last executing test programs: 41.207589611s ago: executing program 1 (id=663): r0 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r0, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) timerfd_create(0x1, 0x800) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 40.270381036s ago: executing program 1 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) 40.231552629s ago: executing program 1 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 40.184960503s ago: executing program 1 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 40.106696549s ago: executing program 1 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 39.827697632s ago: executing program 1 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 39.827538162s ago: executing program 32 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 27.547718601s ago: executing program 5 (id=1090): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 27.501590915s ago: executing program 5 (id=1091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 27.413473452s ago: executing program 5 (id=1092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 27.384848085s ago: executing program 5 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 27.255490035s ago: executing program 5 (id=1096): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x20000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 26.891898474s ago: executing program 5 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.890408534s ago: executing program 33 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25.286385473s ago: executing program 4 (id=1146): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) chown(0x0, 0x0, 0x0) 25.071956871s ago: executing program 4 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) pidfd_send_signal(r2, 0x24, 0x0, 0x0) 24.96613192s ago: executing program 4 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 24.862932068s ago: executing program 4 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 24.731052088s ago: executing program 4 (id=1150): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x671}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) close(r0) 24.637224376s ago: executing program 4 (id=1155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0, 0x0, 0x20000}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 24.604161578s ago: executing program 34 (id=1155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0, 0x0, 0x20000}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.329763784s ago: executing program 3 (id=2064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x5, 0x5, 0x8}]}}}}}}}}, 0x0) 1.269801589s ago: executing program 3 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.269316039s ago: executing program 3 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 1.175952676s ago: executing program 3 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x40, 0x0, 0xbc, 0x40280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x805, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x17}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) 1.103629522s ago: executing program 3 (id=2076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.094578523s ago: executing program 2 (id=2077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b51, &(0x7f00000003c0)={0x0, 0x763, 0x80, 0x2, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 900.035108ms ago: executing program 6 (id=2086): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x3}}, 0x18) 899.697659ms ago: executing program 6 (id=2088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 824.158175ms ago: executing program 6 (id=2089): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@nojournal_checksum}, {@oldalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x96f4}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") unlink(0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 824.033984ms ago: executing program 2 (id=2090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 732.054962ms ago: executing program 2 (id=2095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r1) 614.778271ms ago: executing program 7 (id=2098): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2014, 0xfffe, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(0x0, 0xee00, 0x0) 555.925176ms ago: executing program 2 (id=2099): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007119b30000000000850000007500000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 529.441248ms ago: executing program 6 (id=2100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 524.365499ms ago: executing program 2 (id=2101): socket$nl_xfrm(0x10, 0x3, 0x6) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000001bc0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./bus\x00', 0x2000414, &(0x7f0000000380)=ANY=[], 0x1, 0x2b8, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000540)='./bus\x00', 0x44142, 0x185) ftruncate(r0, 0x2007ffc) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x16) 444.757895ms ago: executing program 6 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x2, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x21, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a6d, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x20000, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x8, 0xf9, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8, 0xff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 444.389255ms ago: executing program 7 (id=2104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "fffffffffffff1ff"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 444.016445ms ago: executing program 6 (id=2106): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0xfffffff9, 0x7, 0x200}, &(0x7f00000003c0)=0x10) 394.681659ms ago: executing program 2 (id=2107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x14, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create(0x8e81) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000b80)={0x8000200a}) 358.046162ms ago: executing program 0 (id=2110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 199.721205ms ago: executing program 3 (id=2111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@nojournal_checksum}, {@oldalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x96f4}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") unlink(0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 199.529845ms ago: executing program 7 (id=2112): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xbe928aa46500a46c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 199.197395ms ago: executing program 0 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 162.923628ms ago: executing program 0 (id=2113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 151.645379ms ago: executing program 7 (id=2114): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 109.577362ms ago: executing program 0 (id=2115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x100000000, &(0x7f00000000c0)={0x2f, 0x10000002, 0x1de}) 109.456642ms ago: executing program 7 (id=2116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r1, 0x12) 109.343032ms ago: executing program 0 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 52.918896ms ago: executing program 0 (id=2118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x1) 0s ago: executing program 7 (id=2119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 0 on prog (id 228) dev N/A, expect packet loss! [ 39.058399][ C0] vcan0: j1939_tp_rxtimer: 0xffff888101245200: rx timeout, send abort [ 39.068301][ C0] vcan0: j1939_tp_rxtimer: 0xffff888101245600: abort rx timeout. Force session deactivation [ 39.385441][ T4281] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 39.498505][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 39.506278][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 39.526166][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 39.556804][ T10] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.566812][ C0] vcan0: j1939_tp_rxtimer: 0xffff888101245200: abort rx timeout. Force session deactivation [ 39.688770][ T4312] loop3: detected capacity change from 0 to 512 [ 39.726052][ T4312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.764894][ T4312] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.772914][ T4312] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 39.808089][ T4312] System zones: 0-1, 15-15, 18-18, 34-34 [ 39.821818][ T4312] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.832460][ T4312] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 39.847080][ T4312] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 39.894390][ T4312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.361: bg 0: block 40: padding at end of block bitmap is not set [ 39.936578][ T4312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 39.951119][ T4312] EXT4-fs (loop3): 1 truncate cleaned up [ 39.961433][ T4312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.981656][ T4312] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.361: bad symlink. [ 39.996503][ T4318] Falling back ldisc for ttyS3. [ 40.055968][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.119464][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 40.148744][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 40.369052][ T4364] syz.3.382 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.468514][ T4373] mmap: syz.0.386 (4373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.480797][ T4375] sctp: [Deprecated]: syz.2.388 (pid 4375) Use of int in maxseg socket option. [ 40.480797][ T4375] Use struct sctp_assoc_value instead [ 41.068023][ T4380] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 41.132365][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 41.294294][ T4427] 9pnet_fd: Insufficient options for proto=fd [ 41.368927][ T4435] loop2: detected capacity change from 0 to 512 [ 41.400052][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 41.400064][ T29] audit: type=1400 audit(41.376:761): avc: denied { read } for pid=4436 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.439326][ T4435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.506441][ T29] audit: type=1400 audit(41.486:762): avc: denied { getopt } for pid=4450 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.525275][ T29] audit: type=1400 audit(41.486:763): avc: denied { read append open } for pid=4434 comm="syz.2.415" path="/81/bus/cpu.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.548338][ T29] audit: type=1400 audit(41.486:764): avc: denied { ioctl } for pid=4434 comm="syz.2.415" path="/81/bus/cpu.stat" dev="loop2" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.583656][ T4456] netlink: 268 bytes leftover after parsing attributes in process `syz.4.423'. [ 41.585335][ T4458] loop3: detected capacity change from 0 to 1764 [ 41.592782][ T4456] unsupported nla_type 65024 [ 41.604606][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.628349][ T29] audit: type=1400 audit(41.596:765): avc: denied { mount } for pid=4457 comm="syz.3.424" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.649973][ T29] audit: type=1400 audit(41.606:766): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.656912][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.691848][ T29] audit: type=1326 audit(41.656:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 41.707012][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.714534][ T29] audit: type=1326 audit(41.656:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 41.744641][ T29] audit: type=1326 audit(41.656:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 41.767245][ T29] audit: type=1326 audit(41.656:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 41.791482][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 41.891085][ T4481] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 41.928887][ T4481] team0: Port device dummy0 added [ 41.950743][ T4481] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 41.972237][ T4481] team0: Port device dummy0 removed [ 41.983637][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 41.992723][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 42.001607][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 42.076201][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 42.085151][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 42.094027][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 42.271617][ T3470] kernel write not supported for file /224/clear_refs (pid: 3470 comm: kworker/0:5) [ 42.318861][ T3470] IPVS: starting estimator thread 0... [ 42.419236][ T4550] capability: warning: `syz.4.465' uses deprecated v2 capabilities in a way that may be insecure [ 42.435199][ T4533] IPVS: using max 2160 ests per chain, 108000 per kthread [ 42.589763][ T4577] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.621740][ T4581] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 42.734269][ T4593] loop4: detected capacity change from 0 to 128 [ 42.823906][ T4607] serio: Serial port ptm1 [ 42.963107][ T4619] __nla_validate_parse: 3 callbacks suppressed [ 42.963121][ T4619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'. [ 