last executing test programs: 4m30.785416226s ago: executing program 32 (id=445): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 4m24.146153799s ago: executing program 33 (id=659): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)=',\xaa\b\x00\x00:\xe9\x15\xe8\xb3\x00', &(0x7f0000000800)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\x00X\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kfree\x00', r2, 0x0, 0x2}, 0x18) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) 4m22.203481208s ago: executing program 2 (id=699): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 4m22.164751609s ago: executing program 2 (id=702): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4m22.056445291s ago: executing program 2 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 4m22.037361101s ago: executing program 2 (id=706): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r2, 0x0, 0x2000}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4ea4, 0xfffffffe, @mcast1, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 4m21.887783014s ago: executing program 2 (id=708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 4m21.832721415s ago: executing program 34 (id=708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 4m12.515329062s ago: executing program 35 (id=1037): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 4m5.306934726s ago: executing program 36 (id=1205): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x70) r1 = socket(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80000004}) 4m3.494836873s ago: executing program 37 (id=1213): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008000280f10f0500080000003e120000080006"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 1m47.708348939s ago: executing program 3 (id=5600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 1m47.64595526s ago: executing program 3 (id=5603): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 1m47.593282111s ago: executing program 3 (id=5604): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4000007, 0x96a, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x9, 0x2, 0xffff5a8b, 0x9, 0x15, "6217e54f415792f259deaee381f9253b042b82"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1m47.564812232s ago: executing program 2 (id=5587): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1m47.546015352s ago: executing program 40 (id=5587): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1m47.281979537s ago: executing program 3 (id=5606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 1m47.281629227s ago: executing program 41 (id=5606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 1m47.279945507s ago: executing program 0 (id=5607): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x16, 0x0, 0x2, 0x9}, 0x8) 1m46.977185633s ago: executing program 0 (id=5608): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x5, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 1m46.977000073s ago: executing program 42 (id=5608): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x5, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 1m9.238987426s ago: executing program 9 (id=6704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) 1m9.238702726s ago: executing program 9 (id=6705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m9.190469727s ago: executing program 9 (id=6706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 1m9.106492128s ago: executing program 9 (id=6707): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0) 1m9.106336348s ago: executing program 9 (id=6708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m8.657250067s ago: executing program 9 (id=6717): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20000000000000}, 0x18) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) 1m8.635499048s ago: executing program 43 (id=6717): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20000000000000}, 0x18) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) 33.473422025s ago: executing program 5 (id=7897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 32.528485044s ago: executing program 5 (id=7900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 32.444042335s ago: executing program 5 (id=7902): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09"], 0x94}}, 0x0) io_setup(0x6, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000) 32.414344406s ago: executing program 5 (id=7903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000bc0)='./file0\x00', 0x801) move_mount(r1, &(0x7f00000001c0)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x220) 32.396793536s ago: executing program 5 (id=7904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 32.282488109s ago: executing program 5 (id=7905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 32.282320809s ago: executing program 44 (id=7905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.363838103s ago: executing program 7 (id=8808): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getitimer(0x1, &(0x7f0000000280)) 1.327609844s ago: executing program 7 (id=8811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) 1.266052795s ago: executing program 1 (id=8814): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.263074825s ago: executing program 6 (id=8815): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x8, 0x20000, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.240090075s ago: executing program 1 (id=8816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400000004000280080003"], 0x40}}, 0x4000000) 1.228224195s ago: executing program 7 (id=8817): pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.178080046s ago: executing program 6 (id=8818): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.149166127s ago: executing program 1 (id=8819): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0xe4, 0xd, 0x1, 0x3, @time={0x9, 0x1}, {0x7, 0xf7}, {0x8, 0x9}, @connect={{0x4}, {0x66, 0x2}}}, {0xff, 0x2, 0x92, 0x0, @tick=0xd74b, {0x4, 0x9}, {0x80, 0x2}, @raw32={[0x8, 0xffff438d, 0x6]}}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x61}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 1.064423459s ago: executing program 1 (id=8820): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x5d1a0}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48800) 1.063771269s ago: executing program 6 (id=8821): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 986.36385ms ago: executing program 6 (id=8822): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 985.94366ms ago: executing program 1 (id=8823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 778.344535ms ago: executing program 1 (id=8826): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x130, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff35) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 634.530537ms ago: executing program 7 (id=8828): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) 570.366378ms ago: executing program 7 (id=8829): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x13d, 0xc, 0x0, 0xee, 0x18, "737b27e90e2903000000000000000a9fd86000"}) 570.121338ms ago: executing program 7 (id=8830): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='./file1\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 468.70023ms ago: executing program 4 (id=8832): open_tree(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x9000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x581, &(0x7f0000000d00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0x6}, [{}], {0x10, 0x4}, {0x20, 0x3}}, 0x2c, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) 382.744542ms ago: executing program 8 (id=8834): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 382.255282ms ago: executing program 4 (id=8835): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 318.380513ms ago: executing program 4 (id=8836): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 315.720663ms ago: executing program 4 (id=8846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r2}) 312.405473ms ago: executing program 8 (id=8837): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 282.602534ms ago: executing program 8 (id=8838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 237.945665ms ago: executing program 8 (id=8839): open(0x0, 0x14927e, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0) 237.698655ms ago: executing program 4 (id=8840): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 101.414627ms ago: executing program 4 (id=8841): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0xe}, 0x18) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 99.591057ms ago: executing program 6 (id=8852): open(0x0, 0x14927e, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0) 99.069467ms ago: executing program 8 (id=8842): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 68.912868ms ago: executing program 6 (id=8843): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b8", 0xd) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=8844): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) kernel console output (not intermixed with test programs): 8][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.345477][T19556] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.375069][T19556] bridge_slave_0: entered allmulticast mode [ 250.381935][T19556] bridge_slave_0: entered promiscuous mode [ 250.390683][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.397787][T19556] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.405400][T19556] bridge_slave_1: entered allmulticast mode [ 250.414118][T19556] bridge_slave_1: entered promiscuous mode [ 250.463974][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.488132][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.519840][T19556] team0: Port device team_slave_0 added [ 250.528358][T19556] team0: Port device team_slave_1 added [ 250.601046][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.608125][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.634303][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.660529][T19648] lo speed is unknown, defaulting to 1000 [ 250.661232][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.673493][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.699722][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.714240][T19648] hsr0 speed is unknown, defaulting to 1000 [ 250.826865][T19556] hsr_slave_0: entered promiscuous mode [ 250.849724][T19556] hsr_slave_1: entered promiscuous mode [ 250.862314][T19674] 9pnet: Could not find request transport: bio_remap [ 250.866770][T19669] loop6: detected capacity change from 0 to 8192 [ 250.879856][T19556] debugfs: 'hsr0' already exists in 'hsr' [ 250.885636][T19556] Cannot create hsr debugfs directory [ 251.175110][T19686] lo speed is unknown, defaulting to 1000 [ 251.190976][T19686] hsr0 speed is unknown, defaulting to 1000 [ 251.377185][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6785'. [ 251.461841][T19556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.492924][T19556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.593283][T19556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.613075][T19556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.721063][T19556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.757665][T19556] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.782935][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.790169][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.817402][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.824659][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.988637][T19556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.243322][T19781] wg2: entered promiscuous mode [ 252.248419][T19781] wg2: entered allmulticast mode [ 252.269746][T19556] veth0_vlan: entered promiscuous mode [ 252.280207][T19556] veth1_vlan: entered promiscuous mode [ 252.296067][T19556] veth0_macvtap: entered promiscuous mode [ 252.318251][T19556] veth1_macvtap: entered promiscuous mode [ 252.337555][T19556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.357910][T19556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.369684][ T4434] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.385731][ T4434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.403641][ T4434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.424745][ T4434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.447155][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6810'. [ 252.581608][T19803] loop5: detected capacity change from 0 to 512 [ 252.638775][T19803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.667788][T19811] loop6: detected capacity change from 0 to 1024 [ 252.708519][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6819'. [ 252.723140][T19556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.734186][T19811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.734756][T19813] bond0: entered promiscuous mode [ 252.751669][T19813] bond_slave_0: entered promiscuous mode [ 252.756719][T19811] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.6820: Allocating blocks 385-513 which overlap fs metadata [ 252.757588][T19813] bond_slave_1: entered promiscuous mode [ 252.780287][T19816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6819'. [ 252.789329][T19813] batadv0: entered promiscuous mode [ 252.795605][T19813] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 252.809234][T19811] EXT4-fs (loop6): pa ffff8881072c9770: logic 16, phys. 129, len 24 [ 252.817279][T19811] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 252.900478][T19816] bond0 (unregistering): left promiscuous mode [ 252.906738][T19816] bond_slave_0: left promiscuous mode [ 252.912431][T19816] bond_slave_1: left promiscuous mode [ 252.921878][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.922478][T19816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.974251][T19816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.007856][T19830] loop6: detected capacity change from 0 to 1024 [ 253.017440][T19830] EXT4-fs: Ignoring removed nobh option [ 253.023215][T19830] EXT4-fs: Ignoring removed bh option [ 253.029568][T19816] bond0 (unregistering): Released all slaves [ 253.042162][T19830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.053666][T19828] lo speed is unknown, defaulting to 1000 [ 253.061143][T19828] hsr0 speed is unknown, defaulting to 1000 [ 253.142197][T19830] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 253.215279][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.269210][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6830'. [ 253.341832][T19852] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6834'. [ 253.915215][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 253.915249][ T29] audit: type=1326 audit(2831.889:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 253.946564][ T29] audit: type=1326 audit(2831.889:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 253.970047][ T29] audit: type=1326 audit(2831.889:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 253.993159][ T29] audit: type=1326 audit(2831.889:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.016451][ T29] audit: type=1326 audit(2831.889:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.039552][ T29] audit: type=1326 audit(2831.889:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.062651][ T29] audit: type=1326 audit(2831.889:9308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.086511][ T29] audit: type=1326 audit(2831.889:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.109368][ T29] audit: type=1326 audit(2831.889:9310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.132679][ T29] audit: type=1326 audit(2831.889:9311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19922 comm="syz.6.