last executing test programs: 22m32.92523449s ago: executing program 32 (id=634): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 22m31.776283504s ago: executing program 33 (id=658): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 21m42.669042208s ago: executing program 34 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 11m8.497425839s ago: executing program 35 (id=7462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x9}, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 10m15.820715416s ago: executing program 36 (id=7909): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet6(0xa, 0x2, 0x0) pidfd_send_signal(r1, 0x1d, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900000000eaff000073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x1000}) close(r4) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) 7m14.348829476s ago: executing program 37 (id=11809): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x8]}, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 7m10.193505516s ago: executing program 38 (id=11866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 7m0.131584171s ago: executing program 39 (id=11999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="9f61aed6b3d861905d235f2bf1a701d56c4acc149e11aaf04b37ba36764e32503f3ebdfd7e95b72b99adfbf83df604000000cbf1f24c12811de8bd79f9bd4d7c1e020eb94dfd0e3d885ee99e473fefc94fce35c17543056a5ee22936ca94ed6578770b05c17b8b889fc177bef220c00061f888d83604d9a4b4753c755db0312f2580eeed5da993497e180a5ed8701b4ae3b8c7dda8af5a47f368432ba1f9cc4ce0ce662b3883", @ANYRESHEX=r1], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = syz_io_uring_setup(0x10b5, &(0x7f0000000200)={0x0, 0x4d9, 0x800, 0x4, 0xb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x50, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x49cf02, 0x4, 0x5}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r11}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x4}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x6}, 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000ff050000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m47.168423563s ago: executing program 6 (id=12264): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sched_setscheduler(0x0, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='uid_map\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000e4ad4026f0bfd31414d0e39f07595a420cacc0565f6233a18e9461b6d0a8603db189221ffc1ca98a202dac618506cbd9f7ca2dc7d00f62655d615c1b6943d23bffff1a944ccb3d0a541993a10b07d1ccfe00b497aac8ebd197d24d7f84fbfce574ae05d4ff4ade1f98e348f28069d931756126e799c9e8f217fec8666fc2aface71aa0f4200b39054dcfe75db006447523e686b949a3b35d2f5a58b9db2b79edd978800fdc94f531e866cba48af50b626b97a7a7eb9b8827c5de5f50c01ae36eb469d9c31e91697d27ec7fad8a3a72c10e210ae1b720afdf44def7b2f364788ed45f2bad0e848ba3", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80004a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000580)={0x0, 0x1, 0x0, 'queue0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9cc, 0x4) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9}) 6m46.869031902s ago: executing program 6 (id=12271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB="9f61aed6b3d861905d235f2bf1a701d56c4acc149e11aaf04b37ba36764e32503f3ebdfd7e95b72b99adfbf83df604000000cbf1f24c12811de8bd79f9bd4d7c1e020eb94dfd0e3d885ee99e473fefc94fce35c17543056a5ee22936ca94ed6578770b05c17b8b889fc177bef220c00061f888d83604d9a4b4753c755db0312f2580eeed5da993497e180a5ed8701b4ae3b8c7dda8af5a47f368432ba1f9cc4ce0ce662b3883", @ANYRESHEX=r0], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m46.868480002s ago: executing program 40 (id=12271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB="9f61aed6b3d861905d235f2bf1a701d56c4acc149e11aaf04b37ba36764e32503f3ebdfd7e95b72b99adfbf83df604000000cbf1f24c12811de8bd79f9bd4d7c1e020eb94dfd0e3d885ee99e473fefc94fce35c17543056a5ee22936ca94ed6578770b05c17b8b889fc177bef220c00061f888d83604d9a4b4753c755db0312f2580eeed5da993497e180a5ed8701b4ae3b8c7dda8af5a47f368432ba1f9cc4ce0ce662b3883", @ANYRESHEX=r0], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.073391431s