last executing test programs: 59.463699173s ago: executing program 32 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 53.580389315s ago: executing program 33 (id=334): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/6, 0x6}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 51.396329272s ago: executing program 34 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 38.41707451s ago: executing program 6 (id=774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 38.376480812s ago: executing program 6 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x4a) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfba, 0x10000000, 0x0, 0x8}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 38.304937985s ago: executing program 6 (id=779): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x4040064) 38.207105299s ago: executing program 6 (id=781): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@acl}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be", 0x1) 38.080033775s ago: executing program 5 (id=792): socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f00000001c0)={[{@mb_optimize_scan}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 38.032932987s ago: executing program 35 (id=783): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000640)='console\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x40000003}, 0x1c}}, 0x0) 37.700650412s ago: executing program 5 (id=788): epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d65746100000000140002800800014000000010080002400000000514000000110001"], 0xf8}}, 0x0) close(r0) 37.675890603s ago: executing program 6 (id=790): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r2, 0x14) 37.637504925s ago: executing program 5 (id=791): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 37.206438884s ago: executing program 6 (id=797): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 37.205645594s ago: executing program 36 (id=797): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 37.203709085s ago: executing program 5 (id=801): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@acl}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be", 0x1) 36.887404378s ago: executing program 5 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x59f1, 0x2, 0x8, 0x0, 0xb2) 36.327862603s ago: executing program 5 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0xfffffffe, 0xb84, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0x6, 0x2, 0x8, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x5, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1fe, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x800001c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1002, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7fb, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x403, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x20067bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x0, 0x2, 0x2, 0xdf9, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0xc1c, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x3ff, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0x100a, 0x0, 0x0, 0x1, 0xfffffff8, 0x8, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x2}}}}]}]}, 0x894}}, 0xc0) 36.327338513s ago: executing program 37 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0xfffffffe, 0xb84, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0x6, 0x2, 0x8, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x5, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1fe, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x800001c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1002, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7fb, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x403, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x20067bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x0, 0x2, 0x2, 0xdf9, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0xc1c, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x3ff, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0x100a, 0x0, 0x0, 0x1, 0xfffffff8, 0x8, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x2}}}}]}]}, 0x894}}, 0xc0) 28.08759287s ago: executing program 1 (id=961): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = gettid() rt_sigqueueinfo(r2, 0x12, &(0x7f0000001340)={0x21, 0x0, 0x7}) 27.797069023s ago: executing program 1 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) 27.678941398s ago: executing program 1 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x5, 0x9, 0x1, 0x6, 0x2, 0x200, "7c384dee3f"}}, 0x11d) 27.528548955s ago: executing program 1 (id=976): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 27.466261328s ago: executing program 1 (id=979): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1000000000000}, 0x18) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r0, 0x7) 27.266741577s ago: executing program 1 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 27.19149777s ago: executing program 38 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 17.238560922s ago: executing program 3 (id=1227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c99a}, 0x94) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 16.785763803s ago: executing program 3 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16.580610722s ago: executing program 3 (id=1241): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x47, 0x0, 0x0, &(0x7f0000000980)=""/17, 0x11}, 0x9f8}], 0x400000000000107, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 16.469147497s ago: executing program 3 (id=1244): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x23e78d3, 0xffffffffffffffff, 0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) 16.376567501s ago: executing program 3 (id=1247): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x260000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000280)='io\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) 16.091941403s ago: executing program 3 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b3", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)=""/241, 0xf1}], 0x1}, 0x10122) shutdown(r0, 0x0) 16.091592884s ago: executing program 39 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b3", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)=""/241, 0xf1}], 0x1}, 0x10122) shutdown(r0, 0x0) 9.007816739s ago: executing program 4 (id=1415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xa, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dc, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x2e000, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x8006, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x10000009, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x100, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x4, 0x0, 0xb, 0x7, 0x200, 0x7, 0x2000009, 0x401, 0x8, 0x1, 0x3, 0x8, 0x8, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0x6, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x43, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x6, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x6, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x480}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) 8.884123535s ago: executing program 4 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) 8.828025287s ago: executing program 4 (id=1421): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 8.664167294s ago: executing program 4 (id=1426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 8.619926236s ago: executing program 4 (id=1427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x81ffffff, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 8.440454514s ago: executing program 4 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='cpu==-||!') 8.389701567s ago: executing program 40 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='cpu==-||!') 1.200054987s ago: executing program 0 (id=1590): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1.074828172s ago: executing program 0 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="070025bd70000000000005000000180001801400020073797a5f74756e000000000000000000ac000380a80003802c"], 0xd8}}, 0x0) 1.024604684s ago: executing program 0 (id=1598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='d', @ANYBLOB="e9"], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 847.326762ms ago: executing program 0 (id=1603): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ptrace$setregs(0xd, 0x0, 0x400, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x4, 0x1}}}, {{@arp={@empty, @loopback, 0xff000000, 0xffffffff, 0x10, 0xd, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xc8e, 0x6, 0x8001, 0x1000, 0x4, 0xc, 'veth0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @rand_addr=0x64010102, 0xffffff00, 0xffffffff, 0x7, 0x7, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="c49320b4f526", {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x1ff, 0x1, 0x43ed, 0x200, 0x8000, 'ip6_vti0\x00', 'erspan0\x00', {}, {}, 0x0, 0x29}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @private=0xa010100, @broadcast, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 821.179274ms ago: executing program 8 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsetxattr$security_selinux(r2, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0) 803.018674ms ago: executing program 0 (id=1608): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 749.557987ms ago: executing program 8 (id=1609): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a5ae4c65dce95956162d85bf465d0b26b42af3277e9683cd5783e296ca2"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 692.800709ms ago: executing program 2 (id=1610): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0xdd, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='.\x00'}, 0x18) 652.661481ms ago: executing program 0 (id=1611): gettid() timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x3, r0}, 0x38) 555.139165ms ago: executing program 2 (id=1613): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='rss_stat\x00', r1, 0x0, 0x1ff}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xffffe000) 529.888257ms ago: executing program 2 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={0x0, r0}, 0x18) 506.279038ms ago: executing program 2 (id=1615): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r1, 0x0, 0x100000002}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 455.36609ms ago: executing program 2 (id=1626): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 427.379141ms ago: executing program 8 (id=1617): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 422.336971ms ago: executing program 2 (id=1618): syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 391.746393ms ago: executing program 8 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 351.773244ms ago: executing program 8 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtfilter={0x30, 0x2c, 0xe23, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0xfff0}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) 347.763944ms ago: executing program 7 (id=1623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffd}, 0x18) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 267.979908ms ago: executing program 8 (id=1627): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x46) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) creat(&(0x7f0000002040)='./file1\x00', 0x10) 267.842498ms ago: executing program 7 (id=1628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 249.861839ms ago: executing program 7 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 227.86957ms ago: executing program 7 (id=1630): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 206.187751ms ago: executing program 9 (id=1631): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) 179.626892ms ago: executing program 9 (id=1632): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 162.345563ms ago: executing program 9 (id=1633): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 138.791954ms ago: executing program 9 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 114.176795ms ago: executing program 9 (id=1635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 113.959375ms ago: executing program 7 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) 56.318687ms ago: executing program 7 (id=1637): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1280, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') 0s ago: executing program 9 (id=1638): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): dded [ 52.790245][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.797368][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.815242][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.822381][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.860047][ T4563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.867201][ T4563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.893630][ T4563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.963128][ T4563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.970208][ T4563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.996313][ T4563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.041854][ T4403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.107660][ T4563] hsr_slave_0: entered promiscuous mode [ 53.156856][ T4563] hsr_slave_1: entered promiscuous mode [ 53.162833][ T4563] debugfs: 'hsr0' already exists in 'hsr' [ 53.168739][ T4563] Cannot create hsr debugfs directory [ 53.245084][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.387146][ T4563] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 