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 254.215147][T19936] sd 0:0:1:0: device reset [ 254.304935][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6875'. [ 254.325825][T19952] bond0: entered promiscuous mode [ 254.331183][T19952] bond_slave_0: entered promiscuous mode [ 254.337014][T19952] bond_slave_1: entered promiscuous mode [ 254.344477][T19952] dummy0: entered promiscuous mode [ 254.354280][T19952] batadv0: entered promiscuous mode [ 254.360146][T19952] debugfs: 'hsr1' already exists in 'hsr' [ 254.365916][T19952] Cannot create hsr debugfs directory [ 254.371974][T19957] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6875'. [ 254.385656][T19952] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 254.400509][T19957] bond0 (unregistering): left promiscuous mode [ 254.406784][T19957] bond_slave_0: left promiscuous mode [ 254.412320][T19957] bond_slave_1: left promiscuous mode [ 254.418401][T19957] dummy0: left promiscuous mode [ 254.429761][T19957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.444317][T19957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.456033][T19957] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 254.485254][T19957] bond0 (unregistering): Released all slaves [ 254.487982][T19964] loop5: detected capacity change from 0 to 1024 [ 254.501975][T19964] EXT4-fs: Ignoring removed bh option [ 254.507879][T19964] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 254.521061][T19964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.836186][T19991] lo speed is unknown, defaulting to 1000 [ 254.844749][T19991] hsr0 speed is unknown, defaulting to 1000 [ 255.445363][T19556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.719469][T20116] loop4: detected capacity change from 0 to 128 [ 255.808585][T20127] openvswitch: netlink: Message has 6 unknown bytes. [ 255.826508][T20130] __nla_validate_parse: 1 callbacks suppressed [ 255.826528][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6917'. [ 255.845114][T20134] sd 0:0:1:0: device reset [ 255.854612][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6917'. [ 255.888707][T20140] netlink: 'syz.7.6922': attribute type 2 has an invalid length. [ 255.989987][T20146] loop7: detected capacity change from 0 to 8192 [ 256.063487][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6927'. [ 256.101407][T20153] bond0: entered promiscuous mode [ 256.106675][T20153] bond_slave_0: entered promiscuous mode [ 256.112493][T20153] bond_slave_1: entered promiscuous mode [ 256.121926][T20153] dummy0: entered promiscuous mode [ 256.127420][T20158] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6927'. [ 256.150648][T20153] batadv0: entered promiscuous mode [ 256.156492][T20153] debugfs: 'hsr1' already exists in 'hsr' [ 256.162345][T20153] Cannot create hsr debugfs directory [ 256.171536][T20153] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 256.203157][T20158] bond0 (unregistering): left promiscuous mode [ 256.209595][T20158] bond_slave_0: left promiscuous mode [ 256.215165][T20158] bond_slave_1: left promiscuous mode [ 256.229648][T20158] dummy0: left promiscuous mode [ 256.239558][T20158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.255454][T20158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.273119][T20158] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 256.293546][T20158] bond0 (unregistering): Released all slaves [ 256.509311][T20181] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6939'. [ 256.547087][T20184] netlink: 'syz.5.6940': attribute type 2 has an invalid length. [ 256.551359][T20188] loop4: detected capacity change from 0 to 512 [ 256.554994][T20184] netlink: 'syz.5.6940': attribute type 1 has an invalid length. [ 256.568950][T20184] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.6940'. [ 256.581124][T20190] loop7: detected capacity change from 0 to 2364 [ 256.608693][T20190] iso9660: Bad value for 'sbsector' [ 256.828095][T20208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6961'. [ 256.870195][T20213] loop7: detected capacity change from 0 to 1024 [ 256.877335][T20213] EXT4-fs: Ignoring removed nobh option [ 256.883142][T20213] EXT4-fs: Ignoring removed bh option [ 256.900248][T20213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.946193][T20219] loop5: detected capacity change from 0 to 1024 [ 256.956249][T20219] EXT4-fs: Ignoring removed nobh option [ 256.990825][T20213] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 257.037017][T20219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.116373][T20219] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 257.146709][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.222042][T19556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.282879][T12746] IPVS: starting estimator thread 0... [ 257.398202][T20239] IPVS: using max 2400 ests per chain, 120000 per kthread [ 257.541542][T20269] lo speed is unknown, defaulting to 1000 [ 257.560106][T20269] hsr0 speed is unknown, defaulting to 1000 [ 257.736230][T20290] loop7: detected capacity change from 0 to 1024 [ 257.743813][T20290] EXT4-fs: Ignoring removed orlov option [ 257.749616][T20290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.782405][T20290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.854386][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.108801][T20324] loop5: detected capacity change from 0 to 8192 [ 258.219462][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7003'. [ 258.274209][T20335] loop5: detected capacity change from 0 to 1024 [ 258.293565][T20335] EXT4-fs: Ignoring removed orlov option [ 258.310408][T20335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.356617][T19556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.401365][T20343] loop6: detected capacity change from 0 to 1024 [ 258.410568][T20347] loop4: detected capacity change from 0 to 2048 [ 258.421297][T20343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 258.447646][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.448905][T20347] loop4: p4 < > [ 258.514240][T20354] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7012'. [ 258.824807][T20393] lo speed is unknown, defaulting to 1000 [ 258.831588][T20393] hsr0 speed is unknown, defaulting to 1000 [ 258.920498][T20407] lo speed is unknown, defaulting to 1000 [ 258.926683][T20407] hsr0 speed is unknown, defaulting to 1000 [ 259.016005][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 259.016022][ T29] audit: type=1400 audit(2836.990:9373): avc: denied { setopt } for pid=20411 comm="syz.1.7035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 259.078084][ T29] audit: type=1326 audit(2837.060:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20417 comm="syz.5.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 259.121930][ T29] audit: type=1326 audit(2837.090:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20417 comm="syz.5.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 259.145092][ T29] audit: type=1326 audit(2837.090:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20417 comm="syz.5.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 259.148275][T20420] netlink: 'syz.5.7039': attribute type 1 has an invalid length. [ 259.227097][ T29] audit: type=1326 audit(2837.200:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.6.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 259.250932][ T29] audit: type=1326 audit(2837.200:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.6.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 259.274027][ T29] audit: type=1326 audit(2837.200:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.6.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 259.297096][ T29] audit: type=1326 audit(2837.200:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.6.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 259.320062][ T29] audit: type=1326 audit(2837.200:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.6.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 259.343211][ T29] audit: type=1326 audit(2837.230:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.6.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 259.391680][T20435] loop2: detected capacity change from 0 to 7 [ 259.485247][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7050'. [ 259.769796][T20462] lo speed is unknown, defaulting to 1000 [ 259.776213][T20462] hsr0 speed is unknown, defaulting to 1000 [ 259.984666][T20485] loop4: detected capacity change from 0 to 256 [ 260.077060][T20467] loop5: detected capacity change from 0 to 32768 [ 260.128584][T20467] loop5: p1 p2 p3 < > [ 260.133267][T20467] loop5: p2 size 39627 extends beyond EOD, truncated [ 260.273877][T20522] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 260.385462][T20534] geneve2: entered promiscuous mode [ 260.390827][T20534] geneve2: entered allmulticast mode [ 260.404352][T20536] syzkaller0: entered allmulticast mode [ 260.411241][T20536] syzkaller0: entered promiscuous mode [ 260.445239][T20536] syzkaller0 (unregistering): left allmulticast mode [ 260.452051][T20536] syzkaller0 (unregistering): left promiscuous mode [ 260.813106][T20592] netem: change failed [ 260.908055][T20606] syz_tun: entered allmulticast mode [ 260.933489][T20605] syz_tun: left allmulticast mode [ 260.942255][T20610] __nla_validate_parse: 4 callbacks suppressed [ 260.942275][T20610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7125'. [ 260.958095][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7126'. [ 261.013307][T20615] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 261.023170][T20615] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.031894][T20615] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.055616][T20615] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 261.068056][T20615] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.076862][T20615] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.126354][T20615] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 261.135259][T20615] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 261.301390][T20643] netlink: 'syz.7.7138': attribute type 1 has an invalid length. [ 261.358605][T20650] loop7: detected capacity change from 0 to 128 [ 261.609138][T20675] netlink: 'syz.7.7153': attribute type 1 has an invalid length. [ 261.673951][T20677] vlan2: entered allmulticast mode [ 261.679636][T20677] dummy0: entered allmulticast mode [ 261.907903][T20709] syzkaller0: entered allmulticast mode [ 261.916613][T20709] syzkaller0: entered promiscuous mode [ 261.944738][T20709] syzkaller0 (unregistering): left allmulticast mode [ 261.951666][T20709] syzkaller0 (unregistering): left promiscuous mode [ 262.112724][T20742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.137618][T20742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.251686][T20762] syzkaller0: entered allmulticast mode [ 262.258274][T20762] syzkaller0: entered promiscuous mode [ 262.281538][T20762] syzkaller0 (unregistering): left allmulticast mode [ 262.288583][T20762] syzkaller0 (unregistering): left promiscuous mode [ 262.441850][T20786] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 262.441850][T20786] program syz.5.7205 not setting count and/or reply_len properly [ 262.464832][T20788] loop7: detected capacity change from 0 to 256 [ 262.487033][T20788] FAT-fs (loop7): Directory bread(block 64) failed [ 262.495595][T20788] FAT-fs (loop7): Directory bread(block 65) failed [ 262.507796][T20788] FAT-fs (loop7): Directory bread(block 66) failed [ 262.514490][T20788] FAT-fs (loop7): Directory bread(block 67) failed [ 262.525112][T20788] FAT-fs (loop7): Directory bread(block 68) failed [ 262.532295][T20788] FAT-fs (loop7): Directory bread(block 69) failed [ 262.544475][T20788] FAT-fs (loop7): Directory bread(block 70) failed [ 262.553457][T20794] loop5: detected capacity change from 0 to 128 [ 262.563410][T20788] FAT-fs (loop7): Directory bread(block 71) failed [ 262.570407][T20794] msdos: Unknown parameter 'Ä\pwÔìñ^ò‡!