ago: executing program 5 (id=17120): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 35.030268495s ago: executing program 5 (id=17121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = io_uring_setup(0x3c93, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 34.113017687s ago: executing program 5 (id=17131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 33.802877689s ago: executing program 5 (id=17134): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9cmlzduFIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLOzKT5mjhompGc3w9Oc97zTs/zvhmel3Pec05OAJl1NvknFzEYEZ9GxNFGcfMHzjZ+rN2/OZUsuajXL3+TSz+XlFsfbf2/IxGxGhF9EfH04xEv5LbHrS6vzE6Wy6XFZrlYm1soVpdXLlybm5wpzZTmR8YvTkyMD4+NTuxZX2+/9tLtSx882fv+D6/eu/v6Rx8mzRps1m3sx15qdL0njm/YdigiHn0Ywbqg0OxPf7cbwm+SfH9/iYhzaf4fjUL6bQJZUK/X6z/XD7erXq0DB1Y+PQbO5YciorGezw8NNY7h/xoD+XKlWvvv1crS/HTjWPlY9OSvXiuXhpvnCseiJ5eUR9L1B+XRLeWxiPQY+I1Cf1oemqqUp/d3qAO2ONLM//5m/n9faOQ/kBE7n/K3PSkADhBTfpBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yHzLpqUuXkqXeev59+vry0mzl+oXpUnV2aG5pamiqsrgwNFOpzKTP7Mz92v7KlcrCyP9i6UaxVqrWitXllStzlaX52pX0uf4rpZ596RXQieNn7nyei4jV//enS6K3WSdX4WCr13PR7WeQge4odHsAArrG1B9kl3N8YIc/0btJX7uKhb1vC7A/8t1uANA150+5/gdZZf4fssv8P2SXY3zA/D9kj/l/yK7BNu//+tOGd3cNR8SfI+KzQs/h1ru+gIMg/1UuIp8c/58/+s/BrbW9uR/TSwS9EfHyO5ffujFZqy2OJNu/Xd9ee7u5fbQb7Qc61crTVh4DANm1dv/mVGvZz7hfP9a4CWF7/EPNucm+9BrlwFpu070KuT26d2H1VkSc3Cl+rvm+88aVj4G1wrb4J5o/c41dpO09lL43fX/in9oQ/x8b4p/+3b8VyIY7yfgzvFP+5dOcjvX82zz+DO7RvRPtx7/8+vhXaDP+nekwxovvvvJl2/i3Ik7vGL8Vry+NtTV+0rbznYXP3Xvumb+1q6y/19jPTvHXdxARxdrcQrG6vHIh/TtyM6X5kfGLExPjw2OjE8V0jrrYmqne7pGTn9zdrf8DbeLv1v9k278763/89PePnz27S/x/ndv5+z+xS/z+iPhPh/G/G/3i+XZ1SfzpNv3P7xI/2TbWYfzqm094lzgA/IFUl1dmJ8vl0qIVK1asrK90e2QCHrYHSd/tlgAAAAAAAAAAAACd2o/bibvdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAg+CXAAAA///8zdZA") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 32.814291388s ago: executing program 5 (id=17141): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80342, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 32.021990988s ago: executing program 5 (id=17149): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r4}, 0x18) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x80000000000725) 32.00564075s ago: executing program 41 (id=17149): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r4}, 0x18) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x80000000000725) 27.664918957s ago: executing program 9 (id=17234): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 27.664522206s ago: executing program 9 (id=17235): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x6e02, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x3}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 27.62646429s ago: executing program 9 (id=17237): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 27.438832359s ago: executing program 1 (id=17245): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 27.364975406s ago: executing program 1 (id=17246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x14, 0x3, 0x1, 0x705, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x800) 27.22933825s ago: executing program 1 (id=17248): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b25119eb84592478e1c5030e645c3ad26abd9cb62b92d0876b6ebb6c44de8a27cf8575d0e5724cbfa75bc98e7bac4fd80f14fd764bf6aa", 0xf9}, {&(0x7f0000001800)="4dc0328334d18f421839b03914ae532688883a30bd6a4d65d0126ea1b2f69f4b8442f256f377", 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="251740f4cdcf13168deac77792ad", 0xe}], 0x1}}], 0x4, 0x400c0) 27.136304689s ago: executing program 1 (id=17251): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 27.014009442s ago: executing program 1 (id=17257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 26.764241937s ago: executing program 1 (id=17268): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e657cf331580a1b508ba10cfb0dedad4b5ac451b40a7f0df7567fa862a5c1e38a7c5a985e87a1082dfab4a105abf52fd4cab16fded0b7e72b376c5f8ad3c5c15f28304cef5ca6452c4663c961fc38b0c495eb749f9625f51a6b3ccea3db17fb5e2a8e9c815abc956e6a287660909f58c45163d7ea1cb2c3f13724", 