42.985799][ T4619] netem: change failed [ 43.571175][ T4668] loop4: detected capacity change from 0 to 128 [ 43.610440][ T4668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.662914][ T4682] netlink: 56 bytes leftover after parsing attributes in process `syz.2.528'. [ 43.677594][ T4682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 43.718307][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 43.731451][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.741254][ T4688] bridge_slave_1: left allmulticast mode [ 43.746921][ T4688] bridge_slave_1: left promiscuous mode [ 43.752750][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.765653][ T4688] bridge_slave_0: left allmulticast mode [ 43.771314][ T4688] bridge_slave_0: left promiscuous mode [ 43.777285][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.936572][ T4712] netlink: 'syz.2.542': attribute type 10 has an invalid length. [ 43.944511][ T4712] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.542'. [ 44.104505][ T4740] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 44.116475][ T4737] IPVS: stopping master sync thread 4740 ... [ 44.188603][ T4751] pim6reg: entered allmulticast mode [ 44.219229][ T4751] pim6reg: left allmulticast mode [ 44.257021][ T4760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.564'. [ 44.317642][ T4763] loop1: detected capacity change from 0 to 512 [ 44.344395][ T4763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 44.352824][ T4763] System zones: 1-12 [ 44.364698][ T4763] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.565: corrupted in-inode xattr: e_value size too large [ 44.382358][ T4763] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.565: couldn't read orphan inode 15 (err -117) [ 44.396141][ T4763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.468623][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.617248][ T4782] loop2: detected capacity change from 0 to 512 [ 44.625989][ T4782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.653286][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.674684][ T4785] loop1: detected capacity change from 0 to 512 [ 44.687799][ T4785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.701303][ T4785] EXT4-fs (loop1): 1 truncate cleaned up [ 44.708690][ T4785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.751672][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.844273][ T4799] loop2: detected capacity change from 0 to 512 [ 44.851469][ T4799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.864906][ T4799] EXT4-fs (loop2): 1 truncate cleaned up [ 44.870875][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.996334][ T4807] loop4: detected capacity change from 0 to 512 [ 45.019623][ T4807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.046555][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.104339][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 45.145576][ T4807] EXT4-fs (loop4): 1 truncate cleaned up [ 45.151790][ T4807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.407341][ T4819] SELinux: failed to load policy [ 45.420242][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.703629][ T4842] pim6reg: entered allmulticast mode [ 45.804603][ T4827] loop2: detected capacity change from 0 to 32768 [ 45.846558][ T4827] loop2: p1 p3 < > [ 46.088441][ T4862] netlink: 7 bytes leftover after parsing attributes in process `syz.0.608'. [ 46.104353][ T4862] netlink: 7 bytes leftover after parsing attributes in process `syz.0.608'. [ 46.178594][ T4874] random: crng reseeded on system resumption [ 46.267812][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a265200: rx timeout, send abort [ 46.276054][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a265800: rx timeout, send abort [ 46.284339][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a265200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 46.298638][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a265800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 46.412742][ T4900] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.423374][ T4902] netlink: 'syz.0.625': attribute type 3 has an invalid length. [ 46.468836][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 46.759784][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 46.759797][ T29] audit: type=1326 audit(302.423:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.805679][ T29] audit: type=1326 audit(302.451:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.828323][ T29] audit: type=1326 audit(302.451:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.851025][ T29] audit: type=1326 audit(302.451:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.873944][ T29] audit: type=1326 audit(302.451:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.896556][ T29] audit: type=1326 audit(302.451:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.919362][ T29] audit: type=1326 audit(302.451:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 46.979110][ T4930] IPVS: stopping master sync thread 4076 ... [ 46.988357][ T29] audit: type=1326 audit(302.638:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 47.011159][ T29] audit: type=1326 audit(302.638:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 47.033914][ T29] audit: type=1326 audit(302.638:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 47.090616][ T4939] netem: incorrect ge model size [ 47.095572][ T4939] netem: change failed [ 47.134508][ T4943] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 47.320028][ T4960] vlan0: entered allmulticast mode [ 47.325338][ T4960] veth0_vlan: entered allmulticast mode [ 47.353800][ T4964] loop4: detected capacity change from 0 to 128 [ 47.424434][ T4976] loop4: detected capacity change from 0 to 512 [ 47.442674][ T4976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.493525][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.553235][ T4993] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.572538][ T4995] vlan2: entered allmulticast mode [ 47.577865][ T4995] dummy0: entered allmulticast mode [ 47.731646][ T4999] loop3: detected capacity change from 0 to 32768 [ 47.770686][ T4999] loop3: p1 p3 < > [ 47.991033][ T5027] bridge0: port 3(batadv1) entered blocking state [ 47.997534][ T5027] bridge0: port 3(batadv1) entered disabled state [ 48.005760][ T5027] batadv1: entered allmulticast mode [ 48.011662][ T5027] batadv1: entered promiscuous mode [ 48.256697][ T5036] SELinux: failed to load policy [ 48.539753][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 48.549050][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 48.794208][ T5103] loop2: detected capacity change from 0 to 2048 [ 48.854492][ T5103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.960878][ T5116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5116 comm=syz.4.725 [ 48.973319][ T5116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5116 comm=syz.4.725 [ 49.020841][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.273799][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 49.403155][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.410275][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.430088][ T5112] bridge_slave_0: entered allmulticast mode [ 49.436498][ T5112] bridge_slave_0: entered promiscuous mode [ 49.456383][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.463541][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.472653][ T5112] bridge_slave_1: entered allmulticast mode [ 49.479338][ T5112] bridge_slave_1: entered promiscuous mode [ 49.536307][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.536727][ T5164] rdma_op ffff888108ef2580 conn xmit_rdma 0000000000000000 [ 49.550144][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.696674][ T5112] team0: Port device team_slave_0 added [ 49.704042][ T5112] team0: Port device team_slave_1 added [ 49.723706][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.730831][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.756839][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.773679][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.780694][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.806733][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.877877][ T5112] hsr_slave_0: entered promiscuous mode [ 49.883911][ T5112] hsr_slave_1: entered promiscuous mode [ 49.902329][ T5112] debugfs: 'hsr0' already exists in 'hsr' [ 49.908144][ T5112] Cannot create hsr debugfs directory [ 50.000428][ T5193] wireguard0: entered promiscuous mode [ 50.005946][ T5193] wireguard0: entered allmulticast mode [ 50.041530][ T5112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.050806][ T5112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.060008][ T5112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.069418][ T5112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.136980][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.153735][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 50.192931][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.207252][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.214328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.268909][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.276075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.285415][ T5218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5218 comm=syz.2.764 [ 50.297834][ T5218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5218 comm=syz.2.764 [ 50.303020][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.395736][ T5236] __nla_validate_parse: 2 callbacks suppressed [ 50.395755][ T5236] netlink: 180 bytes leftover after parsing attributes in process `syz.0.769'. [ 50.425070][ T5236] netlink: 180 bytes leftover after parsing attributes in process `syz.0.769'. [ 50.441342][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.657333][ T5112] veth0_vlan: entered promiscuous mode [ 50.682390][ T5112] veth1_vlan: entered promiscuous mode [ 50.684162][ T5289] loop2: detected capacity change from 0 to 512 [ 50.698514][ T5289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.717151][ T5289] EXT4-fs (loop2): 1 orphan inode deleted [ 50.723028][ T5289] EXT4-fs (loop2): 1 truncate cleaned up [ 50.728157][ T5112] veth0_macvtap: entered promiscuous mode [ 50.738736][ T5112] veth1_macvtap: entered promiscuous mode [ 50.746763][ T5289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.751946][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.772604][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.787621][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.800163][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.815699][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.840234][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.854651][ T5297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.872307][ T5297] EXT4-fs (loop2): Remounting filesystem read-only [ 50.881500][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.379640][ T5405] loop4: detected capacity change from 0 to 512 [ 51.406687][ T5405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.477758][ T5405] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.798: corrupted inode contents [ 51.496560][ T5405] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.798: mark_inode_dirty error [ 51.509889][ T5405] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.798: corrupted inode contents [ 51.531490][ T5405] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.798: mark_inode_dirty error [ 51.551297][ T5405] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #18: comm syz.4.798: directory missing '.' [ 51.573910][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.781041][ T5454] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 51.787628][ T5454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.795290][ T5454] vhci_hcd vhci_hcd.0: Device attached [ 51.854526][ T5442] Set syz1 is full, maxelem 65536 reached [ 51.861003][ T5460] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 51.867578][ T5460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.875183][ T5460] vhci_hcd vhci_hcd.0: Device attached [ 51.900869][ T5422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.930583][ T5454] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 51.937109][ T5454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.944907][ T5454] vhci_hcd vhci_hcd.0: Device attached [ 51.967725][ T5422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.982282][ T5454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.022732][ T5475] loop2: detected capacity change from 0 to 512 [ 52.035138][ T5474] loop4: detected capacity change from 0 to 512 [ 52.042087][ T5454] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 52.048780][ T5454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.056396][ T5454] vhci_hcd vhci_hcd.0: Device attached [ 52.066156][ T5422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.079293][ T5474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.088778][ T36] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 52.089415][ T5454] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 