þ…þ1T"ìóÙ;‚5ò¡@¤\/h(J°<é Wi µ“}¸' [ 262.582143][T20788] FAT-fs (loop7): Directory bread(block 72) failed [ 262.589691][T20788] FAT-fs (loop7): Directory bread(block 73) failed [ 262.672531][T20807] netlink: 'syz.5.7218': attribute type 1 has an invalid length. [ 262.713490][T20810] loop4: detected capacity change from 0 to 512 [ 262.770747][T20810] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.805060][T12746] hid_parser_main: 6 callbacks suppressed [ 262.805082][T12746] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 262.839281][T20817] SELinux: failed to load policy [ 262.847251][T12746] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.348026][T20870] random: crng reseeded on system resumption [ 263.390196][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.390196][ T4484] loop7: rw=1, sector=1224, nr_sectors = 96 limit=256 [ 263.424196][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.424196][ T4484] loop7: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 263.442873][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.442873][ T4484] loop7: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 263.457699][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.457699][ T4484] loop7: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 263.478217][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.478217][ T4484] loop7: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 263.500125][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.500125][ T4484] loop7: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 263.514507][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.514507][ T4484] loop7: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 263.528593][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.528593][ T4484] loop7: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 263.542861][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.542861][ T4484] loop7: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 263.558992][ T4484] kworker/u8:56: attempt to access beyond end of device [ 263.558992][ T4484] loop7: rw=1, sector=1928, nr_sectors = 32 limit=256 [ 263.726007][T20911] 9pnet_fd: Insufficient options for proto=fd [ 263.802437][T20919] sd 0:0:1:0: device reset [ 264.085916][T20947] SELinux: ebitmap: truncated map [ 264.098927][T20947] SELinux: failed to load policy [ 264.237719][T20960] lo speed is unknown, defaulting to 1000 [ 264.257742][T20960] hsr0 speed is unknown, defaulting to 1000 [ 264.615062][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 264.615079][ T29] audit: type=1400 audit(2842.591:9621): avc: denied { associate } for pid=21001 comm="syz.5.7305" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 264.798385][T21018] netlink: 'syz.5.7314': attribute type 21 has an invalid length. [ 264.913484][T21022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.996805][T21022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.036038][T21035] openvswitch: netlink: Message has 6 unknown bytes. [ 265.094394][T21033] SELinux: failed to load policy [ 265.141238][T21022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.211120][ T29] audit: type=1326 audit(2843.191:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21047 comm="syz.4.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.235541][T21022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.282179][ T29] audit: type=1326 audit(2843.221:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21047 comm="syz.4.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.305792][ T29] audit: type=1326 audit(2843.221:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21047 comm="syz.4.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.328841][ T29] audit: type=1400 audit(2843.251:9625): avc: denied { getopt } for pid=21049 comm="syz.4.7330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.375391][ T29] audit: type=1326 audit(2843.341:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.4.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.398658][ T29] audit: type=1326 audit(2843.341:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.4.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.421907][ T29] audit: type=1326 audit(2843.341:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.4.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.445160][ T29] audit: type=1326 audit(2843.341:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.4.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15846ad710 code=0x7ffc0000 [ 265.468270][ T29] audit: type=1326 audit(2843.341:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.4.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 265.557755][ T4476] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.576011][ T4476] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.607427][ T4476] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.615672][ T4476] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.831681][T21095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.557642][T21106] netlink: 'syz.6.7353': attribute type 10 has an invalid length. [ 266.599238][T21116] netlink: 'syz.6.7353': attribute type 10 has an invalid length. [ 266.607164][T21116] __nla_validate_parse: 22 callbacks suppressed [ 266.607206][T21116] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7353'. [ 266.649284][T21116] batadv0: entered allmulticast mode [ 266.660148][T21116] bridge0: port 3(batadv0) entered blocking state [ 266.666674][T21116] bridge0: port 3(batadv0) entered disabled state [ 266.688652][T21116] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 266.897905][T21141] loop5: detected capacity change from 0 to 128 [ 266.920599][T21141] EXT4-fs: Ignoring removed nobh option [ 266.990770][T21141] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.075795][T21160] loop6: detected capacity change from 0 to 256 [ 267.119455][T21160] FAT-fs (loop6): Directory bread(block 64) failed [ 267.143666][T21160] FAT-fs (loop6): Directory bread(block 65) failed [ 267.154359][T21160] FAT-fs (loop6): Directory bread(block 66) failed [ 267.164717][T21162] loop7: detected capacity change from 0 to 512 [ 267.174565][T21160] FAT-fs (loop6): Directory bread(block 67) failed [ 267.183349][T21162] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 267.186398][T21160] FAT-fs (loop6): Directory bread(block 68) failed [ 267.202084][T19556] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.212249][T21160] FAT-fs (loop6): Directory bread(block 69) failed [ 267.223009][T21160] FAT-fs (loop6): Directory bread(block 70) failed [ 267.234097][T21160] FAT-fs (loop6): Directory bread(block 71) failed [ 267.244679][T21160] FAT-fs (loop6): Directory bread(block 72) failed [ 267.253328][T21160] FAT-fs (loop6): Directory bread(block 73) failed [ 267.404410][T21171] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.411888][T21171] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.477927][T21171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.490055][T21171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.535274][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.564589][T21172] lo speed is unknown, defaulting to 1000 [ 267.576492][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.593165][T21172] hsr0 speed is unknown, defaulting to 1000 [ 267.611751][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.646392][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.726305][T21178] loop7: detected capacity change from 0 to 512 [ 267.797667][T21178] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.804732][T21178] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 267.862525][T21178] EXT4-fs (loop7): 1 truncate cleaned up [ 267.878088][T21178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.069303][T21186] Falling back ldisc for ttyS3. [ 268.242305][T21205] netlink: 'syz.4.7395': attribute type 10 has an invalid length. [ 268.277089][T21205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.299653][T21205] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.307234][T21208] netlink: 'syz.4.7395': attribute type 10 has an invalid length. [ 268.316185][T21208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7395'. [ 268.352766][T21208] batadv0: entered promiscuous mode [ 268.358219][T21208] batadv0: entered allmulticast mode [ 268.390526][T21208] bond0: (slave batadv0): Releasing backup interface [ 268.407474][T21208] bridge0: port 3(batadv0) entered blocking state [ 268.414038][T21208] bridge0: port 3(batadv0) entered disabled state [ 268.500569][T21225] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.7403'. [ 268.503100][T21217] macvtap1: entered allmulticast mode [ 268.510277][T21225] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 268.515481][T21217] bridge0: entered allmulticast mode [ 268.535279][T21217] bridge0: port 3(macvtap1) entered blocking state [ 268.542096][T21217] bridge0: port 3(macvtap1) entered disabled state [ 268.569003][T21217] bridge0: left allmulticast mode [ 268.611109][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 268.620473][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 268.754692][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.067253][T21262] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.141805][T21262] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.242147][T21262] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.290986][T21262] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.338953][T21289] bridge0: port 3(batadv0) entered disabled state [ 269.351973][T21289] bridge_slave_0: left allmulticast mode [ 269.357770][T21289] bridge_slave_0: left promiscuous mode [ 269.363556][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.390589][T21289] bridge_slave_1: left allmulticast mode [ 269.396328][T21289] bridge_slave_1: left promiscuous mode [ 269.402054][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.419005][T21296] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7436'. [ 269.440244][T21289] bond0: (slave bond_slave_0): Releasing backup interface [ 269.475766][T21289] bond0: (slave bond_slave_1): Releasing backup interface [ 269.515506][T21289] team0: Port device team_slave_0 removed [ 269.525626][T21301] loop6: detected capacity change from 0 to 128 [ 269.537924][T21289] team0: Port device team_slave_1 removed [ 269.556361][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.563850][T21289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.583859][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.591372][T21289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.616707][T21301] EXT4-fs: Ignoring removed nobh option [ 269.698191][ T4476] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.729079][ T4484] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.764071][ T4484] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.786304][ T4484] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.795330][T21301] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.822259][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7443'. [ 269.939674][T16894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.979804][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 269.979822][ T29] audit: type=1326 audit(2847.961:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 270.032545][ T29] audit: type=1326 audit(2847.991:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 270.055688][ T29] audit: type=1326 audit(5426.002:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 270.078790][ T29] audit: type=1326 audit(5426.012:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.101900][ T29] audit: type=1326 audit(5426.012:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.125015][ T29] audit: type=1326 audit(5426.012:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.134128][T21326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21326 comm=syz.1.7450 [ 270.148141][ T29] audit: type=1326 audit(5426.012:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.183591][ T29] audit: type=1326 audit(5426.012:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.206927][ T29] audit: type=1326 audit(5426.012:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.230048][ T29] audit: type=1326 audit(5426.012:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.6.