' [ 548.944720][T24513] gretap1: entered promiscuous mode [ 548.963174][T24512] netlink: 'syz.9.19387': attribute type 6 has an invalid length. [ 549.043592][T24532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 549.059231][T24532] bond0: (slave bond1): Enslaving as an active interface with an up link [ 549.099821][T24532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.114539][T24532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.166581][T24532] bond0 (unregistering): (slave bond1): Releasing backup interface [ 549.197299][T24532] bond0 (unregistering): Released all slaves [ 549.437729][T24620] bond0 (unregistering): Released all slaves [ 549.644646][T24728] bond0 (unregistering): Released all slaves [ 550.488957][T24923] loop6: detected capacity change from 0 to 512 [ 550.535753][T24923] EXT4-fs (loop6): too many log groups per flexible block group [ 550.558357][T24923] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 550.565373][T24923] EXT4-fs (loop6): mount failed [ 550.609717][T24935] rdma_op ffff88811bcb7580 conn xmit_rdma 0000000000000000 [ 550.924294][T24965] loop8: detected capacity change from 0 to 512 [ 550.953378][T24965] EXT4-fs (loop8): too many log groups per flexible block group [ 550.963975][T24965] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 550.971178][T24965] EXT4-fs (loop8): mount failed [ 551.429861][T25023] IPv6: Can't replace route, no match found [ 551.451041][T25027] loop6: detected capacity change from 0 to 512 [ 551.470450][T25027] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 551.486365][T25032] netlink: zone id is out of range [ 551.491639][T25032] netlink: zone id is out of range [ 551.497161][T25032] netlink: zone id is out of range [ 551.514500][T25032] netlink: set zone limit has 8 unknown bytes [ 551.523893][T25027] EXT4-fs (loop6): 1 truncate cleaned up [ 551.533649][T25027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.552908][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 551.552928][ T29] audit: type=1400 audit(551.536:37114): avc: denied { write } for pid=25024 comm="syz.6.19499" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 551.613406][ T29] audit: type=1326 audit(551.596:37115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.638270][ T29] audit: type=1326 audit(551.596:37116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.663084][ T29] audit: type=1326 audit(551.606:37117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.687396][ T29] audit: type=1326 audit(551.606:37118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.711284][ T29] audit: type=1326 audit(551.606:37119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.735345][ T29] audit: type=1326 audit(551.606:37120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.759199][ T29] audit: type=1326 audit(551.606:37121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.782546][ T29] audit: type=1326 audit(551.606:37122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.805791][ T29] audit: type=1326 audit(551.606:37123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25041 comm="syz.7.19514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f726494f749 code=0x7ffc0000 [ 551.947102][T25052] xt_l2tp: v2 tid > 0xffff: 37482740 [ 552.029480][T25061] __nla_validate_parse: 23 callbacks suppressed [ 552.029504][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19512'. [ 552.059136][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19513'. [ 552.068368][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19513'. [ 552.109778][T25069] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.19516'. [ 552.120253][T25069] netlink: zone id is out of range [ 552.125395][T25069] netlink: zone id is out of range [ 552.131023][T25069] netlink: zone id is out of range [ 552.147023][T25069] netlink: set zone limit has 8 unknown bytes [ 552.276347][T25085] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.19531'. [ 552.305582][T25085] netlink: zone id is out of range [ 552.318184][T25088] xt_l2tp: v2 tid > 0xffff: 37482740 [ 552.457867][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19529'. [ 552.466913][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19529'. [ 552.487831][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19528'. [ 552.608208][T22547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.686699][T25124] xt_l2tp: v2 tid > 0xffff: 37482740 [ 552.728536][T25126] netlink: 9 bytes leftover after parsing attributes in process `syz.8.19552'. [ 552.746532][T25130] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.19540'. [ 552.922183][T25139] SELinux: failed to load policy [ 553.069390][T25155] xt_l2tp: v2 tid > 0xffff: 37482740 [ 553.150330][T25131] ================================================================== [ 553.158555][T25131] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 553.167188][T25131] [ 553.169614][T25131] write to 0xffff888104fe6228 of 8 bytes by task 25123 on cpu 1: [ 553.177516][T25131] shmem_file_splice_read+0x470/0x600 [ 553.182925][T25131] splice_direct_to_actor+0x26f/0x680 [ 553.188486][T25131] do_splice_direct+0xda/0x150 [ 553.193538][T25131] do_sendfile+0x380/0x650 [ 553.197977][T25131] __x64_sys_sendfile64+0x105/0x150 [ 553.203203][T25131] x64_sys_call+0x2db1/0x3000 [ 553.207906][T25131] do_syscall_64+0xca/0x2b0 [ 553.212423][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.218410][T25131] [ 553.220843][T25131] write to 0xffff888104fe6228 of 8 bytes by task 25131 on cpu 0: [ 553.228559][T25131] shmem_file_splice_read+0x470/0x600 [ 553.234124][T25131] splice_direct_to_actor+0x26f/0x680 [ 553.239599][T25131] do_splice_direct+0xda/0x150 [ 553.244499][T25131] do_sendfile+0x380/0x650 [ 553.249241][T25131] __x64_sys_sendfile64+0x105/0x150 [ 553.254533][T25131] x64_sys_call+0x2db1/0x3000 [ 553.259228][T25131] do_syscall_64+0xca/0x2b0 [ 553.263934][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.270085][T25131] [ 553.272419][T25131] value changed: 0x000000000000473a -> 0x000000000000473b [ 553.279697][T25131] [ 553.282031][T25131] Reported by Kernel Concurrency Sanitizer on: [ 553.288273][T25131] CPU: 0 UID: 0 PID: 25131 Comm: syz.9.19548 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 553.299931][T25131] Tainted: [W]=WARN [ 553.303991][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.314408][T25131] ================================================================== [ 558.476352][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!