52.103127][ T5454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.110774][ T5454] vhci_hcd vhci_hcd.0: Device attached [ 52.121005][ T5475] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.822: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 52.136792][ T5474] EXT4-fs (loop4): 1 orphan inode deleted [ 52.144538][ T5474] EXT4-fs (loop4): 1 truncate cleaned up [ 52.152131][ T5474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.172393][ T5478] vhci_hcd: connection closed [ 52.172605][ T5467] vhci_hcd: connection closed [ 52.184928][ T5455] vhci_hcd: connection reset by peer [ 52.194995][ T5461] vhci_hcd: connection closed [ 52.195099][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 52.195112][ T29] audit: type=1400 audit(307.484:1410): avc: denied { write } for pid=5481 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.225195][ T5426] vhci_hcd: stop threads [ 52.227235][ T5470] vhci_hcd: connection closed [ 52.229611][ T5426] vhci_hcd: release socket [ 52.238753][ T5426] vhci_hcd: disconnect device [ 52.240373][ T5475] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.822: Bad quota inode: 3, type: 0 [ 52.243868][ T5426] vhci_hcd: stop threads [ 52.258485][ T5426] vhci_hcd: release socket [ 52.258881][ T29] audit: type=1400 audit(307.549:1411): avc: denied { attach_queue } for pid=5472 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 52.262975][ T5426] vhci_hcd: disconnect device [ 52.263847][ T5426] vhci_hcd: stop threads [ 52.284242][ T5475] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 52.287067][ T5426] vhci_hcd: release socket [ 52.287080][ T5426] vhci_hcd: disconnect device [ 52.288230][ T5426] vhci_hcd: stop threads [ 52.291440][ T5475] EXT4-fs (loop2): mount failed [ 52.305975][ T5426] vhci_hcd: release socket [ 52.305989][ T5426] vhci_hcd: disconnect device [ 52.313563][ T5426] vhci_hcd: stop threads [ 52.338192][ T5426] vhci_hcd: release socket [ 52.342690][ T5426] vhci_hcd: disconnect device [ 52.350534][ T5422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.366076][ T29] audit: type=1326 audit(307.671:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 52.389025][ T29] audit: type=1326 audit(307.671:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 52.413292][ T29] audit: type=1326 audit(307.708:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 52.436199][ T29] audit: type=1326 audit(307.708:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 52.458924][ T29] audit: type=1326 audit(307.708:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 52.485695][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.500986][ T29] audit: type=1400 audit(307.792:1417): avc: denied { create } for pid=5489 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.519965][ T5422] bridge_slave_1: left allmulticast mode [ 52.521620][ T29] audit: type=1400 audit(307.792:1418): avc: denied { setopt } for pid=5489 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.525742][ T5422] bridge_slave_1: left promiscuous mode [ 52.550844][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.566415][ T5422] bridge_slave_0: left allmulticast mode [ 52.572195][ T5422] bridge_slave_0: left promiscuous mode [ 52.577866][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.681008][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.692969][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.703469][ T5422] bond0 (unregistering): Released all slaves [ 52.754936][ T5422] hsr_slave_0: left promiscuous mode [ 52.760665][ T5422] hsr_slave_1: left promiscuous mode [ 52.766292][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.773845][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.787698][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.795252][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.823732][ T5422] veth1_macvtap: left promiscuous mode [ 52.829568][ T5422] veth0_macvtap: left promiscuous mode [ 52.840586][ T5422] veth1_vlan: left promiscuous mode [ 52.851652][ T5422] veth0_vlan: left promiscuous mode [ 52.861204][ T5531] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 52.867739][ T5531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.875300][ T5531] vhci_hcd vhci_hcd.0: Device attached [ 52.899410][ T29] audit: type=1326 audit(308.166:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5532 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bfbeebe9 code=0x7ffc0000 [ 52.941995][ T5541] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 52.948646][ T5541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.956262][ T5541] vhci_hcd vhci_hcd.0: Device attached [ 53.004537][ T5531] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 53.011136][ T5531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.018973][ T5531] vhci_hcd vhci_hcd.0: Device attached [ 53.147655][ T5541] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.157770][ T1036] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 53.191447][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 53.200611][ T5531] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(9) [ 53.207190][ T5531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.214805][ T5531] vhci_hcd vhci_hcd.0: Device attached [ 53.223870][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 53.244512][ T5531] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 53.251267][ T5531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.258886][ T5531] vhci_hcd vhci_hcd.0: Device attached [ 53.270427][ T5600] vhci_hcd: connection closed [ 53.270444][ T5595] vhci_hcd: connection closed [ 53.277308][ T5582] vhci_hcd: stop threads [ 53.286460][ T5582] vhci_hcd: release socket [ 53.286840][ T5533] vhci_hcd: connection reset by peer [ 53.290884][ T5582] vhci_hcd: disconnect device [ 53.300437][ T5550] vhci_hcd: connection closed [ 53.301058][ T5542] vhci_hcd: connection closed [ 53.306167][ T5582] vhci_hcd: stop threads [ 53.315301][ T5582] vhci_hcd: release socket [ 53.319869][ T5582] vhci_hcd: disconnect device [ 53.320065][ T5603] loop4: detected capacity change from 0 to 1024 [ 53.334333][ T5603] EXT4-fs: Ignoring removed orlov option [ 53.347258][ T5603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.381392][ T5582] vhci_hcd: stop threads [ 53.385932][ T5582] vhci_hcd: release socket [ 53.390362][ T5582] vhci_hcd: disconnect device [ 53.418329][ T5582] vhci_hcd: stop threads [ 53.422614][ T5582] vhci_hcd: release socket [ 53.427144][ T5582] vhci_hcd: disconnect device [ 53.446857][ T5582] vhci_hcd: stop threads [ 53.451122][ T5582] vhci_hcd: release socket [ 53.455582][ T5582] vhci_hcd: disconnect device [ 53.736525][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.784853][ T5627] netlink: 68 bytes leftover after parsing attributes in process `syz.4.833'. [ 54.018856][ T5651] loop2: detected capacity change from 0 to 1024 [ 54.030026][ T5651] EXT4-fs: Ignoring removed orlov option [ 54.038026][ T5651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.291355][ T5661] Falling back ldisc for ttyS3. [ 54.315061][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 54.321605][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.329153][ T5664] vhci_hcd vhci_hcd.0: Device attached [ 54.355217][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 54.361892][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.369570][ T5664] vhci_hcd vhci_hcd.0: Device attached [ 54.383424][ T5673] loop3: detected capacity change from 0 to 512 [ 54.395658][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 54.402189][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.409850][ T5664] vhci_hcd vhci_hcd.0: Device attached [ 54.419788][ T5681] netlink: 256 bytes leftover after parsing attributes in process `syz.5.850'. [ 54.424287][ T5673] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.849: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.430473][ T5664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.450564][ T5673] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.849: Bad quota inode: 3, type: 0 [ 54.472951][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 54.479579][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.487223][ T5664] vhci_hcd vhci_hcd.0: Device attached [ 54.487275][ T5673] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.507699][ T5673] EXT4-fs (loop3): mount failed [ 54.512276][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.522659][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 54.529270][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.536943][ T5664] vhci_hcd vhci_hcd.0: Device attached [ 54.543364][ T5688] vhci_hcd: connection closed [ 54.543592][ T5426] vhci_hcd: stop threads [ 54.544031][ T5670] vhci_hcd: connection closed [ 54.548525][ T5426] vhci_hcd: release socket [ 54.562342][ T5426] vhci_hcd: disconnect device [ 54.579221][ T5686] vhci_hcd: connection closed [ 54.579341][ T5677] vhci_hcd: connection closed [ 54.584174][ T5665] vhci_hcd: connection closed [ 54.591451][ T5426] vhci_hcd: stop threads [ 54.600398][ T5426] vhci_hcd: release socket [ 54.604932][ T5426] vhci_hcd: disconnect device [ 54.609665][ T3394] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 54.617171][ T5666] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 54.617670][ T5426] vhci_hcd: stop threads [ 54.627487][ T5426] vhci_hcd: release socket [ 54.632000][ T5426] vhci_hcd: disconnect device [ 54.636979][ T5426] vhci_hcd: stop threads [ 54.641231][ T5426] vhci_hcd: release socket [ 54.645817][ T5426] vhci_hcd: disconnect device [ 54.651548][ T5426] vhci_hcd: stop threads [ 54.655938][ T5426] vhci_hcd: release socket [ 54.660373][ T5426] vhci_hcd: disconnect device [ 54.730013][ T5708] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 54.827479][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 54.848964][ T5735] netlink: 'syz.5.875': attribute type 1 has an invalid length. [ 54.902316][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 54.916505][ T5737] vlan2: entered promiscuous mode [ 54.921689][ T5737] gretap0: entered promiscuous mode [ 55.244132][ T5751] Set syz1 is full, maxelem 65536 reached [ 55.350826][ T5777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 55.384935][ T5772] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 55.427579][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 55.438262][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 55.552621][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 55.586526][ T5801] loop3: detected capacity change from 0 to 512 [ 55.597970][ T5801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.654309][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.778182][ T5809] loop3: detected capacity change from 0 to 128 [ 55.939259][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 55.955018][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 55.973823][ T5818] netlink: 204 bytes leftover after parsing attributes in process `syz.2.909'. [ 56.014851][ T5811] loop3: detected capacity change from 0 to 32768 [ 56.042633][ T5821] loop5: detected capacity change from 0 to 512 [ 56.081512][ T5811] loop3: p1 p3 < > [ 56.081757][ T5821] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.910: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 56.104502][ T5821] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.910: Bad quota inode: 3, type: 0 [ 56.115593][ T5821] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 56.130660][ T5821] EXT4-fs (loop5): mount failed [ 56.203872][ T5837] loop5: detected capacity change from 0 to 128 [ 56.335237][ T5860] vlan2: entered allmulticast mode [ 56.350981][ T5864] pim6reg1: entered promiscuous mode [ 56.356392][ T5864] pim6reg1: entered allmulticast mode [ 56.369514][ T5866] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 56.705942][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 56.748011][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 56.831592][ T5893] IPv6: Can't replace route, no match found [ 56.936637][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.951542][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.980498][ T5892] loop2: detected capacity change from 0 to 32768 [ 57.028098][ T5892] loop2: p1 p3 < > [ 57.080960][ T5904] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 57.274790][ T5918] loop3: detected capacity change from 0 to 512 [ 57.285349][ T5918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.306219][ T5918] EXT4-fs (loop3): 1 orphan inode deleted [ 57.312037][ T5918] EXT4-fs (loop3): 1 truncate cleaned up [ 57.342882][ T5918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.422167][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.498289][ T36] usb 11-1: enqueue for inactive port 0 [ 57.504059][ T36] usb 11-1: enqueue for inactive port 0 [ 57.670851][ T5949] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 57.677497][ T5949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.685297][ T5949] vhci_hcd vhci_hcd.0: Device attached [ 57.730255][ T36] vhci_hcd: vhci_device speed not set [ 57.739955][ T5936] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 57.746576][ T5936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.754099][ T5936] vhci_hcd