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 270.272875][T21331] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 270.289996][T21331] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 270.312426][T21334] IPv4: Oversized IP packet from 127.202.26.0 [ 270.327449][T21337] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 270.417609][T21349] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 270.538317][T21367] atomic_op ffff888104616528 conn xmit_atomic 0000000000000000 [ 270.700014][T21390] loop4: detected capacity change from 0 to 1024 [ 270.709604][T21390] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.720732][T21390] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.739180][T21390] JBD2: no valid journal superblock found [ 270.744980][T21390] EXT4-fs (loop4): Could not load journal inode [ 270.760070][T21390] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 270.760092][T21396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21396 comm=syz.6.7481 [ 270.877494][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7486'. [ 270.886708][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7486'. [ 270.916674][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7486'. [ 270.934769][T21412] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21412 comm=syz.6.7489 [ 271.125179][T21435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21435 comm=syz.7.7498 [ 271.234599][T21445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21445 comm=syz.4.7503 [ 271.459542][T21470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21470 comm=syz.1.7513 [ 271.485216][T21474] netlink: 'syz.5.7515': attribute type 10 has an invalid length. [ 271.512588][T21474] team0: Port device dummy0 added [ 271.537151][T21480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21480 comm=syz.7.7517 [ 271.604714][T21482] bridge_slave_0: left allmulticast mode [ 271.610444][T21482] bridge_slave_0: left promiscuous mode [ 271.616173][T21482] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.629782][T21482] bridge_slave_1: left allmulticast mode [ 271.635500][T21482] bridge_slave_1: left promiscuous mode [ 271.641278][T21482] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.680052][T21482] team0: Port device team_slave_0 removed [ 271.700623][T21482] team0: Port device team_slave_1 removed [ 271.724303][T21482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.731844][T21482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.739617][T21499] __nla_validate_parse: 15 callbacks suppressed [ 271.739634][T21499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7525'. [ 271.767072][T21482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.774495][T21482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.837725][T12769] hsr0 speed is unknown, defaulting to 1000 [ 271.853355][T21507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21507 comm=syz.4.7529 [ 271.910406][T21512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7530'. [ 272.168917][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7540'. [ 272.868516][T21576] team0: Port device dummy0 removed [ 272.891033][T21576] bridge_slave_0: left allmulticast mode [ 272.896978][T21576] bridge_slave_0: left promiscuous mode [ 272.902825][T21576] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.949132][T21576] bridge_slave_1: left allmulticast mode [ 272.954921][T21576] bridge_slave_1: left promiscuous mode [ 272.961002][T21576] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.978433][T21576] bond0: (slave bond_slave_0): Releasing backup interface [ 273.018016][T21576] bond0: (slave bond_slave_1): Releasing backup interface [ 273.034803][T21576] team0: Port device team_slave_0 removed [ 273.042190][T21576] team0: Port device team_slave_1 removed [ 273.048491][T21576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.056302][T21576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.371428][T21582] bridge0: entered promiscuous mode [ 273.381542][T21582] macsec1: entered promiscuous mode [ 273.403725][T21582] bridge0: port 3(macsec1) entered blocking state [ 273.410333][T21582] bridge0: port 3(macsec1) entered disabled state [ 273.434646][T21582] macsec1: entered allmulticast mode [ 273.440089][T21582] bridge0: entered allmulticast mode [ 273.462098][T21582] macsec1: left allmulticast mode [ 273.467299][T21582] bridge0: left allmulticast mode [ 273.478223][T21582] bridge0: left promiscuous mode [ 273.957407][T21607] loop7: detected capacity change from 0 to 128 [ 273.973888][T21607] EXT4-fs: Ignoring removed nobh option [ 273.991802][T21607] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.018019][T21611] loop5: detected capacity change from 0 to 1024 [ 274.041059][T21611] EXT4-fs: Ignoring removed bh option [ 274.067679][T21611] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 274.112240][T21611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.222565][T19556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.267433][T21633] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=21633 comm=syz.1.7584 [ 274.290657][T21632] loop5: detected capacity change from 0 to 512 [ 274.320131][T21632] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 274.346800][T21632] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7582: bg 0: block 104: invalid block bitmap [ 274.346896][T16895] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.415610][T21632] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 274.430828][T21632] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7582: invalid indirect mapped block 1 (level 1) [ 274.453675][T21632] EXT4-fs (loop5): 1 truncate cleaned up [ 274.467917][T21632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.519161][T21648] IPVS: stopping master sync thread 21649 ... [ 274.550333][T19556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.605937][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7592'. [ 274.627335][T21657] bridge0: port 1(batadv1) entered blocking state [ 274.633917][T21657] bridge0: port 1(batadv1) entered disabled state [ 274.666154][T21657] batadv1: entered allmulticast mode [ 274.672022][T21657] batadv1: entered promiscuous mode [ 274.881508][T21674] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7602'. [ 275.020461][T21678] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 275.080846][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 275.080865][ T29] audit: type=1326 audit(5431.063:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 275.130713][ T4484] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 275.140238][ T4484] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 275.177544][ T29] audit: type=1326 audit(5431.063:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 275.200960][ T29] audit: type=1326 audit(5431.063:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 275.224196][ T29] audit: type=1326 audit(5431.073:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9800deec9 code=0x7ffc0000 [ 275.247438][ T29] audit: type=1326 audit(5431.143:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21687 comm="syz.6.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 275.270652][ T29] audit: type=1326 audit(5431.143:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21687 comm="syz.6.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 275.293958][ T29] audit: type=1326 audit(5431.143:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21687 comm="syz.6.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 275.317443][ T29] audit: type=1326 audit(5431.153:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21687 comm="syz.6.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 275.340594][ T29] audit: type=1326 audit(5431.153:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21687 comm="syz.6.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 275.363692][ T29] audit: type=1326 audit(5431.153:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21687 comm="syz.6.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 275.388872][T21688] loop6: detected capacity change from 0 to 1024 [ 275.399205][T21688] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 275.452025][T21688] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7608: Invalid block bitmap block 0 in block_group 0 [ 275.466253][T21688] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.7608: Failed to acquire dquot type 0 [ 275.483430][T21688] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.7608: Freeing blocks not in datazone - block = 0, count = 4096 [ 275.502921][T21688] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7608: Invalid inode bitmap blk 0 in block_group 0 [ 275.516176][T21688] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 275.525126][T21688] EXT4-fs (loop6): 1 orphan inode deleted [ 275.534557][ T4484] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:56: Failed to release dquot type 0 [ 275.537983][T21688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.598548][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7614'. [ 275.657515][T21706] netlink: '+}[@': attribute type 7 has an invalid length. [ 275.676028][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.796246][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7618'. [ 275.831742][T21717] loop6: detected capacity change from 0 to 1024 [ 275.842369][T21717] EXT4-fs: test_dummy_encryption option not supported [ 275.861672][T21718] syz.1.7620: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 275.876355][T21718] CPU: 1 UID: 0 PID: 21718 Comm: syz.1.7620 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.876396][T21718] Tainted: [W]=WARN [ 275.876403][T21718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.876444][T21718] Call Trace: [ 275.876451][T21718] [ 275.876460][T21718] __dump_stack+0x1d/0x30 [ 275.876481][T21718] dump_stack_lvl+0xe8/0x140 [ 275.876504][T21718] dump_stack+0x15/0x1b [ 275.876523][T21718] warn_alloc+0x12b/0x1a0 [ 275.876647][T21718] __vmalloc_node_range_noprof+0x9c/0xe00 [ 275.876690][T21718] ? __futex_wait+0x1ff/0x260 [ 275.876727][T21718] ? __pfx_futex_wake_mark+0x10/0x10 [ 275.876781][T21718] ? __rcu_read_unlock+0x4f/0x70 [ 275.876808][T21718] ? avc_has_perm_noaudit+0x1b1/0x200 [ 275.876844][T21718] ? should_fail_ex+0x30/0x280 [ 275.876875][T21718] ? xskq_create+0x36/0xe0 [ 275.876905][T21718] vmalloc_user_noprof+0x7d/0xb0 [ 275.877106][T21718] ? xskq_create+0x80/0xe0 [ 275.877186][T21718] xskq_create+0x80/0xe0 [ 275.877204][T21718] xsk_init_queue+0x95/0xf0 [ 275.877242][T21718] xsk_setsockopt+0x3f5/0x640 [ 275.877340][T21718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.877389][T21718] __sys_setsockopt+0x184/0x200 [ 275.877421][T21718] __x64_sys_setsockopt+0x64/0x80 [ 275.877450][T21718] x64_sys_call+0x20ec/0x2ff0 [ 275.877476][T21718] do_syscall_64+0xd2/0x200 [ 275.877550][T21718] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 275.877580][T21718] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 275.877616][T21718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.877643][T21718] RIP: 0033:0x7f0b2810eec9 [ 275.877716][T21718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.877788][T21718] RSP: 002b:00007f0b26b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.877814][T21718] RAX: ffffffffffffffda RBX: 00007f0b28365fa0 RCX: 00007f0b2810eec9 [ 275.877830][T21718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 275.877846][T21718] RBP: 00007f0b28191f91 R08: 0000000000000004 R09: 0000000000000000 [ 275.877861][T21718] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.877877][T21718] R13: 00007f0b28366038 R14: 00007f0b28365fa0 R15: 00007ffd77f837f8 [ 275.877902][T21718] [ 275.877910][T21718] Mem-Info: [ 276.107002][T21718] active_anon:22679 inactive_anon:36 isolated_anon:0 [ 276.107002][T21718] active_file:27860 inactive_file:2381 isolated_file:0 [ 276.107002][T21718] unevictable:0 dirty:349 writeback:0 [ 276.107002][T21718] slab_reclaimable:3865 slab_unreclaimable:34232 [ 276.107002][T21718] mapped:28960 shmem:17221 pagetables:1234 [ 276.107002][T21718] sec_pagetables:0 bounce:0 [ 276.107002][T21718] kernel_misc_reclaimable:0 [ 276.107002][T21718] free:1777348 free_pcp:26521 free_cma:0 [ 276.152329][T21718] Node 0 active_anon:90832kB inactive_anon:144kB active_file:111440kB inactive_file:9524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115840kB dirty:1396kB writeback:0kB shmem:68884kB kernel_stack:5424kB pagetables:4936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.180121][T21718] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.208852][T21718] lowmem_reserve[]: 0 2883 7862 7862 [ 276.214280][T21718] Node 0 DMA32 free:2949300kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952832kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 276.244678][T21718] lowmem_reserve[]: 0 0 4978 4978 [ 276.249842][T21718] Node 0 Normal free:4144268kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90948kB inactive_anon:144kB active_file:111440kB inactive_file:9524kB unevictable:0kB writepending:1396kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:102648kB local_pcp:88172kB free_cma:0kB [ 276.282703][T21718] lowmem_reserve[]: 0 0 0 0 [ 276.287743][T21718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.300550][T21718] Node 0 DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949300kB [ 276.316833][T21718] Node 0 Normal: 1308*4kB (UME) 672*8kB (UME) 421*16kB (UME) 251*32kB (UE) 227*64kB (UME) 151*128kB (U) 115*256kB (UME) 119*512kB (UME) 59*1024kB (UME) 21*2048kB (UME) 950*4096kB (UM) = 4144224kB [ 276.336624][T21718] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 276.345975][T21718] 47486 total pagecache pages [ 276.350673][T21718] 50 pages in swap cache [ 276.355004][T21718] Free swap = 124796kB [ 276.359298][T21718] Total swap = 124996kB [ 276.363461][T21718] 2097051 pages RAM [ 276.367294][T21718] 0 pages HighMem/MovableOnly [ 276.371976][T21718] 80443 pages reserved [ 276.804683][T21778] tipc: Started in network mode [ 276.809671][T21778] tipc: Node identity ac14142f, cluster identity 4711 [ 276.835778][T21778] tipc: New replicast peer: 0.0.0.0 [ 276.841132][T21778] tipc: Enabled bearer , priority 10 [ 276.859783][T21784] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 277.082095][T21799] vlan2: entered allmulticast mode [ 277.087344][T21799] bridge_slave_0: entered allmulticast mode [ 277.236057][T21812] loop7: detected capacity change from 0 to 512 [ 277.251342][T21812] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 277.280488][T21812] EXT4-fs (loop7): 1 truncate cleaned up [ 277.321407][T21812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.334343][T21781] loop5: detected capacity change from 0 to 32768 [ 277.450864][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.626901][T21845] vlan1: entered allmulticast mode [ 277.710056][T21860] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.774297][T21860] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.837688][ T9944] tipc: Node number set to 2886997039 [ 277.880984][T21860] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.934634][T21866] atomic_op ffff8881539ab928 conn xmit_atomic 0000000000000000 [ 