53.401715][ T4563] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 53.413881][ T4563] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.442922][ T4563] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.514225][ T4403] veth0_vlan: entered promiscuous mode [ 53.554032][ T4403] veth1_vlan: entered promiscuous mode [ 53.607944][ T4403] veth0_macvtap: entered promiscuous mode [ 53.616247][ T4403] veth1_macvtap: entered promiscuous mode [ 53.627982][ T4563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.666303][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.678425][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.694592][ T4563] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.706603][ T4807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.724873][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.732226][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.741403][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.748912][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.760800][ T4866] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.796784][ T4866] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.813129][ T4563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.823712][ T4563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.845650][ T4824] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.963461][ T4883] netlink: 96 bytes leftover after parsing attributes in process `syz.2.449'. [ 53.976673][ T4563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.035498][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.451'. [ 54.060147][ T4803] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.081786][ T4803] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.107452][ T4803] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.111481][ T4898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 54.147981][ T4803] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.211402][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 54.310969][ T4563] veth0_vlan: entered promiscuous mode [ 54.321139][ T4563] veth1_vlan: entered promiscuous mode [ 54.373689][ T4563] veth0_macvtap: entered promiscuous mode [ 54.398255][ T4885] loop5: detected capacity change from 0 to 32768 [ 54.409882][ T4563] veth1_macvtap: entered promiscuous mode [ 54.436361][ T3306] loop5: p1 p3 < > [ 54.443310][ T4885] loop5: p1 p3 < > [ 54.450076][ T4563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.473412][ T4563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.503089][ T4784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.541093][ T4784] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.574201][ T4784] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.599260][ T4784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.616972][ T4932] netlink: 104 bytes leftover after parsing attributes in process `syz.1.465'. [ 54.628862][ T1037] hid-generic 0009:0001:0006.0002: item fetching failed at offset 4/5 [ 54.654355][ T1037] hid-generic 0009:0001:0006.0002: probe with driver hid-generic failed with error -22 [ 54.752747][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 54.804376][ T4951] loop2: detected capacity change from 0 to 1024 [ 54.820675][ T4951] EXT4-fs: Ignoring removed orlov option [ 54.830652][ T4951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.912656][ T4963] netlink: 96 bytes leftover after parsing attributes in process `syz.1.479'. [ 55.011450][ T4974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4974 comm=syz.1.480 [ 55.060321][ T4980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.485'. [ 55.083629][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.127441][ T4982] loop5: detected capacity change from 0 to 4096 [ 55.154761][ T4982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.190856][ T3945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.381502][ T5007] netlink: 'syz.5.496': attribute type 12 has an invalid length. [ 55.568764][ T1988] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.580808][ T5033] loop6: detected capacity change from 0 to 512 [ 55.598247][ T5033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.622077][ T5033] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.634885][ T5033] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.506: corrupted xattr block 6: invalid header [ 55.648376][ T5033] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 55.657574][ T5033] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.506: corrupted xattr block 6: invalid header [ 55.670963][ T5033] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 55.680490][ T5033] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.506: corrupted xattr block 6: invalid header [ 55.695003][ T5033] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 55.704099][ T5033] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.506: corrupted xattr block 6: invalid header [ 55.717643][ T5033] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 55.726952][ T5033] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.506: corrupted xattr block 6: invalid header [ 55.740463][ T5033] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 55.750415][ T5033] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.506: corrupted xattr block 6: invalid header [ 55.779099][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.821646][ T5043] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.838422][ T5043] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.870030][ T5050] loop5: detected capacity change from 0 to 128 [ 55.885016][ T5050] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.905826][ T5050] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.918368][ T5050] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.515: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 55.922988][ T5054] loop6: detected capacity change from 0 to 2048 [ 55.942658][ T5050] EXT4-fs (loop5): Remounting filesystem read-only [ 55.960042][ T5054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.973137][ T3945] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.013870][ T5053] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.137539][ T5072] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 56.179076][ T5077] loop2: detected capacity change from 0 to 512 [ 56.192952][ T5077] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.225529][ T5077] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.525: Failed to acquire dquot type 1 [ 56.245561][ T5077] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #16: comm syz.2.525: corrupted inode contents [ 56.266763][ T5077] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #16: comm syz.2.525: mark_inode_dirty error [ 56.299367][ T5077] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #16: comm syz.2.525: corrupted inode contents [ 56.316766][ T5054] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 56.329322][ T5054] EXT4-fs (loop6): This should not happen!! Data will be lost [ 56.329322][ T5054] [ 56.339093][ T5054] EXT4-fs (loop6): Total free blocks count 0 [ 56.345206][ T5054] EXT4-fs (loop6): Free/Dirty block details [ 56.351126][ T5054] EXT4-fs (loop6): free_blocks=2415919504 [ 56.356949][ T5054] EXT4-fs (loop6): dirty_blocks=256 [ 56.362181][ T5054] EXT4-fs (loop6): Block reservation details [ 56.368238][ T5054] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 56.377857][ T5077] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.525: mark_inode_dirty error [ 56.409270][ T5077] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #16: comm syz.2.525: corrupted inode contents [ 56.425456][ T5077] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 56.434356][ T5077] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #16: comm syz.2.525: corrupted inode contents [ 56.446931][ T5077] EXT4-fs error (device loop2): ext4_truncate:4633: inode #16: comm syz.2.525: mark_inode_dirty error [ 56.460544][ T5077] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 56.488390][ T5077] EXT4-fs (loop2): 1 truncate cleaned up [ 56.497035][ T5077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.514284][ T4803] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.518021][ T5077] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.568115][ T5077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.597291][ T5108] tipc: Enabling of bearer rejected, failed to enable media [ 56.657715][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 56.728052][ T5127] veth0_vlan: entered allmulticast mode [ 56.765364][ T5127] veth0_vlan: left promiscuous mode [ 56.771045][ T5127] veth0_vlan: entered promiscuous mode [ 56.780481][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 56.780497][ T29] audit: type=1400 audit(1764679897.927:766): avc: denied { create } for pid=5131 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.824484][ T29] audit: type=1400 audit(1764679897.967:767): avc: denied { bind } for pid=5131 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.844136][ T29] audit: type=1400 audit(1764679897.967:768): avc: denied { listen } for pid=5131 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.869138][ T29] audit: type=1400 audit(1764679897.977:769): avc: denied { read } for pid=5131 comm="syz.2.543" path="socket:[11283]" dev="sockfs" ino=11283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.027167][ T29] audit: type=1400 audit(1764679898.177:770): avc: denied { create } for pid=5149 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.050911][ T29] audit: type=1400 audit(1764679898.197:771): avc: denied { connect } for pid=5149 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.071292][ T29] audit: type=1400 audit(1764679898.197:772): avc: denied { ioctl } for pid=5149 comm="syz.2.551" path="socket:[11317]" dev="sockfs" ino=11317 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.125432][ T5156] loop2: detected capacity change from 0 to 1024 [ 57.136401][ T5156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.165518][ T5156] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.553: Allocating blocks 449-513 which overlap fs metadata [ 57.186911][ T5154] EXT4-fs (loop2): pa ffff888106a3c230: logic 48, phys. 177, len 21 [ 57.195141][ T5154] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 57.237336][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.294278][ T29] audit: type=1400 audit(1764679898.437:773): avc: denied { watch } for pid=5163 comm="syz.1.556" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 57.294969][ T5164] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 57.319024][ T29] audit: type=1400 audit(1764679898.447:774): avc: denied { mac_admin } for pid=5163 comm="syz.1.556" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.350832][ T29] audit: type=1400 audit(1764679898.477:775): avc: denied { relabelto } for pid=5163 comm="syz.1.556" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 57.427269][ T5172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 57.511887][ T5183] loop6: detected capacity change from 0 to 1024 [ 57.521797][ T5183] EXT4-fs: Ignoring removed orlov option [ 57.537464][ T5183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.584798][ T5189] loop2: detected capacity change from 0 to 512 [ 57.593951][ T5189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.606264][ T5189] EXT4-fs (loop2): 1 truncate cleaned up [ 57.612853][ T5189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.614902][ T3743] Bluetooth: hci0: command 0x1003 tx timeout [ 57.631369][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.707207][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.839327][ T5202] loop7: detected capacity change from 0 to 1024 [ 57.846851][ T5203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5203 comm=syz.2.573 [ 57.859412][ T5203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5203 comm=syz.2.573 [ 57.890431][ T5202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.907792][ T5202] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.936773][ T5202] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.572: bg 0: block 112: padding at end of block bitmap is not set [ 57.971036][ T5202] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 57.983758][ T5202] EXT4-fs (loop7): This should not happen!! Data will be lost [ 57.983758][ T5202] [ 57.997482][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.063492][ T4784] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: comm kworker/u8:29: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.078751][ T4784] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 58.083836][ T5221] loop2: detected capacity change from 0 to 512 [ 58.091104][ T4784] EXT4-fs (loop7): This should not happen!! Data will be lost [ 58.091104][ T4784] [ 58.108415][ T4563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.128778][ T5221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.199840][ T5221] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.237377][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.345709][ T5233] loop7: detected capacity change from 0 to 256 [ 58.385932][ T5233] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.435882][ T5233] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 58.444501][ T5233] FAT-fs (loop7): Filesystem has been set read-only [ 58.638253][ T5248] loop2: detected capacity change from 0 to 4096 [ 58.656127][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.734309][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.766906][ T5268] SELinux: failed to load policy [ 58.805542][ T3486] hid_parser_main: 22 callbacks suppressed [ 