vhci_hcd.0: Device attached [ 57.757265][ T5955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.781216][ T5945] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 57.787768][ T5945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.795353][ T5945] vhci_hcd vhci_hcd.0: Device attached [ 57.821068][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 57.821135][ T29] audit: type=1400 audit(568.772:1652): avc: denied { read write } for pid=5940 comm="syz.0.960" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.850107][ T29] audit: type=1400 audit(568.772:1653): avc: denied { open } for pid=5940 comm="syz.0.960" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.873796][ T803] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 57.880431][ T5932] loop5: detected capacity change from 0 to 32768 [ 57.881492][ T803] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 57.899911][ T803] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 57.904417][ T10] vhci_hcd: vhci_device speed not set [ 57.908653][ T803] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 57.914593][ T5949] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(5) [ 57.929255][ T5949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.936975][ T5949] vhci_hcd vhci_hcd.0: Device attached [ 57.941044][ T29] audit: type=1326 audit(568.884:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 57.966935][ T5932] loop5: p1 p3 < > [ 57.984167][ T29] audit: type=1326 audit(568.913:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 57.988489][ T5936] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(11) [ 58.007096][ T29] audit: type=1326 audit(568.913:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 58.013636][ T5936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.013809][ T5936] vhci_hcd vhci_hcd.0: Device attached [ 58.036452][ T29] audit: type=1326 audit(568.913:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3441b14a5 code=0x7ffc0000 [ 58.072292][ T29] audit: type=1326 audit(568.913:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 58.095063][ T29] audit: type=1326 audit(568.913:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 58.117906][ T29] audit: type=1326 audit(568.913:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 58.140716][ T29] audit: type=1326 audit(568.913:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 58.150100][ T5969] vhci_hcd: connection closed [ 58.165900][ T5422] vhci_hcd: stop threads [ 58.165987][ T10] usb 7-2: new full-speed USB device number 2 using vhci_hcd [ 58.170652][ T5422] vhci_hcd: release socket [ 58.186774][ T5422] vhci_hcd: disconnect device [ 58.206877][ T5950] vhci_hcd: connection reset by peer [ 58.209224][ T5965] vhci_hcd: connection closed [ 58.213544][ T5937] vhci_hcd: connection closed [ 58.214423][ T5957] vhci_hcd: connection closed [ 58.229827][ T5422] vhci_hcd: stop threads [ 58.238881][ T5422] vhci_hcd: release socket [ 58.243300][ T5422] vhci_hcd: disconnect device [ 58.263572][ T5422] vhci_hcd: stop threads [ 58.267822][ T5422] vhci_hcd: release socket [ 58.272285][ T5422] vhci_hcd: disconnect device [ 58.281879][ T5422] vhci_hcd: stop threads [ 58.286157][ T5422] vhci_hcd: release socket [ 58.290623][ T5422] vhci_hcd: disconnect device [ 58.296440][ T5422] vhci_hcd: stop threads [ 58.300743][ T5422] vhci_hcd: release socket [ 58.305154][ T5422] vhci_hcd: disconnect device [ 58.312211][ T5991] random: crng reseeded on system resumption [ 58.321157][ T5989] IPv6: Can't replace route, no match found [ 58.447119][ T6011] loop2: detected capacity change from 0 to 1024 [ 58.471535][ T6011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.519114][ T6011] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 58.535194][ T1036] usb 5-1: enqueue for inactive port 0 [ 58.550638][ T1036] usb 5-1: enqueue for inactive port 0 [ 58.556533][ T5996] loop5: detected capacity change from 0 to 32768 [ 58.590404][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.610487][ T5996] loop5: p1 p3 < > [ 58.631561][ T1036] vhci_hcd: vhci_device speed not set [ 58.870851][ T6049] serio: Serial port ptm0 [ 59.026252][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 59.032824][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.041065][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 59.054976][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 59.061512][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.069030][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 59.078697][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 59.085285][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.092945][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 59.100626][ T6072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 59.109629][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 59.116246][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.123889][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 59.130294][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 59.136941][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.144734][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 59.150834][ T6085] vhci_hcd: connection closed [ 59.150901][ T6081] vhci_hcd: connection closed [ 59.150919][ T6087] vhci_hcd: connection closed [ 59.157559][ T6073] vhci_hcd: connection closed [ 59.160393][ T5582] vhci_hcd: stop threads [ 59.174022][ T5582] vhci_hcd: release socket [ 59.178543][ T5582] vhci_hcd: disconnect device [ 59.183259][ T6077] vhci_hcd: connection closed [ 59.184472][ T5582] vhci_hcd: stop threads [ 59.193446][ T5582] vhci_hcd: release socket [ 59.197885][ T5582] vhci_hcd: disconnect device [ 59.206090][ T5582] vhci_hcd: stop threads [ 59.210451][ T5582] vhci_hcd: release socket [ 59.214922][ T5582] vhci_hcd: disconnect device [ 59.219971][ T5582] vhci_hcd: stop threads [ 59.224212][ T5582] vhci_hcd: release socket [ 59.228689][ T5582] vhci_hcd: disconnect device [ 59.233767][ T5582] vhci_hcd: stop threads [ 59.238016][ T5582] vhci_hcd: release socket [ 59.238452][ T6091] loop4: detected capacity change from 0 to 512 [ 59.242491][ T5582] vhci_hcd: disconnect device [ 59.253505][ T3470] vhci_hcd: vhci_device speed not set [ 59.259555][ T6091] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.284742][ T6091] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1008: Failed to acquire dquot type 1 [ 59.299258][ T6091] EXT4-fs (loop4): 1 truncate cleaned up [ 59.305267][ T6091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.321882][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.330779][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.339778][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.355659][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.364544][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.373417][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.396599][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 59.417942][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.822626][ T6132] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 59.994291][ T3394] usb 9-1: enqueue for inactive port 0 [ 60.000431][ T3394] usb 9-1: enqueue for inactive port 0 [ 60.022682][ T6158] SELinux: failed to load policy [ 60.075595][ T3394] vhci_hcd: vhci_device speed not set [ 60.108678][ T6162] loop5: detected capacity change from 0 to 512 [ 60.118815][ T6162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.134922][ T6162] EXT4-fs (loop5): 1 orphan inode deleted [ 60.140757][ T6162] EXT4-fs (loop5): 1 truncate cleaned up [ 60.148500][ T6162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.220132][ T6180] 0ªX¹¦À: renamed from caif0 [ 60.228359][ T6180] 0ªX¹¦À: entered allmulticast mode [ 60.233590][ T6180] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 60.268241][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.308792][ T6188] ipvlan2: entered promiscuous mode [ 60.317475][ T6188] bridge0: port 3(ipvlan2) entered blocking state [ 60.324137][ T6188] bridge0: port 3(ipvlan2) entered disabled state [ 60.333173][ T6188] ipvlan2: entered allmulticast mode [ 60.338487][ T6188] bridge0: entered allmulticast mode [ 60.345578][ T6193] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 60.345779][ T6188] ipvlan2: left allmulticast mode [ 60.360497][ T6188] bridge0: left allmulticast mode [ 60.445263][ T6209] bridge: RTM_NEWNEIGH with invalid ether address [ 60.525685][ T6218] batadv_slave_1: entered promiscuous mode [ 60.532410][ T6217] batadv_slave_1: left promiscuous mode [ 60.624078][ T6224] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 60.673113][ T6228] vlan2: entered allmulticast mode [ 60.678816][ T6215] loop2: detected capacity change from 0 to 32768 [ 60.689986][ T6230] unsupported nlmsg_type 40 [ 60.717937][ T6215] loop2: p1 p3 < > [ 60.900184][ T6256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.918794][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.942299][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.961015][ T6261] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 60.967559][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.975097][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 60.992657][ T6256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.011424][ T6261] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 61.017949][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.025538][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 61.036246][ T6261] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 61.042841][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.050494][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 61.057359][ T6261] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.067005][ T6261] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 61.073630][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.081259][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 61.102357][ T6256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.114319][ T6261] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 61.120936][ T6261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.128661][ T6261] vhci_hcd vhci_hcd.0: Device attached [ 61.151936][ T6272] vhci_hcd: connection closed [ 61.152073][ T6270] vhci_hcd: connection closed [ 61.152149][ T51] vhci_hcd: stop threads [ 61.157084][ T6267] vhci_hcd: connection closed [ 61.161519][ T51] vhci_hcd: release socket [ 61.161535][ T51] vhci_hcd: disconnect device [ 61.166111][ T6262] vhci_hcd: connection closed [ 61.170612][ T6264] vhci_hcd: connection closed [ 61.208079][ T51] vhci_hcd: stop threads [ 61.208742][ T6256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.212786][ T51] vhci_hcd: release socket [ 61.212803][ T51] vhci_hcd: disconnect device [ 61.236653][ T51] vhci_hcd: stop threads [ 61.240990][ T51] vhci_hcd: release socket [ 61.245406][ T51] vhci_hcd: disconnect device [ 61.252198][ T51] vhci_hcd: stop threads [ 61.256529][ T51] vhci_hcd: release socket [ 61.260957][ T51] vhci_hcd: disconnect device [ 61.266636][ T51] vhci_hcd: stop threads [ 61.270906][ T51] vhci_hcd: release socket [ 61.275399][ T51] vhci_hcd: disconnect device [ 61.303493][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.315261][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.325519][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.345108][ T5582] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.372541][ T6284] loop5: detected capacity change from 0 to 1024 [ 61.393676][ T6284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.534247][ T6301] loop3: detected capacity change from 0 to 512 [ 61.559431][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.575874][ T6301] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1100: corrupted inode contents [ 61.588208][ T6301] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1100: mark_inode_dirty error [ 61.602230][ T6301] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1100: corrupted inode contents [ 61.632548][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.654624][ T6317] __nla_validate_parse: 10 callbacks suppressed [ 61.654641][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1106'. [ 61.670057][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1106'. [ 61.712246][ T6292] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.726451][ T6323] loop3: detected capacity change from 0 to 512 [ 61.735664][ T5422] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.747034][ T6323] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.787090][ T6323] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1110: Failed to acquire dquot type 1 [ 61.810530][ T5422] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.835733][ T6323] EXT4-fs (loop3): 1 truncate cleaned up [ 61.856605][ T6335] loop2: detected capacity change from 0 to 1024 [ 61.863849][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.877348][ T6335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.884827][ T5422] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.896035][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 61.904943][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 