277.944943][T21860] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.002139][T21881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7695'. [ 278.054169][ T4442] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.070383][ T4442] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.091288][ T4442] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.107902][ T4442] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.185843][T21887] team_slave_0: entered promiscuous mode [ 278.192844][T21887] ipvlan0: entered promiscuous mode [ 278.203011][T21887] ipvlan0: left promiscuous mode [ 278.205888][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7703'. [ 278.218671][T21887] team_slave_0: left promiscuous mode [ 278.324138][T21910] netlink: 'syz.7.7708': attribute type 29 has an invalid length. [ 278.342371][T21910] netlink: 'syz.7.7708': attribute type 29 has an invalid length. [ 278.351264][T21910] netlink: 500 bytes leftover after parsing attributes in process `syz.7.7708'. [ 278.509094][T21925] vlan2: entered allmulticast mode [ 278.531949][T21929] loop4: detected capacity change from 0 to 764 [ 278.792590][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7732'. [ 278.919477][T21979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21979 comm=syz.4.7739 [ 278.921723][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7735'. [ 278.932323][T21979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21979 comm=syz.4.7739 [ 279.129533][T22011] rdma_op ffff8881539a9180 conn xmit_rdma 0000000000000000 [ 279.177028][T22019] netlink: 'syz.4.7758': attribute type 30 has an invalid length. [ 279.181606][T22016] lo speed is unknown, defaulting to 1000 [ 279.228454][T22016] hsr0 speed is unknown, defaulting to 1000 [ 279.501612][T22051] syzkaller1: entered promiscuous mode [ 279.507286][T22051] syzkaller1: entered allmulticast mode [ 279.705697][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7777'. [ 279.871949][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7781'. [ 279.881504][T22072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7781'. [ 279.890596][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7781'. [ 279.899747][T22072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7781'. [ 279.909268][T22072] netlink: 'syz.1.7781': attribute type 6 has an invalid length. [ 280.534233][T22087] loop4: detected capacity change from 0 to 1024 [ 280.558530][T22087] EXT4-fs: inline encryption not supported [ 280.564680][T22087] EXT4-fs: Ignoring removed bh option [ 280.706662][T22103] tipc: Started in network mode [ 280.711593][T22103] tipc: Node identity fffeffff, cluster identity 4711 [ 280.718454][T22103] tipc: Node number set to 4294901759 [ 280.819975][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 280.819993][ T29] audit: type=1326 audit(5436.804:9979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15846a5d67 code=0x7ffc0000 [ 280.863120][T22120] syz_tun: entered allmulticast mode [ 280.875059][ T29] audit: type=1326 audit(5436.834:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f158464af79 code=0x7ffc0000 [ 280.889689][T22119] syz_tun: left allmulticast mode [ 280.898209][ T29] audit: type=1326 audit(5436.834:9981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15846a5d67 code=0x7ffc0000 [ 280.926460][ T29] audit: type=1326 audit(5436.834:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f158464af79 code=0x7ffc0000 [ 280.949885][ T29] audit: type=1326 audit(5436.834:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 280.973277][ T29] audit: type=1326 audit(5436.834:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15846aeec9 code=0x7ffc0000 [ 280.996426][ T29] audit: type=1326 audit(5436.834:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15846a5d67 code=0x7ffc0000 [ 281.019435][ T29] audit: type=1326 audit(5436.834:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f158464af79 code=0x7ffc0000 [ 281.042795][ T29] audit: type=1326 audit(5436.834:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15846a5d67 code=0x7ffc0000 [ 281.066032][ T29] audit: type=1326 audit(5436.834:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.4.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f158464af79 code=0x7ffc0000 [ 281.195754][T22143] netlink: 'syz.7.7813': attribute type 6 has an invalid length. [ 281.362305][T22162] lo speed is unknown, defaulting to 1000 [ 281.378595][T22162] hsr0 speed is unknown, defaulting to 1000 [ 281.451471][T22168] lo speed is unknown, defaulting to 1000 [ 281.468875][T22171] v: renamed from ip6_vti0 (while UP) [ 281.482983][T22168] hsr0 speed is unknown, defaulting to 1000 [ 281.533610][T22180] tipc: Started in network mode [ 281.538566][T22180] tipc: Node identity fffeffff, cluster identity 4711 [ 281.545575][T22180] tipc: Node number set to 4294901759 [ 281.693645][T22189] netlink: 'syz.4.7833': attribute type 6 has an invalid length. [ 281.951518][T22217] loop6: detected capacity change from 0 to 512 [ 281.969445][T22217] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.978089][T22217] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 281.995086][T22217] EXT4-fs (loop6): 1 truncate cleaned up [ 282.031343][T22217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.916675][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.972339][T22270] netlink: 'syz.6.7865': attribute type 6 has an invalid length. [ 283.479707][T22295] __nla_validate_parse: 15 callbacks suppressed [ 283.479751][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7879'. [ 283.593582][T22309] macsec1: entered promiscuous mode [ 283.599084][T22309] bridge0: entered promiscuous mode [ 283.611793][T22309] bridge0: port 2(macsec1) entered blocking state [ 283.618398][T22309] bridge0: port 2(macsec1) entered disabled state [ 283.625370][T22309] macsec1: entered allmulticast mode [ 283.630724][T22309] bridge0: entered allmulticast mode [ 283.636553][T22309] macsec1: left allmulticast mode [ 283.641666][T22309] bridge0: left allmulticast mode [ 283.648021][T22309] bridge0: left promiscuous mode [ 283.747917][T22318] netlink: 'syz.7.7886': attribute type 10 has an invalid length. [ 283.749593][T22318] team0: Port device dummy0 added [ 284.687978][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7900'. [ 284.697156][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7900'. [ 284.706243][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7900'. [ 284.718558][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7900'. [ 284.727614][T22350] netlink: 'syz.5.7900': attribute type 6 has an invalid length. [ 284.762899][T22353] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=22353 comm=syz.5.7902 [ 285.083194][ T4451] batadv1: left allmulticast mode [ 285.088492][ T4451] batadv1: left promiscuous mode [ 285.093893][ T4451] bridge0: port 1(batadv1) entered disabled state [ 285.136639][ T4451] bond0 (unregistering): Released all slaves [ 285.147602][T22357] lo speed is unknown, defaulting to 1000 [ 285.153737][T22357] hsr0 speed is unknown, defaulting to 1000 [ 285.196441][ T4451] tipc: Left network mode [ 285.207454][ T4451] hsr_slave_0: left promiscuous mode [ 285.213169][ T4451] hsr_slave_1: left promiscuous mode [ 285.275864][T22357] chnl_net:caif_netlink_parms(): no params data found [ 285.312341][T22357] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.319504][T22357] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.327443][T22357] bridge_slave_0: entered allmulticast mode [ 285.334137][T22357] bridge_slave_0: entered promiscuous mode [ 285.341061][T22357] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.348234][T22357] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.355661][T22357] bridge_slave_1: entered allmulticast mode [ 285.362674][T22357] bridge_slave_1: entered promiscuous mode [ 285.380417][T22357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.390983][T22357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.411112][T22357] team0: Port device team_slave_0 added [ 285.418111][T22357] team0: Port device team_slave_1 added [ 285.435027][T22357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.442174][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.468380][T22357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.480263][T22357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.487294][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.513426][T22357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.542954][T22357] hsr_slave_0: entered promiscuous mode [ 285.549080][T22357] hsr_slave_1: entered promiscuous mode [ 285.555237][T22357] debugfs: 'hsr0' already exists in 'hsr' [ 285.560965][T22357] Cannot create hsr debugfs directory [ 285.601493][ T4451] IPVS: stop unused estimator thread 0... [ 285.627342][T22357] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.715274][T22357] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.765186][T22357] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.815505][T22357] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.893371][T22357] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 285.902877][T22357] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 285.912324][T22357] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 285.921682][T22357] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 285.958303][T22357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.971319][T22357] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.981502][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.988626][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.000017][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.007126][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.074856][T22357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.186713][T22357] veth0_vlan: entered promiscuous mode [ 286.194828][T22357] veth1_vlan: entered promiscuous mode [ 286.210532][T22357] veth0_macvtap: entered promiscuous mode [ 286.217868][T22357] veth1_macvtap: entered promiscuous mode [ 286.228622][T22357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.239898][T22357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.251947][ T4493] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.261736][ T4493] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.270763][ T4493] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.281128][ T4493] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.365556][T22414] loop8: detected capacity change from 0 to 512 [ 286.372512][T22414] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.388358][T22414] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 286.414606][T22414] EXT4-fs (loop8): 1 truncate cleaned up [ 286.421181][T22414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.444219][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 286.444246][ T29] audit: type=1326 audit(5442.425:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x0 [ 286.675666][T22435] loop7: detected capacity change from 0 to 512 [ 286.683357][T22435] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 286.696063][T22435] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.7917: bg 0: block 104: invalid block bitmap [ 286.727104][T22435] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 286.753974][T22435] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7917: invalid indirect mapped block 1 (level 1) [ 286.869332][T22435] EXT4-fs (loop7): 1 truncate cleaned up [ 286.915399][T22435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.300014][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.419640][T22357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.696772][T22462] netlink: 'syz.8.7929': attribute type 1 has an invalid length. [ 287.704716][T22462] netlink: 'syz.8.7929': attribute type 4 has an invalid length. [ 287.712598][T22462] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.7929'. [ 287.959942][ T29] audit: type=1326 audit(5443.945:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 287.983322][ T29] audit: type=1326 audit(5443.945:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.007090][ T29] audit: type=1326 audit(5443.945:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.081570][ T29] audit: type=1326 audit(5444.035:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.105007][ T29] audit: type=1326 audit(5444.035:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.128978][ T29] audit: type=1326 audit(5444.045:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.152842][ T29] audit: type=1326 audit(5444.045:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.176247][ T29] audit: type=1326 audit(5444.045:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.199465][ T29] audit: type=1326 audit(5444.055:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22471 comm="syz.7.7933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fc0d5a3eec9 code=0x7ffc0000 [ 288.446963][T22505] loop7: detected capacity change from 0 to 512 [ 288.497789][T22505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.596354][T22520] loop8: detected capacity change from 0 to 1024 [ 288.618447][T22520] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 288.651001][T22520] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.7954: Invalid block bitmap block 0 in block_group 0 [ 288.667861][T22520] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.7954: Failed to acquire dquot type 0 [ 288.689794][T22520] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.7954: Freeing blocks not in datazone - block = 0, count = 4096 [ 288.712385][T22520] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.7954: Invalid inode bitmap blk 0 in block_group 0 [ 288.729348][ T4496] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:64: Failed to release dquot type 0 [ 288.741756][T22520] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 288.755796][T22520] EXT4-fs (loop8): 1 orphan inode