58.805559][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.819123][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.826883][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.852832][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.860314][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.867778][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.875316][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.882886][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.890364][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.897834][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.906963][ T3486] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 58.943238][ T5286] fido_id[5286]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.081491][ T5306] xt_connbytes: Forcing CT accounting to be enabled [ 59.094588][ T5306] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 59.154796][ T5308] SELinux: failed to load policy [ 59.206584][ T5311] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 59.448051][ T5327] loop1: detected capacity change from 0 to 128 [ 59.458125][ T5327] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.458146][ T5327] FAT-fs (loop1): Filesystem has been set read-only [ 59.458240][ T5327] syz.1.628: attempt to access beyond end of device [ 59.458240][ T5327] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.458287][ T5327] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.458313][ T5327] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.459219][ T5327] syz.1.628: attempt to access beyond end of device [ 59.459219][ T5327] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.459253][ T5327] syz.1.628: attempt to access beyond end of device [ 59.459253][ T5327] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.492426][ T5332] __nla_validate_parse: 6 callbacks suppressed [ 59.492468][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 59.687934][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 59.688513][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 59.689189][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 59.689476][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 59.921590][ T5375] loop5: detected capacity change from 0 to 1024 [ 59.928789][ T5378] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 59.932587][ T5375] EXT4-fs: Ignoring removed orlov option [ 59.945113][ T5375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.975120][ T3945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.989391][ T5378] bond1: (slave bridge1): making interface the new active one [ 59.997384][ T5378] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 60.092722][ T5394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.659'. [ 60.212835][ T5406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.665'. [ 60.271979][ T5411] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 60.279899][ T5411] netlink: 224 bytes leftover after parsing attributes in process `syz.1.666'. [ 60.318204][ T5416] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 60.434199][ T5426] x_tables: duplicate underflow at hook 1 [ 60.516606][ T5434] loop2: detected capacity change from 0 to 2048 [ 60.546203][ T5434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.582446][ T5442] loop6: detected capacity change from 0 to 128 [ 60.589434][ T5442] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.601643][ T5442] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.645663][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.949352][ T5470] loop6: detected capacity change from 0 to 4096 [ 60.962751][ T5470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.030665][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.287393][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 61.360535][ T5502] loop6: detected capacity change from 0 to 1024 [ 61.394057][ T5503] serio: Serial port ptm0 [ 61.408304][ T5502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.464787][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.592268][ T5525] dummy0: entered promiscuous mode [ 61.613263][ T5525] bond_slave_0: entered promiscuous mode [ 61.619168][ T5525] bond_slave_0: left promiscuous mode [ 61.635917][ T5525] dummy0: left promiscuous mode [ 61.642902][ T5528] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 61.885862][ T5549] loop2: detected capacity change from 0 to 8192 [ 61.943551][ T5549] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 61.952519][ T5549] FAT-fs (loop2): Filesystem has been set read-only [ 61.977910][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 61.977925][ T29] audit: type=1326 audit(1764679903.127:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.044639][ T29] audit: type=1326 audit(1764679903.157:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.068575][ T29] audit: type=1326 audit(1764679903.157:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.091955][ T29] audit: type=1326 audit(1764679903.157:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.116010][ T29] audit: type=1326 audit(1764679903.157:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.139354][ T29] audit: type=1326 audit(1764679903.157:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.163343][ T29] audit: type=1326 audit(1764679903.157:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.187277][ T29] audit: type=1326 audit(1764679903.157:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.210645][ T29] audit: type=1326 audit(1764679903.157:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.234771][ T29] audit: type=1326 audit(1764679903.157:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e59ff749 code=0x7ffc0000 [ 62.759484][ T5600] loop7: detected capacity change from 0 to 512 [ 62.795158][ T5600] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.866644][ T5600] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 62.950503][ T5618] loop2: detected capacity change from 0 to 1024 [ 62.966297][ T4563] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 62.978764][ T5623] loop6: detected capacity change from 0 to 1024 [ 62.992421][ T5623] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.993758][ T5618] EXT4-fs: inline encryption not supported [ 63.016502][ T5623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.048533][ T5618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 63.064762][ T5618] System zones: 0-1, 3-12 [ 63.072077][ T5618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.079314][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.124769][ T5618] loop2: detected capacity change from 1024 to 64 [ 63.136274][ T5618] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.758: corrupted xattr entries [ 63.152293][ T5618] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:74: inode #15: comm syz.2.758: corrupt xattr in inline inode [ 63.178627][ T5618] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.758: corrupted xattr entries [ 63.238014][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /169/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=17104912, rec_len=26982, size=1024 fake=0 [ 63.289404][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.310395][ T5629] kmmpd-loop2: attempt to access beyond end of device [ 63.310395][ T5629] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 63.324166][ T5629] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 63.337180][ T5651] netlink: 'syz.1.771': attribute type 12 has an invalid length. [ 63.608850][ T5660] loop1: detected capacity change from 0 to 128 [ 63.626770][ T5661] loop7: detected capacity change from 0 to 2048 [ 63.670066][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.779'. [ 63.705742][ T3306] loop7: p2 p3 p7 [ 63.727784][ T5661] loop7: p2 p3 p7 [ 63.773520][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 63.776146][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 63.790595][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 63.802986][ T5666] loop6: detected capacity change from 0 to 1024 [ 63.850149][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 63.850282][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 63.861308][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 63.885724][ T5666] EXT4-fs: inline encryption not supported [ 63.913062][ T4823] kworker/u8:59: attempt to access beyond end of device [ 63.913062][ T4823] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 63.935480][ T5672] loop5: detected capacity change from 0 to 512 [ 63.956862][ T4823] kworker/u8:59: attempt to access beyond end of device [ 63.956862][ T4823] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 63.971525][ T4823] kworker/u8:59: attempt to access beyond end of device [ 63.971525][ T4823] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 63.985269][ T5666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 63.993443][ T5666] System zones: 0-1, 3-12 [ 63.999577][ T5666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.012220][ T4823] kworker/u8:59: attempt to access beyond end of device [ 64.012220][ T4823] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 64.026600][ T5672] EXT4-fs (loop5): too many log groups per flexible block group [ 64.034417][ T5672] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 64.038379][ T4823] kworker/u8:59: attempt to access beyond end of device [ 64.038379][ T4823] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 64.041536][ T5672] EXT4-fs (loop5): mount failed [ 64.063642][ T4823] kworker/u8:59: attempt to access beyond end of device [ 64.063642][ T4823] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 64.099706][ T5666] loop6: detected capacity change from 1024 to 64 [ 64.139688][ T5683] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.781: corrupted xattr entries [ 64.181244][ T5683] EXT4-fs error (device loop6): get_max_inline_xattr_value_size:74: inode #15: comm syz.6.781: corrupt xattr in inline inode [ 64.225395][ T5683] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.781: corrupted xattr entries [ 64.254193][ T5676] chnl_net:caif_netlink_parms(): no params data found [ 64.267836][ T4403] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /71/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=17104912, rec_len=26982, size=1024 fake=0 [ 64.320797][ T4403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.356797][ T5674] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 64.368885][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.376099][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.383546][ T5676] bridge_slave_0: entered allmulticast mode [ 64.390428][ T5676] bridge_slave_0: entered promiscuous mode [ 64.397559][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.404668][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.412222][ T5676] bridge_slave_1: entered allmulticast mode [ 64.419575][ T5676] bridge_slave_1: entered promiscuous mode [ 64.438436][ T5708] loop5: detected capacity change from 0 to 2048 [ 64.473285][ T3306] loop5: p2 p3 p7 [ 64.489631][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.502686][ T5708] loop5: p2 p3 p7 [ 64.505711][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.529897][ T5676] team0: Port device team_slave_0 added [ 64.539133][ T5676] team0: Port device team_slave_1 added [ 64.562597][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.570348][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.575971][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 64.597281][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.618091][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.618295][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 64.625915][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.636746][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 64.662188][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.699800][ T5676] hsr_slave_0: entered promiscuous mode [ 64.706056][ T5676] hsr_slave_1: entered promiscuous mode [ 64.711949][ T5676] debugfs: 'hsr0' already exists in 'hsr' [ 64.718463][ T5676] Cannot create hsr debugfs directory [ 64.737346][ T4813] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.747744][ T4813] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.777645][ T5720] loop5: detected capacity change from 0 to 1024 [ 64.813643][ T5720] EXT4-fs: inline encryption not supported [ 64.838071][ T5720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 64.850553][ T4813] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.861308][ T4813] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.865322][ T5720] System zones: 0-1, 3-12 [ 64.899463][ T5720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.942267][ T4813] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.952718][ T4813] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.984571][ T5720] loop5: detected capacity change from 1024 to 64 [ 64.992332][ T5720] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.801: corrupted xattr entries [ 65.011461][ T5720] EXT4-fs error (device loop5): get_max_inline_xattr_value_size:74: inode #15: comm syz.5.801: corrupt xattr in inline inode [ 65.012568][ T4813] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.035432][ T4813] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.046111][ T5720] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.801: corrupted xattr entries [ 65.077187][ T3945] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /132/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=17104912, rec_len=26982, size=1024 fake=0 [ 65.123189][ T5723] loop7: detected capacity change from 0 to 32768 [ 65.125245][ T5738] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 