61.915893][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 61.927075][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.941626][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 61.950581][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 61.962192][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 61.971755][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.972681][ T5422] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.002997][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 62.011926][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 62.071142][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.094292][ T5422] bridge_slave_1: left allmulticast mode [ 62.099980][ T5422] bridge_slave_1: left promiscuous mode [ 62.105617][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.125395][ T6365] loop3: detected capacity change from 0 to 128 [ 62.133597][ T5422] bridge_slave_0: left promiscuous mode [ 62.139457][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.251254][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.262829][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.276657][ T5422] bond0 (unregistering): Released all slaves [ 62.354680][ T5422] hsr_slave_0: left promiscuous mode [ 62.360340][ T5422] hsr_slave_1: left promiscuous mode [ 62.366354][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.373823][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.381418][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.388823][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.399072][ T5422] veth1_macvtap: left promiscuous mode [ 62.404559][ T5422] veth0_macvtap: left promiscuous mode [ 62.410073][ T5422] veth1_vlan: left promiscuous mode [ 62.415287][ T5422] veth0_vlan: left promiscuous mode [ 62.475988][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 62.485385][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 62.522352][ T6337] chnl_net:caif_netlink_parms(): no params data found [ 62.558622][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.565742][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.573150][ T6337] bridge_slave_0: entered allmulticast mode [ 62.580439][ T6337] bridge_slave_0: entered promiscuous mode [ 62.587115][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.594280][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.601575][ T6337] bridge_slave_1: entered allmulticast mode [ 62.608025][ T6337] bridge_slave_1: entered promiscuous mode [ 62.625299][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.637413][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.657772][ T6337] team0: Port device team_slave_0 added [ 62.664413][ T6337] team0: Port device team_slave_1 added [ 62.680750][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.687715][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.713681][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.725128][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.732132][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.758063][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.784311][ T6337] hsr_slave_0: entered promiscuous mode [ 62.790477][ T6337] hsr_slave_1: entered promiscuous mode [ 62.796320][ T6337] debugfs: 'hsr0' already exists in 'hsr' [ 62.802117][ T6337] Cannot create hsr debugfs directory [ 62.866716][ T6337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.875261][ T6337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.884133][ T6337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.892828][ T6337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.908933][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.915996][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.923323][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.930371][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.953589][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.962094][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.979689][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.991413][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.000697][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.007781][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.019908][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.026971][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.088553][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.191878][ T6337] veth0_vlan: entered promiscuous mode [ 63.199770][ T6337] veth1_vlan: entered promiscuous mode [ 63.215037][ T6337] veth0_macvtap: entered promiscuous mode [ 63.222279][ T6337] veth1_macvtap: entered promiscuous mode [ 63.233830][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.245149][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.254859][ T5422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.265237][ T5422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.274307][ T5422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.283594][ T5422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.302091][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 63.302159][ T29] audit: type=1400 audit(573.898:1842): avc: denied { mounton } for pid=6337 comm="syz-executor" path="/root/syzkaller.0NIgU4/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.332433][ T29] audit: type=1400 audit(573.898:1843): avc: denied { mounton } for pid=6337 comm="syz-executor" path="/root/syzkaller.0NIgU4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.358626][ T29] audit: type=1400 audit(573.898:1844): avc: denied { mounton } for pid=6337 comm="syz-executor" path="/root/syzkaller.0NIgU4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.385899][ T29] audit: type=1400 audit(573.936:1845): avc: denied { mounton } for pid=6337 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.408381][ T29] audit: type=1400 audit(573.936:1846): avc: denied { mount } for pid=6337 comm="syz-executor" name="/" dev="gadgetfs" ino=4821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.440667][ T29] audit: type=1326 audit(574.029:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 63.463646][ T29] audit: type=1326 audit(574.029:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 63.486613][ T29] audit: type=1326 audit(574.029:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 63.509497][ T29] audit: type=1326 audit(574.029:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 63.532387][ T29] audit: type=1326 audit(574.029:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34417ebe9 code=0x7ffc0000 [ 63.558858][ T6430] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 63.565396][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.573056][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 63.578559][ T10] usb 7-2: enqueue for inactive port 1 [ 63.584912][ T10] usb 7-2: enqueue for inactive port 1 [ 63.590835][ T6435] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 63.597412][ T6435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.604970][ T6435] vhci_hcd vhci_hcd.0: Device attached [ 63.616038][ T6434] loop2: detected capacity change from 0 to 1024 [ 63.626367][ T6434] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 63.644365][ T6430] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 63.650950][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.658716][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 63.664827][ T10] vhci_hcd: vhci_device speed not set [ 63.676862][ T6430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.686257][ T6430] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 63.692860][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.700538][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 63.709668][ T6430] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(13) [ 63.714834][ T6446] loop3: detected capacity change from 0 to 1024 [ 63.716305][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.716534][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 63.732288][ T6446] EXT4-fs: Ignoring removed nobh option [ 63.750340][ T6449] vhci_hcd: connection closed [ 63.750441][ T51] vhci_hcd: stop threads [ 63.755671][ T6447] vhci_hcd: connection closed [ 63.759422][ T51] vhci_hcd: release socket [ 63.759438][ T51] vhci_hcd: disconnect device [ 63.764383][ T6437] vhci_hcd: connection closed [ 63.768617][ T6431] vhci_hcd: connection closed [ 63.780278][ T6441] vhci_hcd: connection closed [ 63.787856][ T6446] EXT4-fs: Ignoring removed bh option [ 63.799569][ T51] vhci_hcd: stop threads [ 63.803844][ T51] vhci_hcd: release socket [ 63.808420][ T51] vhci_hcd: disconnect device [ 63.813903][ T51] vhci_hcd: stop threads [ 63.818192][ T51] vhci_hcd: release socket [ 63.822635][ T51] vhci_hcd: disconnect device [ 63.836707][ T6446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.849550][ T9] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 63.859186][ T51] vhci_hcd: stop threads [ 63.863472][ T51] vhci_hcd: release socket [ 63.867959][ T51] vhci_hcd: disconnect device [ 63.880633][ T51] vhci_hcd: stop threads [ 63.884931][ T51] vhci_hcd: release socket [ 63.885165][ T6459] loop4: detected capacity change from 0 to 1024 [ 63.889471][ T51] vhci_hcd: disconnect device [ 63.922679][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.934262][ T6459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.016708][ T6009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.035598][ T6476] rdma_op ffff888108d13580 conn xmit_rdma 0000000000000000 [ 64.066949][ T5422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.082056][ T6480] IPv6: Can't replace route, no match found [ 64.165069][ T5422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.214480][ T5422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.247194][ T6505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6505 comm=syz.3.1165 [ 64.268764][ T5422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.393892][ T5422] bridge_slave_1: left allmulticast mode [ 64.399586][ T5422] bridge_slave_1: left promiscuous mode [ 64.405350][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.429249][ T5422] bridge_slave_0: left promiscuous mode [ 64.434999][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.538699][ T5422] team0: Port device geneve1 removed [ 64.578261][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.596965][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.606688][ T5422] bond0 (unregistering): Released all slaves [ 64.660553][ T5422] hsr_slave_0: left promiscuous mode [ 64.669094][ T5422] hsr_slave_1: left promiscuous mode [ 64.678019][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.685474][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.711797][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.719235][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.734685][ T5422] veth1_vlan: left promiscuous mode [ 64.748813][ T5422] veth0_vlan: left promiscuous mode [ 64.812216][ T5422] pim6reg (unregistering): left allmulticast mode [ 64.881740][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 64.901342][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 64.948534][ T6557] ipvlan2: entered promiscuous mode [ 64.955274][ T6557] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 64.963198][ T6557] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 64.981420][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 65.013294][ T6582] netlink: 'syz.2.1194': attribute type 10 has an invalid length. [ 65.029213][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.036339][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.043685][ T6488] bridge_slave_0: entered allmulticast mode [ 65.057129][ T6488] bridge_slave_0: entered promiscuous mode [ 65.069173][ T6582] dummy0: entered promiscuous mode [ 65.079233][ T6582] bridge0: port 3(dummy0) entered blocking state [ 65.085661][ T6582] bridge0: port 3(dummy0) entered disabled state [ 65.094092][ T6582] dummy0: entered allmulticast mode [ 65.100520][ T6582] bridge0: port 3(dummy0) entered blocking state [ 65.107027][ T6582] bridge0: port 3(dummy0) entered forwarding state [ 65.119234][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.126487][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.134066][ T6488] bridge_slave_1: entered allmulticast mode [ 65.140632][ T6488] bridge_slave_1: entered promiscuous mode [ 65.161801][ T6587] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.173587][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.193043][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.231085][ T6597] atomic_op ffff88812616f928 conn xmit_atomic 0000000000000000 [ 65.242094][ T6488] team0: Port device team_slave_0 added [ 65.250313][ T6488] team0: Port device team_slave_1 added [ 65.283539][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.290514][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.316553][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.330821][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.337882][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.363876][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.384528][ T5422] IPVS: stop unused estimator thread 0... [ 65.415942][ T6488] hsr_slave_0: entered promiscuous mode [ 65.439738][ T6488] hsr_slave_1: entered promiscuous mode [ 65.449518][ T6488] debugfs: 'hsr0' already exists in 'hsr' [ 65.455297][ T6488] Cannot create hsr debugfs directory [ 65.508988][ T6614] loop2: detected capacity change from 0 to 2048 [ 65.579820][ T6488] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 65.588631][ T6614] loop2: p1 < > p4 [ 65.589189][ T6614] loop2: p4 size 8388608 extends beyond EOD, truncated [ 65.591306][ T6488] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 65.614557][ T6488] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 65.623831][ T6488] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 65.687338][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.694243][ T6641] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.704822][ T6641] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 65.717163][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.728967][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.736144][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.757840][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.764939][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.907775][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.101610][ T6488] veth0_vlan: entered promiscuous mode [ 66.116992][ T6488] veth1_vlan: entered promiscuous mode [ 66.134260][ T6488] veth0_macvtap: entered promiscuous mode [ 66.143038][ T6702] vhci_hcd: invalid port number 96 [ 66.148369][ T6702] vhci_hcd: default hub control req: 0300 v0003 i0060 l0 [ 66.161673][ T6488] veth1_macvtap: entered promiscuous mode [ 66.169124][ T6706] serio: Serial port ptm0 [ 66.190365][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.202479][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.225175][ T5422] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.234814][ T5422] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.255783][ T5422] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.278511][ T5422] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.343051][ T6721] loop7: detected capacity change from 0 to 1024 [ 66.364905][ T6721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.387411][ T6721] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 13) [ 66.408286][ T6721] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 66.420717][ T6721] EXT4-fs (loop7): This should not happen!! Data will be lost [ 66.420717][ T6721] [ 66.443322][ T6734] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.460083][ T6734] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.474563][ T6734] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.489556][ T6734] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.506160][ T6734] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.523011][ T6734] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 3: comm syz.7.1246: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.544356][ T6721] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.1246: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 66.573780][ T6728] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.589388][ T6740] 9p: Unknown Cache mode or invalid value n [ 66.595394][ T6721] EXT4-fs error (device loop7) in ext4_setattr:6071: Corrupt filesystem [ 66.633731][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.869191][ T6770] sd 0:0:1:0: device reset [ 67.107775][ T6802] serio: Serial port ptm0 [ 67.251866][ T6805] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.337835][ T6810] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.356600][ T6810] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 67.385219][ T6818] loop6: detected capacity change from 0 to 128 [ 67.511407][ T6843] __nla_validate_parse: 8 callbacks suppressed [ 67.511422][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1292'. [ 67.526837][ T6843] netlink: 'syz.7.1292': attribute type 15 has an invalid length. [ 67.534715][ T6843] netlink: 'syz.7.1292': attribute type 18 has an invalid length. [ 67.553645][ T6843] vxlan0: entered promiscuous mode [ 67.563323][ T5422] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.578302][ T5422] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.588555][ T5422] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.599754][ T5422] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.705889][ T6866] sd 0:0:1:0: device reset [ 67.725915][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 67.838818][ T6889] loop6: detected capacity change from 0 to 1024 [ 67.869934][ T6889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.896507][ T6889] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 67.913429][ T6889] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 67.925906][ T6889] EXT4-fs (loop6): This should not happen!! Data will be lost [ 67.925906][ T6889] [ 67.935691][ T6889] EXT4-fs (loop6): Total free blocks count 0 [ 67.941766][ T6889] EXT4-fs (loop6): Free/Dirty block details [ 67.947704][ T6889] EXT4-fs (loop6): free_blocks=4293918720 [ 67.953455][ T6889] EXT4-fs (loop6): dirty_blocks=16 [ 67.958602][ T6889] EXT4-fs (loop6): Block reservation details [ 67.964651][ T6889] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 67.996753][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.045072][ T6912] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1327'. [ 68.058910][ T6913] sd 0:0:1:0: device reset [ 68.105390][ T6920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.170840][ T6920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.185212][ T6934] loop2: detected capacity change from 0 to 512 [ 68.191880][ T6934] EXT4-fs: Ignoring removed bh option [ 68.216372][ T6934] EXT4-fs error (device loop2): __ext4_iget:5464: inode #15: block 1803188595: comm syz.2.1337: invalid block [ 68.236084][ T6934] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1337: couldn't read orphan inode 15 (err -117) [ 68.250305][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.278633][ T6920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.333381][ T6920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.373343][ T6946] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 68.395530][ T5422] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.410541][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.427060][ T5422] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.455928][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.474858][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.582728][ T6969] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 68.688748][ T6979] ipip0: entered allmulticast mode [ 68.748299][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 68.748316][ T29] audit: type=1400 audit(578.996:2145): avc: denied { write } for pid=6990 comm="syz.0.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.778128][ T6993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.788473][ T29] audit: type=1107 audit(579.024:2146): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 68.854633][ T6993] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.908333][ T6993] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.952635][ T6993] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.006494][ T5426] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.020136][ T5426] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.032396][ T5426] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.043325][ T5426] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.118395][ T29] audit: type=1326 audit(579.333:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.6.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x0 [ 69.215095][ T9] usb 13-1: enqueue for inactive port 0 [ 69.220742][ T9] usb 13-1: enqueue for inactive port 0 [ 69.312862][ T9] vhci_hcd: vhci_device speed not set [ 69.471289][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 69.481105][ T7025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1378'. [ 69.628987][ T29] audit: type=1326 audit(579.810:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.652494][ T29] audit: type=1326 audit(579.810:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.675415][ T29] audit: type=1326 audit(579.810:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.698226][ T29] audit: type=1326 audit(579.829:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.721699][ T29] audit: type=1326 audit(579.829:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.744556][ T29] audit: type=1326 audit(579.829:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.767507][ T29] audit: type=1326 audit(579.829:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.3.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf4ebe9 code=0x7ffc0000 [ 69.868331][ T7048] loop2: detected capacity change from 0 to 256 [ 69.868773][ T7051] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1391'. [ 69.882687][ T7048] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 69.892640][ T7048] FAT-fs (loop2): Filesystem has been set read-only [ 69.977706][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 69.987419][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 70.182895][ T7081] netlink: 'syz.0.1404': attribute type 4 has an invalid length. [ 70.219413][ T7082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.269912][ T7086] netlink: 'syz.0.1404': attribute type 4 has an invalid length. [ 70.441091][ T7099] rdma_op ffff88811dc7c980 conn xmit_rdma 0000000000000000 [ 70.640865][ T7118] wireguard0: entered promiscuous mode [ 70.646534][ T7118] wireguard0: entered allmulticast mode [ 70.762538][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.770070][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.777510][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.785224][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.792674][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.800239][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.807708][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.815240][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.822668][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.830117][ T3408] hid-generic 0401:0002:0007.0004: unknown main item tag 0x0 [ 70.838665][ T3408] hid-generic 0401:0002:0007.0004: hidraw0: HID vffffff.f6 Device [syz1] on syz1 [ 70.954602][ T7138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.007546][ T7138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.109487][ T7138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.178794][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 71.194020][ T7138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.330745][ T5582] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.362668][ T5582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.381711][ T5582] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.393689][ T7179] can0: slcan on ttyS3. [ 71.400110][ T5582] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.410141][ T7175] loop3: detected capacity change from 0 to 1024 [ 71.449524][ T7179] can0 (unregistered): slcan off ttyS3. [ 71.455336][ T7179] Falling back ldisc for ttyS3. [ 71.489316][ T7189] loop2: detected capacity change from 0 to 512 [ 71.504137][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.516481][ T7189] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 71.540306][ T7189] System zones: 0-2, 18-18, 34-34 [ 71.549971][ T7189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.558159][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.578579][ T7189] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1452: bg 0: block 248: padding at end of block bitmap is not set [ 71.610650][ T7189] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1452: Failed to acquire dquot type 1 [ 71.630004][ T7189] EXT4-fs (loop2): 1 orphan inode deleted [ 71.649038][ T5422] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 71.668752][ T7203] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.679078][ T7203] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.705271][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.735273][ T7189] syz.2.1452 (7189) used greatest stack depth: 9552 bytes left [ 71.760224][ T7203] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.770613][ T7203] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.784521][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.870149][ T7203] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.880715][ T7203] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.926552][ T7225] loop2: detected capacity change from 0 to 1764 [ 71.943489][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.959521][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.972775][ T7203] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.983088][ T7203] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.128911][ T5422] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.137432][ T5422] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.146865][ T5422] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.155180][ T5422] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.180848][ T5422] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.189154][ T5422] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.202704][ T5422] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.211065][ T5422] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.285833][ T7242] loop7: detected capacity change from 0 to 512 [ 72.301462][ T7242] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 72.310990][ T7242] System zones: 0-2, 18-18, 34-34 [ 72.316424][ T7242] EXT4-fs (loop7): orphan cleanup on readonly fs [ 72.319076][ T3394] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 72.323397][ T7242] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1473: bg 0: block 248: padding at end of block bitmap is not set [ 72.348658][ T7242] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1473: Failed to acquire dquot type 1 [ 72.360939][ T7242] EXT4-fs (loop7): 1 orphan inode deleted [ 72.366777][ T5422] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 72.380292][ T7242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.410456][ T7242] syz.7.1473 (7242) used greatest stack depth: 9280 bytes left [ 72.418463][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.473605][ T7261] syzkaller1: entered promiscuous mode [ 72.479500][ T7261] syzkaller1: entered allmulticast mode [ 72.601332][ T3394] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz1] on syz0 [ 72.723259][ T7288] loop6: detected capacity change from 0 to 164 [ 72.773567][ T7288] syz.6.1497: attempt to access beyond end of device [ 72.773567][ T7288] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.805135][ T7288] syz.6.1497: attempt to access beyond end of device [ 72.805135][ T7288] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.873874][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1505'. [ 72.888642][ T7296] loop7: detected capacity change from 0 to 512 [ 72.948164][ T7296] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1500: Failed to acquire dquot type 1 [ 72.987704][ T7296] EXT4-fs (loop7): 1 truncate cleaned up [ 72.999950][ T7296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.110302][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.216181][ T7333] wireguard0: entered promiscuous mode [ 73.221726][ T7333] wireguard0: entered allmulticast mode [ 73.516656][ T7369] loop7: detected capacity change from 0 to 1764 [ 73.663518][ T7385] loop6: detected capacity change from 0 to 512 [ 73.679737][ T7385] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1532: error while reading EA inode 32 err=-116 [ 73.694547][ T7385] EXT4-fs (loop6): Remounting filesystem read-only [ 73.701088][ T7385] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 73.712574][ T7385] EXT4-fs (loop6): 1 orphan inode deleted [ 73.718965][ T7385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.742263][ T7385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.908539][ T7401] SELinux: failed to load policy [ 73.910251][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'. [ 73.941330][ T7408] loop7: detected capacity change from 0 to 512 [ 73.948139][ T7408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.966850][ T7408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.979634][ T7408] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.012816][ T7416] bridge0: port 4(batadv2) entered blocking state [ 74.019374][ T7416] bridge0: port 4(batadv2) entered disabled state [ 74.025982][ T7416] batadv2: entered allmulticast mode [ 74.031731][ T7416] batadv2: entered promiscuous mode [ 74.038154][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.064514][ T7422] loop7: detected capacity change from 0 to 164 [ 74.074448][ T7422] syz.7.1548: attempt to access beyond end of device [ 74.074448][ T7422] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.088701][ T7422] syz.7.1548: attempt to access beyond end of device [ 74.088701][ T7422] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.160515][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 74.160529][ T29] audit: type=1326 audit(2000000000.187:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.190531][ T29] audit: type=1326 audit(2000000000.187:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.214144][ T29] audit: type=1326 audit(2000000000.196:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.237643][ T29] audit: type=1326 audit(2000000000.196:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.261247][ T29] audit: type=1326 audit(2000000000.196:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.284878][ T29] audit: type=1326 audit(2000000000.196:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.308691][ T29] audit: type=1326 audit(2000000000.196:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.335599][ T29] audit: type=1326 audit(2000000000.261:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.359190][ T29] audit: type=1326 audit(2000000000.261:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.382717][ T29] audit: type=1326 audit(2000000000.355:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.7.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7c783febe9 code=0x7ffc0000 [ 74.438910][ T7438] program syz.7.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.549736][ T5422] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 74.558977][ T5422] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 74.921730][ T7479] loop6: detected capacity change from 0 to 512 [ 74.936967][ T7479] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1575: Failed to acquire dquot type 1 [ 74.961648][ T7479] EXT4-fs (loop6): 1 truncate cleaned up [ 74.969569][ T7479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.032412][ T7491] loop3: detected capacity change from 0 to 1024 [ 75.039053][ T7491] EXT4-fs: Ignoring removed nobh option [ 75.044656][ T7491] EXT4-fs: Ignoring removed nobh option [ 75.050648][ T7491] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 75.060588][ T7491] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.1579: inode #4294967295: comm syz.3.1579: iget: illegal inode # [ 75.084325][ T7491] EXT4-fs (loop3): no journal found [ 75.089562][ T7491] EXT4-fs (loop3): can't get journal size [ 75.097755][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.099342][ T7491] EXT4-fs (loop3): failed to initialize system zone (-22) [ 75.114144][ T7491] EXT4-fs (loop3): mount failed [ 75.126719][ T3387] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.183294][ T7502] serio: Serial port ttyS3 [ 75.213425][ T7508] loop3: detected capacity change from 0 to 1764 [ 75.868797][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 75.922616][ T7550] loop2: detected capacity change from 0 to 128 [ 75.949815][ T7550] syz.2.1607: attempt to access beyond end of device [ 75.949815][ T7550] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 75.963341][ T7550] syz.2.1607: attempt to access beyond end of device [ 75.963341][ T7550] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 75.978619][ T7550] syz.2.1607: attempt to access beyond end of device [ 75.978619][ T7550] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 75.992258][ T7550] syz.2.1607: attempt to access beyond end of device [ 75.992258][ T7550] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 76.005771][ T7550] syz.2.1607: attempt to access beyond end of device [ 76.005771][ T7550] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 76.019279][ T7550] syz.2.1607: attempt to access beyond end of device [ 76.019279][ T7550] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 76.212084][ T7579] sd 0:0:1:0: device reset [ 76.284431][ T7594] loop3: detected capacity change from 0 to 128 [ 76.291194][ T7594] EXT4-fs: Ignoring removed nobh option [ 76.301851][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'. [ 76.314352][ T7594] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.352380][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.372629][ T7609] loop2: detected capacity change from 0 to 512 [ 76.392627][ T7609] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1622: Failed to acquire dquot type 1 [ 76.412133][ T7609] EXT4-fs (loop2): 1 truncate cleaned up [ 76.423675][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.515666][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.558777][ T7642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7642 comm=syz.2.1629 [ 76.571319][ T7642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7642 comm=syz.2.1629 [ 76.643704][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 76.804449][ T7691] netlink: 'syz.7.1639': attribute type 1 has an invalid length. [ 77.451180][ T7754] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1642'. [ 77.465127][ T7757] loop3: detected capacity change from 0 to 512 [ 77.497065][ T7757] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1641: Failed to acquire dquot type 1 [ 77.563054][ T7757] EXT4-fs (loop3): 1 truncate cleaned up [ 77.571230][ T7757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.673287][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.745748][ T7801] loop3: detected capacity change from 0 to 128 [ 77.839743][ T7812] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1663'. [ 77.856045][ T7814] loop3: detected capacity change from 0 to 128 [ 78.023908][ T7836] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1676'. [ 78.045363][ T7836] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 78.055036][ T7836] 0ªî{X¹¦: entered allmulticast mode [ 78.063697][ T7836] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 78.150138][ T7842] loop7: detected capacity change from 0 to 2048 [ 78.174455][ T7842] loop7: p1 < > p4 [ 78.181402][ T7842] loop7: p4 size 8388608 extends beyond EOD, truncated [ 78.268545][ T7862] netlink: 'syz.6.1689': attribute type 1 has an invalid length. [ 78.431395][ T7877] loop6: detected capacity change from 0 to 128 [ 78.505561][ T7883] serio: Serial port ptm0 [ 78.613271][ T7868] loop3: detected capacity change from 0 to 32768 [ 78.633849][ T7868] loop3: p1 p3 < > [ 78.730892][ T7899] loop7: detected capacity change from 0 to 128 [ 79.175234][ T7919] loop7: detected capacity change from 0 to 32768 [ 79.233420][ T7919] loop7: p1 p3 < > [ 79.420597][ T7950] loop6: detected capacity change from 0 to 512 [ 79.443236][ T7950] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1727: Failed to acquire dquot type 1 [ 79.465439][ T7952] vlan2: entered allmulticast mode [ 79.472256][ T7950] EXT4-fs (loop6): 1 truncate cleaned up [ 79.479199][ T7950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.508045][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1729'. [ 79.517095][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1729'. [ 79.570318][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1729'. [ 79.579362][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1729'. [ 79.627528][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.679586][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 79.679600][ T29] audit: type=1326 audit(77.211:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.712366][ T29] audit: type=1326 audit(77.248:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.735206][ T29] audit: type=1326 audit(77.248:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.757922][ T29] audit: type=1326 audit(77.248:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.795970][ T29] audit: type=1326 audit(77.314:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.819006][ T29] audit: type=1326 audit(77.314:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.841823][ T29] audit: type=1326 audit(77.314:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.864606][ T29] audit: type=1326 audit(77.314:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.887415][ T29] audit: type=1326 audit(77.314:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 79.910199][ T29] audit: type=1326 audit(77.314:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.6.