deleted [ 288.761982][T22520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.806560][T22357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.812314][T22523] netlink: 'syz.1.7956': attribute type 1 has an invalid length. [ 288.823530][T22523] netlink: 'syz.1.7956': attribute type 4 has an invalid length. [ 288.831307][T22523] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7956'. [ 288.893255][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.175208][T22555] tipc: Started in network mode [ 289.180142][T22555] tipc: Node identity ac14142f, cluster identity 4711 [ 289.187122][T22555] tipc: Enabling of bearer rejected, failed to enable media [ 289.622527][T22602] vlan2: entered allmulticast mode [ 289.858720][T22618] loop6: detected capacity change from 0 to 512 [ 289.878725][T22618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.090996][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.557335][T22661] vlan1: entered allmulticast mode [ 290.742735][T22669] loop6: detected capacity change from 0 to 512 [ 290.743239][T22671] netlink: 'syz.1.8021': attribute type 13 has an invalid length. [ 290.782002][T22669] EXT4-fs (loop6): orphan cleanup on readonly fs [ 290.793293][T22669] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.8020: bad orphan inode 13 [ 290.821044][T22669] ext4_test_bit(bit=12, block=18) = 1 [ 290.826566][T22669] is_bad_inode(inode)=0 [ 290.830728][T22669] NEXT_ORPHAN(inode)=2130706432 [ 290.835845][T22669] max_ino=32 [ 290.839052][T22669] i_nlink=1 [ 290.842894][T22669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.855994][T22671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.894242][T22669] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 290.948091][T22669] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 291.034368][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.161225][T22701] loop4: detected capacity change from 0 to 512 [ 291.447278][T22723] atomic_op ffff8881537aa928 conn xmit_atomic 0000000000000000 [ 291.494694][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8045'. [ 291.517156][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 291.517175][ T29] audit: type=1400 audit(5447.506:10313): avc: denied { mount } for pid=22726 comm="syz.6.8046" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.587723][ T29] audit: type=1400 audit(5447.546:10314): avc: denied { unmount } for pid=16894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.642710][ T29] audit: type=1400 audit(5447.616:10315): avc: denied { execute } for pid=22732 comm="syz.6.8049" name="file0" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.665677][ T29] audit: type=1400 audit(5447.616:10316): avc: denied { execute_no_trans } for pid=22732 comm="syz.6.8049" path="/461/file0" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.748294][ T29] audit: type=1400 audit(5447.696:10317): avc: denied { create } for pid=22735 comm="syz.6.8051" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.768939][ T29] audit: type=1400 audit(5447.696:10318): avc: denied { write } for pid=22735 comm="syz.6.8051" name="file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.791093][ T29] audit: type=1400 audit(5447.696:10319): avc: denied { open } for pid=22735 comm="syz.6.8051" path="/462/file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.813709][T22736] loop4: detected capacity change from 0 to 8192 [ 291.813723][ T29] audit: type=1400 audit(5447.696:10320): avc: denied { ioctl } for pid=22735 comm="syz.6.8051" path="/462/file0" dev="tmpfs" ino=2399 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.884516][ T29] audit: type=1400 audit(5447.846:10321): avc: denied { ioctl } for pid=22741 comm="syz.7.8052" path="socket:[77629]" dev="sockfs" ino=77629 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.957132][ T29] audit: type=1400 audit(5447.896:10322): avc: denied { create } for pid=22743 comm="syz.7.8053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.990429][T22736] team_slave_0: entered promiscuous mode [ 292.004134][T22736] ipvlan0: entered promiscuous mode [ 292.019438][T22736] ipvlan0: left promiscuous mode [ 292.032606][T22736] team_slave_0: left promiscuous mode [ 292.052860][T22751] loop6: detected capacity change from 0 to 128 [ 292.102562][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8057'. [ 292.139345][T22753] netlink: 312 bytes leftover after parsing attributes in process `syz.7.8057'. [ 292.148678][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8057'. [ 292.257041][T22759] infiniband syz!: set down [ 292.261694][T22759] infiniband syz!: added team_slave_0 [ 292.292137][T22759] RDS/IB: syz!: added [ 292.298281][T22759] smc: adding ib device syz! with port count 1 [ 292.308183][T22759] smc: ib device syz! port 1 has pnetid [ 292.480309][T22777] loop7: detected capacity change from 0 to 1024 [ 292.492519][T22781] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 292.493825][T22777] EXT4-fs: Ignoring removed bh option [ 292.512435][T22777] EXT4-fs: inline encryption not supported [ 292.522591][T22777] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.542737][T22777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 292.551986][T22777] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8069: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.593804][T22777] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8069: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.613967][T22777] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8069: Failed to acquire dquot type 0 [ 292.627599][T22777] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 292.639125][T22777] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8069: mark_inode_dirty error [ 292.712317][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8077'. [ 292.728259][T22777] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 292.737120][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8077'. [ 292.770439][T22777] EXT4-fs (loop7): 1 orphan inode deleted [ 292.792411][T22777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.805071][ T4430] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.849993][ T4430] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 292.894003][T22777] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8069: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.961901][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.291284][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8095'. [ 293.429322][T12755] hsr0 speed is unknown, defaulting to 1000 [ 293.435448][T12755] syz1: Port: 1 Link DOWN [ 293.440160][ T4453] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.449140][ T4453] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.473098][ T4453] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.482114][ T4453] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.511515][ T4453] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.520533][ T4453] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.553954][ T4453] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.563107][ T4453] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.788138][T22868] netlink: 3 bytes leftover after parsing attributes in process `syz.8.8109'. [ 293.803584][T22868] batadv1: entered promiscuous mode [ 293.808879][T22868] batadv1: entered allmulticast mode [ 293.890613][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8114'. [ 293.924546][T22883] loop6: detected capacity change from 0 to 512 [ 293.946645][T22883] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8116: corrupted in-inode xattr: invalid ea_ino [ 293.975079][T22883] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8116: couldn't read orphan inode 15 (err -117) [ 293.990633][T22883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.014791][T22890] syzkaller1: entered promiscuous mode [ 294.020339][T22890] syzkaller1: entered allmulticast mode [ 294.027749][T22893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22893 comm=syz.1.8120 [ 294.040596][T22893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22893 comm=syz.1.8120 [ 294.048600][T22894] IPv4: Oversized IP packet from 127.202.26.0 [ 294.076447][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.207662][T22914] pimreg: entered allmulticast mode [ 294.218942][T22914] pimreg: left allmulticast mode [ 294.261064][T22924] program syz.6.8136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.279420][T22926] loop4: detected capacity change from 0 to 512 [ 294.358033][T22937] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.8138'. [ 294.380192][T22928] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.8138'. [ 294.701145][T22983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8163'. [ 294.710991][T22983] batadv0 (unregistering): left promiscuous mode [ 295.030280][T22991] lo speed is unknown, defaulting to 1000 [ 295.036485][T22991] hsr0 speed is unknown, defaulting to 1000 [ 295.279047][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8175'. [ 295.293097][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8175'. [ 295.441888][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8186'. [ 295.801433][T23068] SELinux: security policydb version 17 (MLS) not backwards compatible [ 295.816622][T23068] SELinux: failed to load policy [ 296.130797][T23087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8209'. [ 296.398578][T23063] loop7: detected capacity change from 0 to 32768 [ 296.412539][T23102] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 296.454094][T23063] loop7: p1 p3 < > [ 296.556190][T23118] lo speed is unknown, defaulting to 1000 [ 296.582806][T23118] hsr0 speed is unknown, defaulting to 1000 [ 296.590447][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 296.590497][ T29] audit: type=1326 audit(5452.577:10679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.653110][T23122] SELinux: failed to load policy [ 296.662272][ T29] audit: type=1326 audit(5452.587:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.685447][ T29] audit: type=1326 audit(5452.587:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.708652][ T29] audit: type=1326 audit(5452.587:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.732017][ T29] audit: type=1326 audit(5452.587:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.755234][ T29] audit: type=1326 audit(5452.587:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.778614][ T29] audit: type=1326 audit(5452.587:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.8.8226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.858230][ T29] audit: type=1326 audit(5452.797:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23126 comm="syz.8.8227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.881528][ T29] audit: type=1326 audit(5452.797:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23126 comm="syz.8.8227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.904872][ T29] audit: type=1326 audit(5452.797:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23126 comm="syz.8.8227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ffbae5feec9 code=0x7ffc0000 [ 296.999093][T23058] syz.7.8197 (23058) used greatest stack depth: 7320 bytes left [ 297.032302][T13189] IPVS: starting estimator thread 0... [ 297.122200][T23143] IPVS: using max 2400 ests per chain, 120000 per kthread [ 297.198900][ T4473] IPVS: stop unused estimator thread 0... [ 297.482478][T23194] netlink: 'syz.4.8258': attribute type 1 has an invalid length. [ 297.490360][T23194] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.8258'. [ 297.496671][T23190] loop6: detected capacity change from 0 to 2048 [ 297.616735][T23190] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.632961][T23190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8256'. [ 297.713903][T16894] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 297.920561][T23241] lo speed is unknown, defaulting to 1000 [ 297.949916][T23241] hsr0 speed is unknown, defaulting to 1000 [ 298.048752][T23253] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 298.048752][T23253] program syz.4.8281 not setting count and/or reply_len properly [ 298.099254][T23256] netlink: 'syz.7.8282': attribute type 1 has an invalid length. [ 298.159538][T23256] bond0: (slave geneve2): making interface the new active one [ 298.167540][T23256] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 298.457809][T23282] loop8: detected capacity change from 0 to 512 [ 298.464929][T23282] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.484379][T23282] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.8294: Failed to acquire dquot type 1 [ 298.499395][T23282] EXT4-fs (loop8): 1 truncate cleaned up [ 298.506059][T23282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.576231][T23282] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.773559][T23313] geneve2: entered promiscuous mode [ 298.778846][T23313] geneve2: entered allmulticast mode [ 298.826329][ T4447] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.826383][ T4447] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.826446][ T4447] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.826512][ T4447] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 299.076172][T23351] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 299.485966][T23401] hub 6-0:1.0: USB hub found [ 299.490679][T23401] hub 6-0:1.0: 8 ports detected [ 299.505072][T23405] loop6: detected capacity change from 0 to 4096 [ 299.522416][T23411] loop4: detected capacity change from 0 to 128 [ 299.523391][T23405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.575805][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.612360][T23418] SELinux: policydb version -1800674767 does not match my version range 15-35 [ 299.621998][T23418] SELinux: failed to load policy [ 299.674451][T23426] __nla_validate_parse: 