65.165399][ T3306] loop7: p1 p3 < > [ 65.192885][ T5676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 65.209469][ T5723] loop7: p1 p3 < > [ 65.228657][ T4673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.242037][ T5724] bio_check_eod: 106 callbacks suppressed [ 65.242116][ T5724] kmmpd-loop5: attempt to access beyond end of device [ 65.242116][ T5724] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 65.261780][ T5724] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 65.286516][ T5676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 65.300597][ T4813] bridge_slave_1: left allmulticast mode [ 65.306338][ T4813] bridge_slave_1: left promiscuous mode [ 65.312002][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.323353][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 65.323781][ T4813] bridge_slave_0: left allmulticast mode [ 65.338879][ T4813] bridge_slave_0: left promiscuous mode [ 65.344586][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.437242][ T4813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.447996][ T4813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.457707][ T4813] bond0 (unregistering): Released all slaves [ 65.469725][ T5676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 65.480638][ T5676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 65.523231][ T4813] hsr_slave_0: left promiscuous mode [ 65.529246][ T4813] hsr_slave_1: left promiscuous mode [ 65.536124][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.543514][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.551246][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.558793][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.569361][ T4813] veth1_macvtap: left promiscuous mode [ 65.575062][ T4813] veth0_macvtap: left promiscuous mode [ 65.580685][ T4813] veth1_vlan: left promiscuous mode [ 65.585993][ T4813] veth0_vlan: left promiscuous mode [ 65.683807][ T4813] team0 (unregistering): Port device team_slave_1 removed [ 65.695872][ T4813] team0 (unregistering): Port device team_slave_0 removed [ 65.731721][ T5726] chnl_net:caif_netlink_parms(): no params data found [ 65.793130][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.800292][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.808286][ T5726] bridge_slave_0: entered allmulticast mode [ 65.815211][ T5726] bridge_slave_0: entered promiscuous mode [ 65.822241][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.829381][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.837199][ T5726] bridge_slave_1: entered allmulticast mode [ 65.843799][ T5726] bridge_slave_1: entered promiscuous mode [ 65.864903][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.879875][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.904360][ T5726] team0: Port device team_slave_0 added [ 65.911321][ T5726] team0: Port device team_slave_1 added [ 65.936527][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.943658][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.970377][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.983800][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.990814][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.016925][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.052870][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.071182][ T5726] hsr_slave_0: entered promiscuous mode [ 66.077649][ T5726] hsr_slave_1: entered promiscuous mode [ 66.116838][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.131534][ T5754] chnl_net:caif_netlink_parms(): no params data found [ 66.146447][ T4813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.168256][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.175357][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.207602][ T4813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.225846][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.232957][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.263174][ T4813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.275709][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.282765][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.290538][ T5754] bridge_slave_0: entered allmulticast mode [ 66.298599][ T5754] bridge_slave_0: entered promiscuous mode [ 66.307300][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.314628][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.321909][ T5754] bridge_slave_1: entered allmulticast mode [ 66.328504][ T5754] bridge_slave_1: entered promiscuous mode [ 66.338733][ T4813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.367515][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.384317][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.416780][ T5754] team0: Port device team_slave_0 added [ 66.426164][ T5754] team0: Port device team_slave_1 added [ 66.431878][ T5726] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 66.452248][ T5726] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 66.467785][ T5726] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 66.479087][ T5726] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 66.500884][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.507940][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.534114][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.554309][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.561323][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.587426][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.623827][ T4813] bridge_slave_1: left allmulticast mode [ 66.630291][ T4813] bridge_slave_1: left promiscuous mode [ 66.636132][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.646632][ T4813] bridge_slave_0: left allmulticast mode [ 66.652342][ T4813] bridge_slave_0: left promiscuous mode [ 66.658769][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.757450][ T4813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.768420][ T4813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.778294][ T4813] bond0 (unregistering): Released all slaves [ 66.873265][ T4813] hsr_slave_0: left promiscuous mode [ 66.880170][ T4813] hsr_slave_1: left promiscuous mode [ 66.886580][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.894043][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.904471][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.911903][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.919497][ T5793] loop1: detected capacity change from 0 to 32768 [ 66.938150][ T4813] veth1_macvtap: left promiscuous mode [ 66.946154][ T4813] veth0_macvtap: left promiscuous mode [ 66.951771][ T4813] veth1_vlan: left promiscuous mode [ 66.957668][ T4813] veth0_vlan: left promiscuous mode [ 66.965576][ T5793] loop1: p1 p3 < > [ 67.046701][ T4813] team0 (unregistering): Port device team_slave_1 removed [ 67.056708][ T4813] team0 (unregistering): Port device team_slave_0 removed [ 67.102142][ T5754] hsr_slave_0: entered promiscuous mode [ 67.109143][ T5754] hsr_slave_1: entered promiscuous mode [ 67.115668][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 67.121444][ T5754] Cannot create hsr debugfs directory [ 67.202446][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.241293][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.257097][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.267159][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.274346][ T4803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.287633][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.294754][ T4803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.430071][ T5676] veth0_vlan: entered promiscuous mode [ 67.440373][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.459182][ T5676] veth1_vlan: entered promiscuous mode [ 67.489412][ T5676] veth0_macvtap: entered promiscuous mode [ 67.497327][ T5676] veth1_macvtap: entered promiscuous mode [ 67.524254][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.541227][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.562236][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.572457][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.581691][ T4823] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.591275][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.601590][ T4775] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.613027][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.626809][ T4775] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.645978][ T4775] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.688296][ T5726] veth0_vlan: entered promiscuous mode [ 67.703396][ T5726] veth1_vlan: entered promiscuous mode [ 67.719101][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 67.719118][ T29] audit: type=1400 audit(1764679908.867:991): avc: denied { accept } for pid=5838 comm="syz.8.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.746454][ T29] audit: type=1400 audit(1764679908.867:992): avc: denied { read } for pid=5838 comm="syz.8.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.763082][ T5726] veth0_macvtap: entered promiscuous mode [ 67.778706][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.805994][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.820242][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.827402][ T4813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.838402][ T5726] veth1_macvtap: entered promiscuous mode [ 67.855180][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.862386][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.862498][ T5845] loop1: detected capacity change from 0 to 1024 [ 67.876763][ T5845] EXT4-fs: dax option not supported [ 67.925230][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.932921][ T5847] loop7: detected capacity change from 0 to 8192 [ 67.938278][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.956536][ T4823] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.967371][ T4823] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.979849][ T4823] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.994846][ T4823] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.997541][ T3306] loop7: p1 < > p2 < > p3 p4 < > [ 68.008683][ T3306] loop7: partition table partially beyond EOD, truncated [ 68.018985][ T3306] loop7: p1 start 67108864 is beyond EOD, truncated [ 68.027431][ T3306] loop7: p3 start 100859904 is beyond EOD, truncated [ 68.040578][ T5847] loop7: p1 < > p2 < > p3 p4 < > [ 68.045824][ T5847] loop7: partition table partially beyond EOD, truncated [ 68.053648][ T5847] loop7: p1 start 67108864 is beyond EOD, truncated [ 68.062902][ T5847] loop7: p3 start 100859904 is beyond EOD, truncated [ 68.197982][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.313363][ T5754] veth0_vlan: entered promiscuous mode [ 68.322111][ T5754] veth1_vlan: entered promiscuous mode [ 68.347969][ T5754] veth0_macvtap: entered promiscuous mode [ 68.366767][ T5754] veth1_macvtap: entered promiscuous mode [ 68.388203][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.406593][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.423695][ T4823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.440824][ T4823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.453197][ T4823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.470950][ T4823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.786170][ T29] audit: type=1400 audit(1764679909.937:993): avc: denied { accept } for pid=5891 comm="syz.1.830" lport=50944 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.836307][ T29] audit: type=1400 audit(1764679909.977:994): avc: denied { write } for pid=5891 comm="syz.1.830" lport=50944 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.954619][ T29] audit: type=1326 audit(1764679910.097:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.7.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2731abf749 code=0x7ffc0000 [ 68.978150][ T29] audit: type=1326 audit(1764679910.097:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.7.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2731abf749 code=0x7ffc0000 [ 69.001559][ T29] audit: type=1326 audit(1764679910.097:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.7.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2731abf749 code=0x7ffc0000 [ 69.024921][ T29] audit: type=1326 audit(1764679910.097:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.7.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2731abf749 code=0x7ffc0000 [ 69.048228][ T29] audit: type=1326 audit(1764679910.097:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.7.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2731abf749 code=0x7ffc0000 [ 69.071696][ T29] audit: type=1326 audit(1764679910.097:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.7.