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 80.125104][ T5576] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 80.149876][ T8011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1752'. [ 80.158945][ T8011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1752'. [ 80.169032][ T8011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1752'. [ 80.178050][ T8011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1752'. [ 81.051866][ T8037] vlan2: entered allmulticast mode [ 81.061772][ T8038] RDS: rds_bind could not find a transport for fe88::108, load rds_tcp or rds_rdma? [ 81.291534][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1780'. [ 81.322885][ T8075] syzkaller1: entered promiscuous mode [ 81.328471][ T8075] syzkaller1: entered allmulticast mode [ 81.441518][ T8081] netlink: 'syz.6.1784': attribute type 10 has an invalid length. [ 81.451192][ T8081] ipvlan0: entered allmulticast mode [ 81.456526][ T8081] veth0_vlan: entered allmulticast mode [ 81.463657][ T8081] team0: Device ipvlan0 failed to register rx_handler [ 81.529048][ T8089] loop6: detected capacity change from 0 to 512 [ 81.540570][ T8089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.558318][ T8089] EXT4-fs error (device loop6): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.6.1788: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 81.578938][ T8089] EXT4-fs error (device loop6): ext4_get_first_dir_block:3540: inode #12: comm syz.6.1788: directory missing '.' [ 81.603034][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.703308][ T8110] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 81.986283][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1803'. [ 82.225087][ T8161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8161 comm=syz.0.1819 [ 82.247619][ T8163] loop3: detected capacity change from 0 to 764 [ 82.255321][ T8163] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.265682][ T8165] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 82.506108][ T8185] vlan2: entered allmulticast mode [ 82.511359][ T8185] bridge_slave_0: entered allmulticast mode [ 82.718213][ T8215] vlan2: entered allmulticast mode [ 82.811371][ T8227] veth0: entered promiscuous mode [ 82.898054][ T8240] netlink: 'syz.3.1855': attribute type 6 has an invalid length. [ 82.921381][ T8242] netlink: 'syz.7.1857': attribute type 10 has an invalid length. [ 82.952357][ T8242] team0: Device hsr_slave_0 failed to register rx_handler [ 83.393965][ T8311] loop6: detected capacity change from 0 to 512 [ 83.413699][ T8311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.438658][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.540587][ T8326] loop6: detected capacity change from 0 to 512 [ 83.547646][ T8326] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.559010][ T8326] EXT4-fs (loop6): 1 orphan inode deleted [ 83.564859][ T8326] EXT4-fs (loop6): 1 truncate cleaned up [ 83.571069][ T8326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.588282][ T8326] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 83.602849][ T8326] EXT4-fs (loop6): Remounting filesystem read-only [ 83.611395][ T8326] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 83.630529][ T8333] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 83.638329][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.674734][ T8338] 9pnet: p9_errstr2errno: server reported unknown error tat [ 83.783111][ T10] kernel write not supported for file /374/clear_refs (pid: 10 comm: kworker/0:1) [ 84.224254][ T8416] netlink: 'syz.0.1933': attribute type 21 has an invalid length. [ 84.243803][ T8416] netlink: 'syz.0.1933': attribute type 21 has an invalid length. [ 84.244926][ T5576] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.262110][ T5576] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.270714][ T5576] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.280983][ T8418] IPv6: Can't replace route, no match found [ 84.287007][ T5576] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.564237][ T8446] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 84.699573][ T5576] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 84.885376][ T8473] SELinux: Context Ý is not valid (left unmapped). [ 84.913966][ T8477] loop7: detected capacity change from 0 to 1024 [ 84.920894][ T8477] EXT4-fs: Ignoring removed bh option [ 84.949653][ T8477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.980602][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.982873][ T8483] __nla_validate_parse: 12 callbacks suppressed [ 84.982891][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 85.004931][ T8483] netlink: 'syz.2.1963': attribute type 5 has an invalid length. [ 85.012732][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 85.026299][ T5426] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.041532][ T5426] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.051903][ T5426] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.060161][ T5426] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.551965][ T8494] pimreg: entered allmulticast mode [ 85.568124][ T8494] pimreg: left allmulticast mode [ 85.579929][ T8500] loop7: detected capacity change from 0 to 512 [ 85.588088][ T36] kernel write not supported for file /793/clear_refs (pid: 36 comm: kworker/1:1) [ 85.598135][ T8500] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 85.614143][ T8500] EXT4-fs (loop7): 1 truncate cleaned up [ 85.624091][ T8500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.670076][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.704970][ T8513] loop7: detected capacity change from 0 to 1024 [ 85.711813][ T8513] EXT4-fs: Ignoring removed oldalloc option [ 85.718968][ T8513] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 85.722969][ T8515] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 85.764418][ T8513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.826075][ T8530] netlink: 'syz.3.1983': attribute type 3 has an invalid length. [ 85.915002][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.019764][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 86.019776][ T29] audit: type=1400 audit(83.141:2673): avc: denied { getopt } for pid=8559 comm="syz.7.1997" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.055301][ T8567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8567 comm=syz.2.2000 [ 86.129863][ T8575] loop7: detected capacity change from 0 to 1024 [ 86.138790][ T29] audit: type=1400 audit(83.254:2674): avc: denied { compute_member } for pid=8573 comm="syz.0.2003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.153730][ T8575] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.165015][ T8575] EXT4-fs: Ignoring removed bh option [ 86.194391][ T8583] loop6: detected capacity change from 0 to 1024 [ 86.199789][ T8575] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.224258][ T8591] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2010'. [ 86.246760][ T8583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.309612][ T29] audit: type=1400 audit(83.413:2675): avc: denied { getopt } for pid=8582 comm="syz.6.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.347325][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.378127][ T8610] loop3: detected capacity change from 0 to 1024 [ 86.387581][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.402555][ T8614] ip6gre2: entered allmulticast mode [ 86.434113][ T29] audit: type=1326 audit(83.534:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.7.2021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c783febe9 code=0x0 [ 86.434835][ T8610] EXT4-fs: Ignoring removed bh option [ 86.479532][ T8610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.522578][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.575836][ T8642] loop3: detected capacity change from 0 to 128 [ 86.589929][ T8642] bio_check_eod: 41 callbacks suppressed [ 86.589946][ T8642] syz.3.2029: attempt to access beyond end of device [ 86.589946][ T8642] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 86.708653][ T8661] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2037'. [ 86.744661][ T8665] loop6: detected capacity change from 0 to 1024 [ 86.755530][ T8665] EXT4-fs: Ignoring removed bh option [ 86.765424][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2042'. [ 86.794889][ T8665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.823111][ T3380] IPVS: starting estimator thread 0... [ 86.852045][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.929501][ T8679] IPVS: using max 2784 ests per chain, 139200 per kthread [ 86.940561][ T8688] pim6reg: entered allmulticast mode [ 86.956237][ T8688] pim6reg: left allmulticast mode [ 87.046782][ T29] audit: type=1326 audit(84.105:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 87.084554][ T8704] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 87.084554][ T8704] program syz.2.2055 not setting count and/or reply_len properly [ 87.109608][ T29] audit: type=1326 audit(84.133:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 87.132396][ T29] audit: type=1326 audit(84.133:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 87.136361][ T8706] loop6: detected capacity change from 0 to 1024 [ 87.155173][ T29] audit: type=1326 audit(84.133:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956fbebe9 code=0x7ffc0000 [ 87.193568][ T8706] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.200136][ T8706] EXT4-fs: Ignoring removed bh option [ 87.207488][ T29] audit: type=1326 audit(84.264:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 87.230635][ T29] audit: type=1326 audit(84.282:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f41d4a8ebe9 code=0x7ffc0000 [ 87.265711][ T8706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.276396][ T8718] loop2: detected capacity change from 0 to 1024 [ 87.286876][ T8718] EXT4-fs: Ignoring removed oldalloc option [ 87.344273][ T8718] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 87.381290][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.395074][ T8718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.447140][ T36] hid_parser_main: 123 callbacks suppressed [ 87.447159][ T36] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 87.460517][ T36] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 87.468024][ T36] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 87.480434][ T36] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 87.603303][ T8752] netlink: 'syz.6.2075': attribute type 1 has an invalid length. [ 87.612588][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.682759][ T8763] netlink: 468 bytes leftover after parsing attributes in process `syz.6.2081'. [ 87.782747][ T8776] loop7: detected capacity change from 0 to 1024 [ 87.800317][ T8778] pim6reg: entered allmulticast mode [ 87.807459][ T8778] pim6reg: left allmulticast mode [ 87.815562][ T8776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.838940][ T6488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.880023][ T8784] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.894866][ T8786] loop6: detected capacity change from 0 to 1024 [ 87.901603][ T8786] EXT4-fs: Ignoring removed oldalloc option [ 87.907841][ T8784] bridge0: port 3(dummy0) entered disabled state [ 87.914279][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.918350][ T8786] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 87.921503][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.985870][ T8786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.173304][ T6337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.199871][ T8810] loop2: detected capacity change from 0 to 128 [ 88.214576][ T8810] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.271129][ T5426] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.505629][ T8837] loop3: detected capacity change from 0 to 1024 [ 88.514546][ T8837] EXT4-fs: Ignoring removed oldalloc option [ 88.520816][ T8837] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 88.557482][ T8837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.591094][ T8852] pim6reg: entered allmulticast mode [ 88.598239][ T8852] pim6reg: left allmulticast mode [ 88.648709][ T8837] ================================================================== [ 88.656905][ T8837] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 88.664293][ T8837] [ 88.666628][ T8837] read-write to 0xffff888106f41470 of 8 bytes by task 5422 on cpu 0: [ 88.674687][ T8837] __xa_clear_mark+0xf5/0x1e0 [ 88.679377][ T8837] __folio_end_writeback+0x177/0x470 [ 88.684665][ T8837] folio_end_writeback+0x71/0x3d0 [ 88.689700][ T8837] ext4_finish_bio+0x459/0x8c0 [ 88.694469][ T8837] ext4_release_io_end+0x9f/0x1f0 [ 88.699504][ T8837] ext4_end_io_end+0x18d/0x240 [ 88.704279][ T8837] ext4_end_io_rsv_work+0x151/0x1e0 [ 88.709485][ T8837] process_scheduled_works+0x4ce/0x9d0 [ 88.714950][ T8837] worker_thread+0x582/0x770 [ 88.719559][ T8837] kthread+0x486/0x510 [ 88.723627][ T8837] ret_from_fork+0xda/0x150 [ 88.728128][ T8837] ret_from_fork_asm+0x1a/0x30 [ 88.732904][ T8837] [ 88.735230][ T8837] read to 0xffff888106f41470 of 8 bytes by task 8837 on cpu 1: [ 88.742769][ T8837] xas_find_marked+0x218/0x620 [ 88.747567][ T8837] find_get_entry+0x5d/0x380 [ 88.752166][ T8837] filemap_get_folios_tag+0x13b/0x210 [ 88.757543][ T8837] file_write_and_wait_range+0x1ea/0x2c0 [ 88.763198][ T8837] generic_buffers_fsync_noflush+0x45/0x120 [ 88.769111][ T8837] ext4_sync_file+0x1ab/0x690 [ 88.773797][ T8837] vfs_fsync_range+0x10d/0x130 [ 88.778559][ T8837] ext4_buffered_write_iter+0x34f/0x3c0 [ 88.784121][ T8837] ext4_file_write_iter+0x383/0xf00 [ 88.789343][ T8837] do_iter_readv_writev+0x499/0x540 [ 88.794552][ T8837] vfs_writev+0x2df/0x8b0 [ 88.798895][ T8837] __se_sys_pwritev2+0xfc/0x1c0 [ 88.803751][ T8837] __x64_sys_pwritev2+0x67/0x80 [ 88.808604][ T8837] x64_sys_call+0x2c55/0x2ff0 [ 88.813282][ T8837] do_syscall_64+0xd2/0x200 [ 88.817799][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.823703][ T8837] [ 88.826022][ T8837] value changed: 0x0000000fffffe000 -> 0x0000000ffff00000 [ 88.833129][ T8837] [ 88.835464][ T8837] Reported by Kernel Concurrency Sanitizer on: [ 88.841616][ T8837] CPU: 1 UID: 0 PID: 8837 Comm: syz.3.2111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.852999][ T8837] Tainted: [W]=WARN [ 88.856807][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.866867][ T8837] ================================================================== [ 88.924175][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.