4 callbacks suppressed [ 299.674473][T23426] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8360'. [ 299.798054][T23441] loop8: detected capacity change from 0 to 764 [ 299.829867][T23444] lo speed is unknown, defaulting to 1000 [ 299.840557][T23444] hsr0 speed is unknown, defaulting to 1000 [ 300.134933][T23466] loop7: detected capacity change from 0 to 512 [ 300.142596][T23466] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 300.172569][T23466] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.8377: bg 0: block 104: invalid block bitmap [ 300.186499][T23466] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 300.208328][T23466] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8377: invalid indirect mapped block 1 (level 1) [ 300.230039][T23466] EXT4-fs (loop7): 1 truncate cleaned up [ 300.236594][T23466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.269038][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.506592][T23508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.583194][T23521] random: crng reseeded on system resumption [ 301.019849][T23564] lo speed is unknown, defaulting to 1000 [ 301.026294][T23564] hsr0 speed is unknown, defaulting to 1000 [ 301.623228][T23576] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8424'. [ 301.650306][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 301.650325][ T29] audit: type=1400 audit(5457.638:10842): avc: denied { read } for pid=23581 comm="syz.8.8427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.698415][T23585] netlink: 'syz.1.8428': attribute type 3 has an invalid length. [ 301.698607][T23577] hub 6-0:1.0: USB hub found [ 301.714469][T23577] hub 6-0:1.0: 8 ports detected [ 301.734613][ T29] audit: type=1400 audit(5457.728:10843): avc: denied { ioctl } for pid=23581 comm="syz.8.8427" path="socket:[80477]" dev="sockfs" ino=80477 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 302.007434][ T29] audit: type=1326 audit(5457.988:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23620 comm="syz.1.8443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.030655][ T29] audit: type=1326 audit(5457.988:10845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23620 comm="syz.1.8443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.040500][T23625] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 302.053973][ T29] audit: type=1326 audit(5457.988:10846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23620 comm="syz.1.8443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.054012][ T29] audit: type=1326 audit(5457.988:10847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23620 comm="syz.1.8443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.067580][ T29] audit: type=1326 audit(5458.058:10848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.134697][T23625] SELinux: failed to load policy [ 302.137812][ T29] audit: type=1326 audit(5458.128:10849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.162833][ T29] audit: type=1326 audit(5458.128:10850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.186117][ T29] audit: type=1326 audit(5458.128:10851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 302.258677][T23635] ip6gretap1: entered allmulticast mode [ 302.328243][T23646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 302.338757][T23646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 302.349241][T23646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.449401][T23646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 302.459788][T23646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 302.470414][T23646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.510210][T23669] netlink: 'syz.7.8464': attribute type 3 has an invalid length. [ 302.555998][T23646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 302.566525][T23646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 302.576935][T23646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.636108][T23681] loop7: detected capacity change from 0 to 128 [ 302.655641][T23646] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 302.666007][T23646] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 302.676368][T23646] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.747004][ T4437] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.755307][ T4437] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 302.763622][ T4437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.796689][ T4437] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.804998][ T4437] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 302.813182][ T4437] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.869344][T23699] lo speed is unknown, defaulting to 1000 [ 302.878427][T23699] hsr0 speed is unknown, defaulting to 1000 [ 302.887917][ T4437] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.896325][ T4437] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 302.904571][ T4437] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.928719][ T4437] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.937054][ T4437] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 302.945320][ T4437] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.087127][T23717] netlink: 'syz.8.8486': attribute type 13 has an invalid length. [ 303.095264][T23717] netlink: 164 bytes leftover after parsing attributes in process `syz.8.8486'. [ 303.114487][T23717] syz_tun: refused to change device tx_queue_len [ 303.208843][T23728] loop4: detected capacity change from 0 to 128 [ 303.278749][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8494'. [ 303.445592][T23754] loop8: detected capacity change from 0 to 128 [ 303.459202][T23758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23758 comm=syz.6.8503 [ 303.472048][T23758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23758 comm=syz.6.8503 [ 303.542420][T23764] syzkaller1: entered promiscuous mode [ 303.548238][T23764] syzkaller1: entered allmulticast mode [ 303.599192][T23776] loop8: detected capacity change from 0 to 128 [ 303.606231][T23776] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 303.769425][T23788] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8518'. [ 304.208836][T23836] netlink: 'syz.1.8551': attribute type 1 has an invalid length. [ 304.243546][T23836] bond0: (slave geneve2): making interface the new active one [ 304.252055][T23836] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 304.260779][ T4484] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.280289][ T4484] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.289166][T23840] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8542'. [ 304.302854][ T4484] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.311330][T23838] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8542'. [ 304.324764][ T4484] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.004424][T23848] netlink: 288 bytes leftover after parsing attributes in process `syz.8.8546'. [ 305.053295][T23853] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8555'. [ 305.063071][T23849] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8555'. [ 305.987299][T23873] IPv4: Oversized IP packet from 127.202.26.0 [ 306.133806][T23876] netlink: 'syz.7.8557': attribute type 13 has an invalid length. [ 306.141814][T23876] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8557'. [ 306.154596][T23876] syz_tun: refused to change device tx_queue_len [ 306.284736][T23886] netlink: 'syz.8.8562': attribute type 13 has an invalid length. [ 306.317361][T23886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.471209][T23899] pimreg: entered allmulticast mode [ 306.483381][T23899] pimreg: left allmulticast mode [ 306.574245][T23903] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.581575][T23903] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.625594][T23903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.636043][T23903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.672202][ T4484] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.685715][ T4484] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.696847][ T4484] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.707559][ T4484] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.726102][T23906] IPv4: Oversized IP packet from 127.202.26.0 [ 306.815871][T23917] netlink: 'syz.7.8577': attribute type 13 has an invalid length. [ 306.826658][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 306.826675][ T29] audit: type=1326 audit(5462.819:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 306.881752][ T29] audit: type=1326 audit(5462.819:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 306.905244][ T29] audit: type=1326 audit(5462.829:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 306.928773][ T29] audit: type=1326 audit(5462.829:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 306.951993][ T29] audit: type=1326 audit(5462.829:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 306.975666][ T29] audit: type=1326 audit(5462.829:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 306.998842][ T29] audit: type=1326 audit(5462.859:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 307.022569][ T29] audit: type=1326 audit(5462.869:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 307.047067][ T29] audit: type=1326 audit(5462.879:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 307.070649][ T29] audit: type=1326 audit(5462.879:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.8576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0b2810eec9 code=0x7ffc0000 [ 307.120406][T23917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.297432][T23950] lo speed is unknown, defaulting to 1000 [ 307.309273][T23950] hsr0 speed is unknown, defaulting to 1000 [ 307.361242][T23952] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.368614][T23952] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.430024][T23952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.453977][T23952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.508280][ T4484] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.531506][ T4484] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.554856][ T4484] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.595671][ T4484] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.642261][T23958] loop6: detected capacity change from 0 to 256 [ 307.665885][T23958] binfmt_misc: register: failed to install interpreter file ./file0 [ 307.789455][T23965] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8609'. [ 307.827694][T23965] batadv0: entered promiscuous mode [ 307.833220][T23965] batadv0: entered allmulticast mode [ 308.064375][T23995] SELinux: failed to load policy [ 308.069771][ T4447] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.078350][ T4447] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 308.087066][ T4447] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.112817][ T4447] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.121285][ T4447] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 308.129672][ T4447] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.141886][ T4447] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.150485][ T4447] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 308.158867][ T4447] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.183815][T23998] lo speed is unknown, defaulting to 1000 [ 308.184109][ T4447] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.198112][ T4447] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 308.206472][ T4447] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.222118][T23998] hsr0 speed is unknown, defaulting to 1000 [ 308.294608][T24006] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.301921][T24006] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.374227][T24006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.395916][T24006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.425485][T24022] loop4: detected capacity change from 0 to 256 [ 308.437090][T24022] binfmt_misc: register: failed to install interpreter file ./file0 [ 308.451637][ T4437] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.475808][ T4437] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.491709][ T4437] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.508492][ T4437] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.554304][T24024] loop4: detected capacity change from 0 to 2048 [ 308.580418][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8626'. [ 308.912675][T24040] netlink: 'syz.4.8645': attribute type 1 has an invalid length. [ 308.952077][T24040] bond2: (slave geneve2): making interface the new active one [ 308.960184][T24040] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 308.969670][ T4484] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.005450][ T4484] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.035829][ T4484] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.074533][ T4484] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.158803][T24055] loop7: detected capacity change from 0 to 256 [ 309.185188][T24055] binfmt_misc: register: failed to install interpreter file ./file0 [ 309.321337][T24051] loop4: detected capacity change from 0 to 32768 [ 309.373946][T24051] loop4: p1 p3 < > [ 309.767008][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8656'. [ 309.796895][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8656'. [ 309.830015][T24069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.889077][T24077] netlink: 'syz.8.8650': attribute type 1 has an invalid length. [ 309.898712][T24069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.929438][T24077] bond1: (slave geneve2): making interface the new active one [ 309.937552][T24077] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 