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2731abf749 code=0x7ffc0000 [ 69.114040][ T5899] loop3: detected capacity change from 0 to 1024 [ 69.135755][ T5883] loop9: detected capacity change from 0 to 32768 [ 69.145341][ T5899] EXT4-fs: dax option not supported [ 69.181532][ T3306] loop9: p1 p3 < > [ 69.191831][ T5883] loop9: p1 p3 < > [ 69.261626][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 69.266903][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 69.284655][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 69.339011][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 69.340917][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 69.483716][ T5931] loop1: detected capacity change from 0 to 8192 [ 69.629935][ T5935] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.677701][ T5941] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 69.719947][ T5944] loop8: detected capacity change from 0 to 1024 [ 69.732144][ T5944] EXT4-fs: dax option not supported [ 70.142034][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.7.871'. [ 70.180633][ T5957] loop8: detected capacity change from 0 to 32768 [ 70.186703][ T5984] loop9: detected capacity change from 0 to 512 [ 70.247209][ T3306] loop8: p1 p3 < > [ 70.251524][ T5984] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.872: bad orphan inode 11862016 [ 70.269830][ T5957] loop8: p1 p3 < > [ 70.273002][ T5984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.306180][ T5984] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.386798][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.477388][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 70.488518][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 70.506312][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 70.516304][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 70.609697][ T6011] xt_CT: No such helper "snmp_trap" [ 70.699406][ T6023] Falling back ldisc for ptm1. [ 70.943037][ T6032] loop3: detected capacity change from 0 to 32768 [ 71.005420][ T3306] loop3: p1 p3 < > [ 71.013032][ T6032] loop3: p1 p3 < > [ 71.119253][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 71.119265][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 71.236493][ T6039] loop3: detected capacity change from 0 to 512 [ 71.259758][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.273347][ T6039] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.414409][ T5754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.482439][ T6046] loop1: detected capacity change from 0 to 512 [ 71.531523][ T6046] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.891: bad orphan inode 11862016 [ 71.565992][ T6046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.578903][ T6046] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.584823][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 71.606082][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.630202][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.664737][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.835168][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.906'. [ 71.844093][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.906'. [ 71.958699][ T6091] Falling back ldisc for ptm0. [ 72.137852][ T6095] loop3: detected capacity change from 0 to 32768 [ 72.184894][ T3306] loop3: p1 p3 < > [ 72.192819][ T6095] loop3: p1 p3 < > [ 72.228566][ T6105] loop8: detected capacity change from 0 to 512 [ 72.256835][ T6105] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.914: bad orphan inode 11862016 [ 72.320521][ T6105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.342989][ T6105] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.422035][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.476570][ T6127] Falling back ldisc for ptm0. [ 72.931568][ T6142] loop1: detected capacity change from 0 to 32768 [ 73.051564][ T3306] loop1: p1 p3 < > [ 73.130061][ T6165] Falling back ldisc for ptm0. [ 73.491670][ T1037] hid-generic 0009:0001:0006.0004: item fetching failed at offset 4/5 [ 73.542000][ T1037] hid-generic 0009:0001:0006.0004: probe with driver hid-generic failed with error -22 [ 73.552066][ T6142] loop1: p1 p3 < > [ 73.847350][ T6210] Falling back ldisc for ptm0. [ 73.889437][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 73.889456][ T29] audit: type=1326 audit(1764679915.037:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 73.946884][ T29] audit: type=1326 audit(1764679915.067:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 73.946963][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.962'. [ 73.979324][ T29] audit: type=1326 audit(1764679915.067:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.002805][ T29] audit: type=1326 audit(1764679915.067:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.026290][ T29] audit: type=1326 audit(1764679915.067:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.049628][ T29] audit: type=1326 audit(1764679915.067:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.073094][ T29] audit: type=1326 audit(1764679915.067:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.096545][ T29] audit: type=1326 audit(1764679915.077:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.119960][ T29] audit: type=1326 audit(1764679915.077:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.143272][ T29] audit: type=1326 audit(1764679915.077:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1237a7f749 code=0x7ffc0000 [ 74.296004][ T6204] loop3: detected capacity change from 0 to 32768 [ 74.339307][ T6036] hid-generic 0009:0001:0006.0005: item fetching failed at offset 4/5 [ 74.353559][ T6036] hid-generic 0009:0001:0006.0005: probe with driver hid-generic failed with error -22 [ 74.372882][ T6204] loop3: p1 p3 < > [ 74.582994][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 74.609466][ T6251] netlink: 96 bytes leftover after parsing attributes in process `syz.9.981'. [ 74.640364][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 74.644205][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 74.674948][ T4774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.731755][ T6255] netlink: 96 bytes leftover after parsing attributes in process `syz.9.984'. [ 74.787198][ T4774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.843647][ T4774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.102976][ T4774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.198473][ T4774] bridge_slave_1: left allmulticast mode [ 75.204191][ T4774] bridge_slave_1: left promiscuous mode [ 75.209963][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.227963][ T4774] bridge_slave_0: left allmulticast mode [ 75.233633][ T4774] bridge_slave_0: left promiscuous mode [ 75.239352][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.366821][ T4774] bond1 (unregistering): (slave bridge1): Releasing active interface [ 75.427633][ T4774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.437489][ T4774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.447448][ T4774] bond0 (unregistering): Released all slaves [ 75.457311][ T4774] bond1 (unregistering): Released all slaves [ 75.511824][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 75.530629][ T4774] hsr_slave_0: left promiscuous mode [ 75.536825][ T4774] hsr_slave_1: left promiscuous mode [ 75.542640][ T4774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.550880][ T4774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.558853][ T4774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.566403][ T4774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.577636][ T4774] veth1_macvtap: left promiscuous mode [ 75.583380][ T4774] veth0_macvtap: left promiscuous mode [ 75.589095][ T4774] veth1_vlan: left promiscuous mode [ 75.594307][ T4774] veth0_vlan: left promiscuous mode [ 75.666766][ T4774] team0 (unregistering): Port device team_slave_1 removed [ 75.678853][ T4774] team0 (unregistering): Port device team_slave_0 removed [ 75.743136][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.750421][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.757785][ T6261] bridge_slave_0: entered allmulticast mode [ 75.764515][ T6261] bridge_slave_0: entered promiscuous mode [ 75.771611][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.778801][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.786566][ T6261] bridge_slave_1: entered allmulticast mode [ 75.793060][ T6261] bridge_slave_1: entered promiscuous mode [ 75.810806][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.821769][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.841642][ T6261] team0: Port device team_slave_0 added [ 75.848570][ T6261] team0: Port device team_slave_1 added [ 75.865092][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.872136][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.898096][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.909371][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.916401][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.942435][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.969486][ T6261] hsr_slave_0: entered promiscuous mode [ 75.975535][ T6261] hsr_slave_1: entered promiscuous mode [ 75.981734][ T6261] debugfs: 'hsr0' already exists in 'hsr' [ 75.987513][ T6261] Cannot create hsr debugfs directory [ 76.230217][ T6261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.238869][ T6261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.247612][ T6261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.257582][ T6261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.272543][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.279844][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.287259][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.294363][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.322339][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.332677][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.341408][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.355243][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.365093][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.372164][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.383455][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.390544][ T4774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.455464][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.519363][ T6261] veth0_vlan: entered promiscuous mode [ 76.526995][ T6261] veth1_vlan: entered promiscuous mode [ 76.542871][ T6261] veth0_macvtap: entered promiscuous mode [ 76.550914][ T6261] veth1_macvtap: entered promiscuous mode [ 76.562933][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.575071][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.585723][ T4790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.595759][ T4790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.604905][ T4790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.614968][ T4790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.664328][ T6300] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1001'. [ 76.673828][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.999'. [ 77.447753][ T6340] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1006'. [ 77.522882][ T6347] netlink: 'syz.8.1010': attribute type 12 has an invalid length. [ 77.627110][ T6351] loop9: detected capacity change from 0 to 4096 [ 77.672450][ T6313] loop0: detected capacity change from 0 to 32768 [ 77.675152][ T6351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.737930][ T4421] loop0: p1 p3 < > [ 77.769983][ T6313] loop0: p1 p3 < > [ 77.819995][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.911872][ T6377] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 77.920453][ T6377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'. [ 77.936620][ T6377] ipvlan2: entered promiscuous mode [ 77.960808][ T6377] bridge0: port 3(ipvlan2) entered blocking state [ 77.967344][ T6377] bridge0: port 3(ipvlan2) entered disabled state [ 77.980087][ T6377] ipvlan2: entered allmulticast mode [ 77.986148][ T6377] bridge0: entered allmulticast mode [ 77.992202][ T6377] ipvlan2: left allmulticast mode [ 77.997359][ T6377] bridge0: left allmulticast mode [ 78.094738][ T6386] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1024'. [ 78.368203][ T6401] loop8: detected capacity change from 0 to 4096 [ 78.383591][ T6401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.443948][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.566664][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1037'. [ 78.608516][ T6411] loop7: detected capacity change from 0 to 4096 [ 78.643240][ T6411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.696657][ T4563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.822526][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1039'. [ 78.832202][ T6427] netlink: 'syz.7.1039': attribute type 30 has an invalid length. [ 78.872920][ T4831] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.891541][ T4831] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.928582][ T4831] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.953387][ T4831] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.984674][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 78.984689][ T29] audit: type=1326 audit(1764679920.127:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.9.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.065229][ T29] audit: type=1326 audit(1764679920.167:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.9.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.088867][ T29] audit: type=1326 audit(1764679920.167:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.9.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.112452][ T29] audit: type=1326 audit(1764679920.167:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.135702][ T29] audit: type=1326 audit(1764679920.167:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.158912][ T29] audit: type=1326 audit(1764679920.167:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.181838][ T29] audit: type=1326 audit(1764679920.167:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.204738][ T29] audit: type=1326 audit(1764679920.167:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.227778][ T29] audit: type=1326 audit(1764679920.167:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 79.250745][ T29] audit: type=1326 audit(1764679920.167:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 80.026758][ T6516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.076095][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.110793][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.533467][ T6565] loop9: detected capacity change from 0 to 512 [ 80.550365][ T6565] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 80.563542][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.573192][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.578821][ T6565] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1101: invalid indirect mapped block 4294967295 (level 0) [ 80.621794][ T6565] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1101: invalid indirect mapped block 4294967295 (level 1) [ 80.667019][ T6565] EXT4-fs (loop9): 1 orphan inode deleted [ 80.672806][ T6565] EXT4-fs (loop9): 1 truncate cleaned up [ 80.675408][ T6573] __nla_validate_parse: 1 callbacks suppressed [ 80.675428][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1104'. [ 80.693639][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1104'. [ 80.703699][ T6565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.723175][ T4831] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.741021][ T4831] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.750580][ T4831] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.760878][ T4831] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.773428][ T6565] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 80.821593][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.870054][ T6581] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1107'. [ 80.939992][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1113'. [ 81.011711][ T6602] xt_hashlimit: max too large, truncated to 1048576 [ 81.094107][ T6608] loop9: detected capacity change from 0 to 2048 [ 81.149275][ T4421] loop9: p2 p3 p7 [ 81.163909][ T6620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1127'. [ 81.203567][ T6608] loop9: p2 p3 p7 [ 81.226692][ T6626] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1130'. [ 81.323586][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 81.325117][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 81.356066][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 81.374912][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 81.378879][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 81.387914][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 81.409042][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1135'. [ 81.486023][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 81.486130][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 81.508225][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 81.715847][ T6672] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 82.101413][ T6701] loop7: detected capacity change from 0 to 1024 [ 82.134358][ T6701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.187607][ T6701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.239733][ T6710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.298702][ T4563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.401768][ T6724] syz_tun: entered allmulticast mode [ 82.420997][ T6723] syz_tun: left allmulticast mode [ 82.491680][ T6731] loop8: detected capacity change from 0 to 512 [ 82.518493][ T6731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.536788][ T6731] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1172: iget: bad i_size value: 38620345925642 [ 82.560781][ T6731] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1172: couldn't read orphan inode 15 (err -117) [ 82.745294][ T6731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.795715][ T6731] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1172: bg 0: block 5: invalid block bitmap [ 82.837142][ T6731] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 6 with error 28 [ 82.849475][ T6731] EXT4-fs (loop8): This should not happen!! Data will be lost [ 82.849475][ T6731] [ 82.859169][ T6731] EXT4-fs (loop8): Total free blocks count 0 [ 82.865231][ T6731] EXT4-fs (loop8): Free/Dirty block details [ 82.871168][ T6731] EXT4-fs (loop8): free_blocks=0 [ 82.876173][ T6731] EXT4-fs (loop8): dirty_blocks=66 [ 82.881374][ T6731] EXT4-fs (loop8): Block reservation details [ 82.887432][ T6731] EXT4-fs (loop8): i_reserved_data_blocks=66 [ 82.963062][ T4798] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 8 with max blocks 60 with error 28 [ 83.124570][ T6752] loop0: detected capacity change from 0 to 512 [ 83.151611][ T6752] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.178440][ T6760] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.208822][ T6752] EXT4-fs (loop0): mount failed [ 83.382018][ T6780] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 83.517526][ T6789] netlink: 165 bytes leftover after parsing attributes in process `syz.7.1197'. [ 83.527672][ T6789] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1197'. [ 83.739177][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.761447][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.011601][ T6825] loop0: detected capacity change from 0 to 8192 [ 84.052376][ T6830] SELinux: ebitmap start bit (15) is not a multiple of the map unit size (64) [ 84.061728][ T6830] SELinux: failed to load policy [ 84.085474][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 84.085543][ T29] audit: type=1400 audit(1764679925.237:1316): avc: denied { create } for pid=6832 comm="syz.9.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.148612][ T6831] SELinux: failed to load policy [ 84.203552][ T29] audit: type=1400 audit(1764679925.237:1317): avc: denied { bind } for pid=6832 comm="syz.9.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.223545][ T29] audit: type=1400 audit(1764679925.327:1318): avc: denied { write } for pid=6832 comm="syz.9.1218" path="socket:[18006]" dev="sockfs" ino=18006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.667305][ T29] audit: type=1400 audit(1764679925.387:1319): avc: denied { read } for pid=6832 comm="syz.9.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.742178][ T6857] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1228'. [ 84.812290][ T6857] hsr_slave_0: left promiscuous mode [ 84.842406][ T6857] hsr_slave_1: left promiscuous mode [ 85.067659][ T6868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6868 comm=syz.7.1232 [ 85.243764][ T3486] hid_parser_main: 19 callbacks suppressed [ 85.243791][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.257462][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.265584][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.273011][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.280519][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.287983][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.296244][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.303675][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.311183][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.318667][ T3486] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 85.397234][ T6887] loop8: detected capacity change from 0 to 256 [ 85.420687][ T3486] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 85.460378][ T6892] fido_id[6892]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.525043][ T6901] veth0: entered promiscuous mode [ 85.531907][ T29] audit: type=1400 audit(1764679926.667:1320): avc: denied { mount } for pid=6897 comm="syz.3.1244" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 85.555396][ T29] audit: type=1400 audit(1764679926.667:1321): avc: denied { mounton } for pid=6897 comm="syz.3.1244" path="/89/file0" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 85.590142][ T29] audit: type=1400 audit(1764679926.737:1322): avc: denied { unmount } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 85.733604][ T6916] netlink: 'syz.7.1252': attribute type 3 has an invalid length. [ 85.783270][ T6924] loop8: detected capacity change from 0 to 1024 [ 85.799621][ T4762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.812376][ T6924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.851702][ T29] audit: type=1400 audit(1764679926.997:1323): avc: denied { mounton } for pid=6923 comm="syz.8.1257" path="/93/file1/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.940895][ T4762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.980830][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.998418][ T4762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.055482][ T6945] loop8: detected capacity change from 0 to 1024 [ 86.076500][ T6945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.089335][ T6945] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.102198][ T6945] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: comm syz.8.1262: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.109492][ T29] audit: type=1400 audit(1764679927.257:1324): avc: denied { create } for pid=6948 comm="syz.7.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 86.117097][ T4762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.148365][ T6945] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 86.160790][ T6945] EXT4-fs (loop8): This should not happen!! Data will be lost [ 86.160790][ T6945] [ 86.185151][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.209353][ T29] audit: type=1326 audit(1764679927.287:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.9.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 86.322167][ T6929] chnl_net:caif_netlink_parms(): no params data found [ 86.366322][ T4762] bridge_slave_1: left allmulticast mode [ 86.372044][ T4762] bridge_slave_1: left promiscuous mode [ 86.377763][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.419758][ T4762] bridge_slave_0: left allmulticast mode [ 86.426162][ T4762] bridge_slave_0: left promiscuous mode [ 86.431888][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.557664][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.586234][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.596336][ T4762] bond0 (unregistering): Released all slaves [ 86.626674][ T6977] loop7: detected capacity change from 0 to 512 [ 86.651025][ T6975] loop9: detected capacity change from 0 to 1024 [ 86.663576][ T6975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.670608][ T6977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.692713][ T4762] hsr_slave_0: left promiscuous mode [ 86.699349][ T4762] hsr_slave_1: left promiscuous mode [ 86.705764][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.713181][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.721834][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.725105][ T6975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.729280][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.745127][ T6977] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1274: iget: bad i_size value: 38620345925642 [ 86.772950][ T4762] veth1_macvtap: left promiscuous mode [ 86.779160][ T4762] veth0_macvtap: left promiscuous mode [ 86.784740][ T4762] veth1_vlan: left promiscuous mode [ 86.790473][ T4762] veth0_vlan: left promiscuous mode [ 86.826423][ T6977] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1274: couldn't read orphan inode 15 (err -117) [ 86.860306][ T6984] loop8: detected capacity change from 0 to 512 [ 86.888206][ T6984] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.927394][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.927508][ T6977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.959037][ T6984] EXT4-fs (loop8): mount failed [ 87.073741][ T6977] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1274: bg 0: block 5: invalid block bitmap [ 87.086396][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 87.117231][ T6977] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 6 with error 28 [ 87.129498][ T6977] EXT4-fs (loop7): This should not happen!! Data will be lost [ 87.129498][ T6977] [ 87.139223][ T6977] EXT4-fs (loop7): Total free blocks count 0 [ 87.145294][ T6977] EXT4-fs (loop7): Free/Dirty block details [ 87.151388][ T6977] EXT4-fs (loop7): free_blocks=0 [ 87.156516][ T6977] EXT4-fs (loop7): dirty_blocks=66 [ 87.161772][ T6977] EXT4-fs (loop7): Block reservation details [ 87.167813][ T6977] EXT4-fs (loop7): i_reserved_data_blocks=66 [ 87.174142][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 87.304890][ T4826] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 8 with max blocks 60 with error 28 [ 87.396571][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.403664][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.428186][ T6929] bridge_slave_0: entered allmulticast mode [ 87.444114][ T6929] bridge_slave_0: entered promiscuous mode [ 87.455715][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.462877][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.488826][ T6929] bridge_slave_1: entered allmulticast mode [ 87.505267][ T6929] bridge_slave_1: entered promiscuous mode [ 87.573409][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.627088][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.684540][ T7023] loop8: detected capacity change from 0 to 1024 [ 87.702641][ T6929] team0: Port device team_slave_0 added [ 87.716983][ T7023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.720248][ T6929] team0: Port device team_slave_1 added [ 87.734120][ T7023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.758430][ T7025] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 