309.946375][ T4484] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.961473][T24069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.972736][ T4484] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.004678][ T4484] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.014524][T24069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.057959][ T4484] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.113701][ T379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.144398][ T379] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.162883][ T379] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.183247][ T379] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.339707][T24120] lo speed is unknown, defaulting to 1000 [ 310.346246][T24120] hsr0 speed is unknown, defaulting to 1000 [ 310.358085][T24084] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 310.511657][T24050] syz.4.8637 (24050) used greatest stack depth: 7144 bytes left [ 310.699385][T24154] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8667'. [ 310.900901][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8682'. [ 311.002587][T24188] loop6: detected capacity change from 0 to 512 [ 311.081723][T24188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.110254][ T4447] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.134263][ T4484] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.145472][T24188] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.8677: invalid block [ 311.158346][ T4484] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.169164][T24188] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8677: invalid indirect mapped block 4294967295 (level 1) [ 311.187047][ T4484] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 311.195856][T24188] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8677: invalid indirect mapped block 4294967295 (level 1) [ 311.210575][T24188] EXT4-fs (loop6): 2 truncates cleaned up [ 311.217418][T24188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.246484][T24188] EXT4-fs error (device loop6): ext4_get_parent:1834: inode #11: comm syz.6.8677: bad parent inode number: 3 [ 311.285953][T24201] lo speed is unknown, defaulting to 1000 [ 311.293298][T24201] hsr0 speed is unknown, defaulting to 1000 [ 311.303177][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.337524][T24213] loop6: detected capacity change from 0 to 128 [ 311.375245][T24213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 311.386594][T24213] System zones: 1-3, 19-19, 35-36 [ 311.396365][T24217] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 311.399683][T24213] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 311.486130][T16894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.527459][T24232] netlink: 2 bytes leftover after parsing attributes in process `syz.8.8696'. [ 311.830403][T24257] loop4: detected capacity change from 0 to 128 [ 312.375308][T24266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8710'. [ 312.403114][T24264] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 312.403114][T24264] program syz.7.8707 not setting count and/or reply_len properly [ 312.518471][T24272] loop7: detected capacity change from 0 to 512 [ 312.562356][T24272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.712072][T24272] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.8711: invalid block [ 312.766168][T24272] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8711: invalid indirect mapped block 4294967295 (level 1) [ 312.785763][T24272] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8711: invalid indirect mapped block 4294967295 (level 1) [ 312.801040][T24272] EXT4-fs (loop7): 2 truncates cleaned up [ 312.812767][T24272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.844737][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 312.844754][ T29] audit: type=1400 audit(5468.830:11076): avc: denied { write } for pid=24283 comm="syz.1.8716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 312.972966][ T29] audit: type=1400 audit(5468.960:11077): avc: denied { read } for pid=24291 comm="syz.4.8721" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 312.995957][ T29] audit: type=1400 audit(5468.960:11078): avc: denied { open } for pid=24291 comm="syz.4.8721" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 313.041884][ T29] audit: type=1400 audit(5469.010:11079): avc: denied { ioctl } for pid=24291 comm="syz.4.8721" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 313.116870][T24272] EXT4-fs error (device loop7): ext4_get_parent:1834: inode #11: comm syz.7.8711: bad parent inode number: 3 [ 313.216616][T16895] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.489624][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8731'. [ 313.502651][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8731'. [ 313.535340][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8731'. [ 313.553077][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8731'. [ 313.593005][ T29] audit: type=1326 audit(5469.580:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.6.8735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 313.616335][ T29] audit: type=1326 audit(5469.580:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.6.8735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 313.682693][ T29] audit: type=1326 audit(5469.640:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.6.8735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 313.705887][ T29] audit: type=1326 audit(5469.640:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.6.8735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 313.729444][ T29] audit: type=1326 audit(5469.640:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.6.8735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f210fc4d710 code=0x7ffc0000 [ 313.752786][ T29] audit: type=1326 audit(5469.640:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24338 comm="syz.6.8735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210fc4eec9 code=0x7ffc0000 [ 313.852559][T24350] lo speed is unknown, defaulting to 1000 [ 313.858834][T24350] hsr0 speed is unknown, defaulting to 1000 [ 314.322569][ T10] IPVS: starting estimator thread 0... [ 314.429617][T24377] IPVS: using max 2112 ests per chain, 105600 per kthread [ 314.494217][T24385] loop4: detected capacity change from 0 to 128 [ 314.573445][ T4454] IPVS: stop unused estimator thread 0... [ 314.621711][T24398] syzkaller1: entered promiscuous mode [ 314.627272][T24398] syzkaller1: entered allmulticast mode [ 314.644311][T24397] netlink: 532 bytes leftover after parsing attributes in process `syz.7.8761'. [ 314.775504][T24408] sch_fq: defrate 4294967295 ignored. [ 314.827005][T24410] loop6: detected capacity change from 0 to 1024 [ 314.850747][T24410] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.8767: Failed to acquire dquot type 0 [ 314.878506][T24410] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 314.899145][T24410] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8767: corrupted inode contents [ 314.924915][T24410] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.8767: mark_inode_dirty error [ 314.939203][T24410] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8767: corrupted inode contents [ 314.955858][T24410] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.8767: mark_inode_dirty error [ 314.967733][T24410] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8767: corrupted inode contents [ 314.982412][T24410] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 314.991250][T24410] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.8767: corrupted inode contents [ 315.015558][T24410] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.8767: mark_inode_dirty error [ 315.027772][T24425] syzkaller0: entered promiscuous mode [ 315.033312][T24425] syzkaller0: entered allmulticast mode [ 315.039683][T24410] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 315.058602][T24410] EXT4-fs (loop6): 1 truncate cleaned up [ 315.065323][T24410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.081582][T24428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1616 sclass=netlink_route_socket pid=24428 comm=syz.1.8774 [ 315.096569][T24428] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8774'. [ 315.096986][T24410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.437306][T24474] unsupported nlmsg_type 40 [ 315.531256][T24482] loop6: detected capacity change from 0 to 512 [ 315.538243][T24482] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.605764][T24482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 315.669368][T24482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 315.692332][T24482] System zones: 1-12 [ 315.702841][T24482] EXT4-fs (loop6): 1 truncate cleaned up [ 315.726623][T24482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.769436][T24501] 9pnet_fd: Insufficient options for proto=fd [ 315.824104][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.969815][T24521] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.977661][T24521] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 316.058262][T24531] __nla_validate_parse: 4 callbacks suppressed [ 316.058284][T24531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8818'. [ 316.082814][T24531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8818'. [ 316.084102][ T4493] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.119748][T24535] netlink: 'syz.1.8820': attribute type 1 has an invalid length. [ 316.149222][T24535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.158856][ T4493] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.175914][ T4493] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.185257][ T4493] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.305198][T24548] loop4: detected capacity change from 0 to 512 [ 316.749964][T24579] loop4: detected capacity change from 0 to 512 [ 316.772130][T24559] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 316.978095][T24614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8840'. [ 317.137231][T24640] loop6: detected capacity change from 0 to 512 [ 317.147985][T24640] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.155142][T24640] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 317.172159][T24640] EXT4-fs (loop6): 1 truncate cleaned up [ 317.178291][T24640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.271523][T24654] ================================================================== [ 317.279686][T24654] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 317.286953][T24654] [ 317.289306][T24654] write to 0xffff88811a86f6ac of 4 bytes by task 24640 on cpu 1: [ 317.297068][T24654] xas_set_mark+0x12b/0x140 [ 317.301615][T24654] __folio_start_writeback+0x1dd/0x440 [ 317.307121][T24654] ext4_bio_write_folio+0x5ad/0x9f0 [ 317.312430][T24654] mpage_process_page_bufs+0x4a1/0x620 [ 317.317913][T24654] mpage_prepare_extent_to_map+0x786/0xc00 [ 317.323744][T24654] ext4_do_writepages+0xa05/0x2750 [ 317.328875][T24654] ext4_writepages+0x176/0x300 [ 317.333658][T24654] do_writepages+0x1c6/0x310 [ 317.338262][T24654] file_write_and_wait_range+0x156/0x2c0 [ 317.344005][T24654] generic_buffers_fsync_noflush+0x45/0x120 [ 317.349934][T24654] ext4_sync_file+0x1ab/0x690 [ 317.354806][T24654] vfs_fsync_range+0x10d/0x130 [ 317.359584][T24654] ext4_buffered_write_iter+0x34f/0x3c0 [ 317.365148][T24654] ext4_file_write_iter+0xdbf/0xf00 [ 317.370367][T24654] iter_file_splice_write+0x663/0xa60 [ 317.375748][T24654] direct_splice_actor+0x153/0x2a0 [ 317.380885][T24654] splice_direct_to_actor+0x30f/0x680 [ 317.386444][T24654] do_splice_direct+0xda/0x150 [ 317.391214][T24654] do_sendfile+0x380/0x650 [ 317.395651][T24654] __x64_sys_sendfile64+0x105/0x150 [ 317.400957][T24654] x64_sys_call+0x2bb0/0x2ff0 [ 317.405657][T24654] do_syscall_64+0xd2/0x200 [ 317.410193][T24654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.416118][T24654] [ 317.418462][T24654] read to 0xffff88811a86f6ac of 4 bytes by task 24654 on cpu 0: [ 317.426280][T24654] xas_find_marked+0x5dc/0x620 [ 317.431097][T24654] find_get_entry+0x5d/0x380 [ 317.435698][T24654] filemap_get_folios_tag+0x92/0x210 [ 317.440991][T24654] mpage_prepare_extent_to_map+0x320/0xc00 [ 317.446805][T24654] ext4_do_writepages+0x708/0x2750 [ 317.451940][T24654] ext4_writepages+0x176/0x300 [ 317.456713][T24654] do_writepages+0x1c6/0x310 [ 317.461348][T24654] filemap_write_and_wait_range+0x144/0x340 [ 317.467268][T24654] filemap_invalidate_pages+0xa4/0x1a0 [ 317.472747][T24654] kiocb_invalidate_pages+0x6e/0x80 [ 317.477958][T24654] __iomap_dio_rw+0x5d4/0x1250 [ 317.482734][T24654] iomap_dio_rw+0x40/0x90 [ 317.487084][T24654] ext4_file_write_iter+0xad9/0xf00 [ 317.492334][T24654] iter_file_splice_write+0x663/0xa60 [ 317.497812][T24654] direct_splice_actor+0x153/0x2a0 [ 317.503060][T24654] splice_direct_to_actor+0x30f/0x680 [ 317.508446][T24654] do_splice_direct+0xda/0x150 [ 317.513224][T24654] do_sendfile+0x380/0x650 [ 317.517658][T24654] __x64_sys_sendfile64+0x105/0x150 [ 317.522958][T24654] x64_sys_call+0x2bb0/0x2ff0 [ 317.527685][T24654] do_syscall_64+0xd2/0x200 [ 317.532305][T24654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.538231][T24654] [ 317.540559][T24654] value changed: 0x0a000021 -> 0x04000021 [ 317.546285][T24654] [ 317.548627][T24654] Reported by Kernel Concurrency Sanitizer on: [ 317.554786][T24654] CPU: 0 UID: 0 PID: 24654 Comm: syz.6.8843 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 317.566178][T24654] Tainted: [W]=WARN [ 317.569989][T24654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.580061][T24654] ================================================================== [ 317.614736][T24649] netlink: 'syz.8.8844': attribute type 5 has an invalid length. [ 318.115770][T16894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.