87.826823][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.847010][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.853998][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.879983][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.892080][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.899112][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.925151][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.010957][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.068836][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.081733][ T6929] hsr_slave_0: entered promiscuous mode [ 88.093201][ T6929] hsr_slave_1: entered promiscuous mode [ 88.111214][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 88.117030][ T6929] Cannot create hsr debugfs directory [ 88.298341][ T7040] loop9: detected capacity change from 0 to 512 [ 88.316550][ T7040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.352607][ T7040] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1293: iget: bad i_size value: 38620345925642 [ 88.375542][ T7040] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1293: couldn't read orphan inode 15 (err -117) [ 88.389037][ T7040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.412690][ T7040] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1293: bg 0: block 5: invalid block bitmap [ 88.425708][ T7040] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 6 with error 28 [ 88.438061][ T7040] EXT4-fs (loop9): This should not happen!! Data will be lost [ 88.438061][ T7040] [ 88.447843][ T7040] EXT4-fs (loop9): Total free blocks count 0 [ 88.453933][ T7040] EXT4-fs (loop9): Free/Dirty block details [ 88.459880][ T7040] EXT4-fs (loop9): free_blocks=0 [ 88.464954][ T7040] EXT4-fs (loop9): dirty_blocks=66 [ 88.470136][ T7040] EXT4-fs (loop9): Block reservation details [ 88.476172][ T7040] EXT4-fs (loop9): i_reserved_data_blocks=66 [ 88.506267][ T4812] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 8 with max blocks 60 with error 28 [ 88.588401][ T6929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.601867][ T6929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.620461][ T6929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.637150][ T6929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.715595][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.742855][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.811666][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.828525][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.840153][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.847278][ T4827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.862379][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.869517][ T4827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.949757][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.055793][ T6929] veth0_vlan: entered promiscuous mode [ 89.063828][ T6929] veth1_vlan: entered promiscuous mode [ 89.079942][ T6929] veth0_macvtap: entered promiscuous mode [ 89.087771][ T6929] veth1_macvtap: entered promiscuous mode [ 89.098869][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.110902][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.122165][ T4827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.133689][ T4827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.149582][ T4827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162432][ T4827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.251168][ T7100] loop4: detected capacity change from 0 to 1024 [ 89.258418][ T7100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.287092][ T7100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.389784][ T7108] __nla_validate_parse: 1 callbacks suppressed [ 89.389863][ T7108] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1305'. [ 89.464171][ T6929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.585149][ T7122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.592447][ T7122] IPv6: NLM_F_CREATE should be set when creating new route [ 89.599707][ T7122] IPv6: NLM_F_CREATE should be set when creating new route [ 89.606942][ T7122] IPv6: NLM_F_CREATE should be set when creating new route [ 89.815215][ T7138] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1320'. [ 89.839091][ T7140] loop9: detected capacity change from 0 to 1024 [ 89.847234][ T7140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.885000][ T7144] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1324'. [ 89.897399][ T7140] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.946185][ T7148] netlink: 'syz.4.1325': attribute type 3 has an invalid length. [ 89.994700][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.070120][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.079812][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.241754][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1333'. [ 90.294572][ T7176] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1335'. [ 90.422329][ T7184] loop0: detected capacity change from 0 to 1024 [ 90.453318][ T7184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.516631][ T7184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.595285][ T6261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.697130][ T7209] loop8: detected capacity change from 0 to 1024 [ 90.721150][ T7209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.765785][ T7209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.861211][ T7225] SELinux: ebitmap start bit (15) is not a multiple of the map unit size (64) [ 90.885098][ T7225] SELinux: failed to load policy [ 90.935896][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.981333][ T7228] SELinux: failed to load policy [ 91.083917][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.095739][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.116630][ T7232] SELinux: ebitmap start bit (15) is not a multiple of the map unit size (64) [ 91.126026][ T7232] SELinux: failed to load policy [ 91.182486][ T7245] loop8: detected capacity change from 0 to 128 [ 91.191119][ T7243] loop7: detected capacity change from 0 to 1024 [ 91.215662][ T7243] EXT4-fs: inline encryption not supported [ 91.250868][ T7243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.284461][ T4563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.549967][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 91.549982][ T29] audit: type=1326 audit(1764679932.687:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ece0f749 code=0x7ffc0000 [ 91.582193][ T29] audit: type=1326 audit(1764679932.687:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f31ece0f749 code=0x7ffc0000 [ 91.606331][ T29] audit: type=1326 audit(1764679932.687:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ece0f749 code=0x7ffc0000 [ 91.645762][ T29] audit: type=1400 audit(1764679932.787:1336): avc: denied { connect } for pid=7271 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.806164][ T29] audit: type=1400 audit(1764679932.937:1337): avc: denied { mounton } for pid=7282 comm="syz.0.1382" path="/proc/127/cgroup" dev="proc" ino=20991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 91.932210][ T7299] loop8: detected capacity change from 0 to 512 [ 91.956912][ T7299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.013537][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.026259][ T29] audit: type=1326 audit(1764679933.177:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.9.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 92.032396][ T7306] loop9: detected capacity change from 0 to 1024 [ 92.078047][ T7306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.107977][ T29] audit: type=1326 audit(1764679933.177:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.9.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 92.132215][ T29] audit: type=1326 audit(1764679933.177:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.9.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f951169f749 code=0x7ffc0000 [ 92.156477][ T29] audit: type=1326 audit(1764679933.177:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.9.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f951169f783 code=0x7ffc0000 [ 92.179797][ T29] audit: type=1326 audit(1764679933.177:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.9.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f951169e1ff code=0x7ffc0000 [ 92.204853][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.224788][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.244932][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.303925][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.313980][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.469268][ T7330] loop7: detected capacity change from 0 to 128 [ 92.480185][ T7330] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.503382][ T7330] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.518689][ T7332] No such timeout policy "syz0" [ 92.853004][ T6487] hid_parser_main: 22 callbacks suppressed [ 92.853022][ T6487] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 92.866381][ T6487] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 92.874062][ T6487] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 92.909436][ T6487] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 92.941019][ T7364] fido_id[7364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.104955][ T4759] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.239217][ T7387] loop8: detected capacity change from 0 to 512 [ 93.247567][ T7387] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 93.259166][ T7387] EXT4-fs (loop8): 1 truncate cleaned up [ 93.265385][ T7387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.288795][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.302480][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.313360][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.343760][ T7392] loop8: detected capacity change from 0 to 1024 [ 93.354638][ T7392] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.365625][ T7392] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.376273][ T7392] JBD2: no valid journal superblock found [ 93.382050][ T7392] EXT4-fs (loop8): Could not load journal inode [ 93.389710][ T7392] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 93.441107][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1430'. [ 93.525646][ T4812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.598073][ T4812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.644518][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1434'. [ 93.671020][ T4812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.744945][ T4812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.836401][ T4812] bridge_slave_1: left allmulticast mode [ 93.842113][ T4812] bridge_slave_1: left promiscuous mode [ 93.848536][ T4812] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.861231][ T4812] bridge_slave_0: left allmulticast mode [ 93.867096][ T4812] bridge_slave_0: left promiscuous mode [ 93.872795][ T4812] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.977509][ T4812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.987634][ T4812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.997587][ T4812] bond0 (unregistering): Released all slaves [ 94.039550][ T7405] chnl_net:caif_netlink_parms(): no params data found [ 94.057719][ T4812] hsr_slave_0: left promiscuous mode [ 94.063602][ T4812] hsr_slave_1: left promiscuous mode [ 94.069298][ T4812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.076714][ T4812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.084486][ T4812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.091878][ T4812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.102803][ T4812] veth1_macvtap: left promiscuous mode [ 94.108397][ T4812] veth0_macvtap: left promiscuous mode [ 94.113903][ T4812] veth1_vlan: left promiscuous mode [ 94.119294][ T4812] veth0_vlan: left promiscuous mode [ 94.185521][ T4812] team0 (unregistering): Port device team_slave_1 removed [ 94.195676][ T4812] team0 (unregistering): Port device team_slave_0 removed [ 94.251927][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.259089][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.266291][ T7405] bridge_slave_0: entered allmulticast mode [ 94.272745][ T7405] bridge_slave_0: entered promiscuous mode [ 94.279827][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.286942][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.294075][ T7405] bridge_slave_1: entered allmulticast mode [ 94.300964][ T7405] bridge_slave_1: entered promiscuous mode [ 94.319158][ T7405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.329776][ T7405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.350400][ T7405] team0: Port device team_slave_0 added [ 94.357892][ T7405] team0: Port device team_slave_1 added [ 94.373563][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.380686][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.406717][ T7405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.418107][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.425128][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.451769][ T7405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.479563][ T7405] hsr_slave_0: entered promiscuous mode [ 94.485668][ T7405] hsr_slave_1: entered promiscuous mode [ 94.491600][ T7405] debugfs: 'hsr0' already exists in 'hsr' [ 94.497577][ T7405] Cannot create hsr debugfs directory [ 94.554003][ T7405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.564384][ T7405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.617748][ T7405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.628630][ T7405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.697147][ T7405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.707509][ T7405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.757391][ T7405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.768021][ T7405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.830638][ T7405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.839455][ T7405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.848872][ T7405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.857892][ T7405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.873656][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.880866][ T7405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.888201][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.895353][ T7405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.923579][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.936352][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.944211][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.956713][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.967190][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.974395][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.985928][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.993082][ T4807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.059323][ T7405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.122787][ T7405] veth0_vlan: entered promiscuous mode [ 95.131154][ T7405] veth1_vlan: entered promiscuous mode [ 95.136230][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 95.137320][ T3743] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.157746][ T7405] veth0_macvtap: entered promiscuous mode [ 95.165658][ T7405] veth1_macvtap: entered promiscuous mode [ 95.182122][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.192246][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.204104][ T4803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.213772][ T4803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.224126][ T4803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234060][ T4803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.353479][ T7457] tipc: Started in network mode [ 95.358506][ T7457] tipc: Node identity ac14140f, cluster identity 4711 [ 95.369084][ T7457] tipc: New replicast peer: 255.255.255.255 [ 95.375760][ T7457] tipc: Enabled bearer , priority 10 [ 95.699418][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 95.708722][ T7460] loop2: detected capacity change from 0 to 32768 [ 95.753440][ T7483] erspan0: entered promiscuous mode [ 95.760006][ T7483] macvtap1: entered promiscuous mode [ 95.765741][ T7483] macvtap1: entered allmulticast mode [ 95.771187][ T7483] erspan0: entered allmulticast mode [ 95.781219][ T7460] loop2: p1 p3 < > [ 95.793874][ T7487] loop7: detected capacity change from 0 to 512 [ 95.803293][ T7486] macvtap1: left promiscuous mode [ 95.808678][ T7486] macvtap1: left allmulticast mode [ 95.813913][ T7486] erspan0: left allmulticast mode [ 95.834999][ T7487] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1455: couldn't read orphan inode 26 (err -116) [ 95.851008][ T7487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.865557][ T7487] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.909322][ T4563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.946602][ T7497] loop9: detected capacity change from 0 to 164 [ 95.966665][ T7497] syz.9.1459: attempt to access beyond end of device [ 95.966665][ T7497] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 95.983068][ T7497] syz.9.1459: attempt to access beyond end of device [ 95.983068][ T7497] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.039757][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 96.051437][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 96.088269][ T7508] loop0: detected capacity change from 0 to 512 [ 96.100438][ T7510] netlink: 'syz.2.1464': attribute type 3 has an invalid length. [ 96.123088][ T7508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.152465][ T7514] loop7: detected capacity change from 0 to 1024 [ 96.161582][ T7514] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.172490][ T7508] EXT4-fs (loop0): 1 truncate cleaned up [ 96.194936][ T7514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.207469][ T7508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.243925][ T7514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.270318][ T6261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.359235][ T4563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.413602][ T7536] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1476'. [ 96.498159][ T3403] tipc: Node number set to 2886997007 [ 96.511943][ T7545] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 96.511943][ T7545] program syz.9.1479 not setting count and/or reply_len properly [ 96.532265][ T7541] loop2: detected capacity change from 0 to 2048 [ 96.616273][ T7523] loop8: detected capacity change from 0 to 32768 [ 96.655052][ T7523] loop8: p1 p3 < > [ 96.746008][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1483'. [ 96.766705][ T7554] netlink: 312 bytes leftover after parsing attributes in process `syz.9.1483'. [ 96.775856][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1483'. [ 96.846790][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 96.863863][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 96.873986][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1486'. [ 96.900033][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.907519][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.916490][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.924197][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.106191][ T7584] netlink: 'syz.8.1498': attribute type 4 has an invalid length. [ 97.404692][ T7582] loop9: detected capacity change from 0 to 32768 [ 97.415164][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 97.415182][ T29] audit: type=1400 audit(1764679938.537:1431): avc: denied { ioctl } for pid=7596 comm="syz.7.1504" path="socket:[21893]" dev="sockfs" ino=21893 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.777076][ T3308] loop9: p1 p3 < > [ 97.784757][ T7582] loop9: p1 p3 < > [ 97.913831][ T29] audit: type=1326 audit(1764679939.057:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 97.938156][ T29] audit: type=1326 audit(1764679939.057:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 97.990652][ T29] audit: type=1326 audit(1764679939.057:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 97.998854][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 98.014955][ T29] audit: type=1326 audit(1764679939.057:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 98.026318][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 98.048222][ T29] audit: type=1326 audit(1764679939.057:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 98.081383][ T29] audit: type=1326 audit(1764679939.057:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 98.105585][ T29] audit: type=1326 audit(1764679939.057:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 98.129166][ T29] audit: type=1326 audit(1764679939.117:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 98.153582][ T29] audit: type=1326 audit(1764679939.117:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.8.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68b4b6f749 code=0x7ffc0000 [ 98.233261][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 98.244959][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 98.295516][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1523'. [ 98.315736][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1523'. [ 98.426832][ T7652] loop9: detected capacity change from 0 to 512 [ 98.442837][ T7652] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 98.464719][ T7652] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 98.475443][ T7652] EXT4-fs (loop9): orphan cleanup on readonly fs [ 98.494074][ T7652] EXT4-fs (loop9): 1 truncate cleaned up [ 98.525114][ T7652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.573716][ T5726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.601997][ T7662] loop9: detected capacity change from 0 to 128 [ 98.609924][ T7660] xt_hashlimit: max too large, truncated to 1048576 [ 98.660559][ T7662] syz.9.1529: attempt to access beyond end of device [ 98.660559][ T7662] loop9: rw=0, sector=121, nr_sectors = 8 limit=128 [ 98.727401][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1532'. [ 98.790181][ T7653] loop7: detected capacity change from 0 to 32768 [ 98.825804][ T4604] loop7: p1 p3 < > [ 98.851866][ T7653] loop7: p1 p3 < > [ 98.871196][ T7672] loop0: detected capacity change from 0 to 256 [ 98.928808][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1534'. [ 98.982640][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 99.009081][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 99.038650][ T7686] Falling back ldisc for ptm0. [ 99.194627][ T7705] loop8: detected capacity change from 0 to 512 [ 99.208628][ T7705] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 99.224647][ T7705] System zones: 0-2, 18-18, 34-34 [ 99.234203][ T7705] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 99.258648][ T7712] loop9: detected capacity change from 0 to 1024 [ 99.275897][ T7705] EXT4-fs (loop8): Remounting filesystem read-only [ 99.278682][ T7712] EXT4-fs: Ignoring removed bh option [ 99.283289][ T7705] EXT4-fs (loop8): 1 truncate cleaned up [ 99.288068][ T7712] EXT4-fs: test_dummy_encryption option not supported [ 99.302513][ T4827] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.313434][ T4827] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.325350][ T7705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.325531][ T4827] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.367675][ T7705] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.378554][ T7714] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 99.461782][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.542006][ T7731] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 99.614591][ T7737] loop8: detected capacity change from 0 to 512 [ 99.646155][ T7737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.667930][ T7737] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.744160][ T7710] loop0: detected capacity change from 0 to 32768 [ 99.784887][ T7710] loop0: p1 p3 < > [ 99.877473][ T7750] loop0: detected capacity change from 0 to 2048 [ 99.945629][ T3308] loop0: p1 < > p4 [ 99.957675][ T3308] loop0: p4 size 8388608 extends beyond EOD, truncated [ 99.972204][ T7750] loop0: p1 < > p4 [ 99.977717][ T7750] loop0: p4 size 8388608 extends beyond EOD, truncated [ 100.294921][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.541695][ T7783] loop2: detected capacity change from 0 to 32768 [ 100.605869][ T3308] loop2: p1 p3 < > [ 100.616756][ T7783] loop2: p1 p3 < > [ 100.736964][ T7810] __nla_validate_parse: 3 callbacks suppressed [ 100.736984][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 100.762263][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 100.772773][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 100.793409][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 100.920544][ T7819] loop8: detected capacity change from 0 to 2048 [ 100.947722][ T7819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.989129][ T5676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.060824][ T7836] loop8: detected capacity change from 0 to 128 [ 101.070384][ T7836] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.084835][ T7836] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.121501][ T7842] x_tables: duplicate underflow at hook 1 [ 101.191102][ T7850] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 101.198959][ T7850] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1608'. [ 101.868109][ T7918] dummy0: entered promiscuous mode [ 101.876367][ T7918] bond_slave_0: entered promiscuous mode [ 101.882184][ T7918] bond_slave_0: left promiscuous mode [ 101.888457][ T7918] dummy0: left promiscuous mode [ 101.937517][ T7920] loop7: detected capacity change from 0 to 8192 [ 101.973335][ T3005] ================================================================== [ 101.975816][ T7920] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 101.981453][ T3005] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 101.990338][ T7920] FAT-fs (loop7): Filesystem has been set read-only [ 101.997506][ T3005] [ 101.997516][ T3005] read-write to 0xffff888106a79cc0 of 4 bytes by task 3308 on cpu 1: [ 101.997544][ T3005] dont_mount+0x2a/0x40 [ 102.018677][ T3005] vfs_unlink+0x2ae/0x440 [ 102.023050][ T3005] do_unlinkat+0x1cd/0x4b0 [ 102.027490][ T3005] __x64_sys_unlink+0x2e/0x40 [ 102.032216][ T3005] x64_sys_call+0x2f48/0x3000 [ 102.036896][ T3005] do_syscall_64+0xd8/0x2a0 [ 102.041425][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.047327][ T3005] [ 102.049659][ T3005] read to 0xffff888106a79cc0 of 4 bytes by task 3005 on cpu 0: [ 102.057212][ T3005] step_into_slowpath+0x120/0x480 [ 102.062259][ T3005] path_lookupat+0x330/0x500 [ 102.066866][ T3005] filename_lookup+0x147/0x340 [ 102.071648][ T3005] do_readlinkat+0x7d/0x320 [ 102.076174][ T3005] __x64_sys_readlink+0x47/0x60 [ 102.081038][ T3005] x64_sys_call+0x2af1/0x3000 [ 102.085905][ T3005] do_syscall_64+0xd8/0x2a0 [ 102.090513][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.096415][ T3005] [ 102.098737][ T3005] value changed: 0x00300080 -> 0x00004080 [ 102.104455][ T3005] [ 102.106779][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 102.112943][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.122234][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.132318][ T3005] ==================================================================