0x3d6}], 0x1}}], 0x1, 0x4) fsopen(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 26.763890337s ago: executing program 9 (id=17269): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 26.711746182s ago: executing program 42 (id=17268): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3d6}], 0x1}}], 0x1, 0x4) fsopen(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 26.500327663s ago: executing program 9 (id=17271): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 26.3411422s ago: executing program 9 (id=17274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) socket$inet(0x2, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 26.288692735s ago: executing program 43 (id=17274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) socket$inet(0x2, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 24.417031023s ago: executing program 3 (id=17288): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) 24.416711563s ago: executing program 3 (id=17289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x18, 0x3, 0x1, 0x705, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x800) 24.244440081s ago: executing program 3 (id=17291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0xc, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 24.218345813s ago: executing program 3 (id=17292): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 23.982491567s ago: executing program 3 (id=17297): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 23.408555775s ago: executing program 3 (id=17298): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000004c00)={r1, 0x70, "8f1ffe127518f98f6d079670f88ee1c2f3ef9a2df06f943b32de7eb12fa59c19da957a8f3f613851558f8889dc28dd8c7b7b13ece0d0a049643e5f53be61355118ecc3368b30aa5030478530170305b1917b8b1ac2483557c398e82d2f425fca316f43ee4827d1f36ba2fdcbc08633a6"}, 0x0) 23.383878167s ago: executing program 44 (id=17298): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000004c00)={r1, 0x70, "8f1ffe127518f98f6d079670f88ee1c2f3ef9a2df06f943b32de7eb12fa59c19da957a8f3f613851558f8889dc28dd8c7b7b13ece0d0a049643e5f53be61355118ecc3368b30aa5030478530170305b1917b8b1ac2483557c398e82d2f425fca316f43ee4827d1f36ba2fdcbc08633a6"}, 0x0) 3.950780562s ago: executing program 0 (id=17822): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001400010026bd700000004000e0000002000000000000000000000000ffffffff0000000000000000000000000000fff5000000000a"], 0xb8}}, 0x2c000010) 3.949917722s ago: executing program 0 (id=17823): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 3.052764093s ago: executing program 0 (id=17849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="f381", 0x2, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0xc, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 3.000180198s ago: executing program 0 (id=17851): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.861637902s ago: executing program 0 (id=17856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bf", 0x11}], 0x2) 2.605088628s ago: executing program 7 (id=17864): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r0, &(0x7f0000003200)={0xc, {0x3b, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb"}}, 0x41) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2.599555018s ago: executing program 0 (id=17865): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.163192732s ago: executing program 7 (id=17866): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x206}, 0xfffffffffffffd08) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 2.076758331s ago: executing program 7 (id=17872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "f717c9be4c545947", "bc3517748a0cc46c474293db267cdf71", '\x00', "0c51300e48732455"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 1.224393057s ago: executing program 7 (id=17887): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 876.983982ms ago: executing program 4 (id=17890): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 585.945871ms ago: executing program 2 (id=17894): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 492.95391ms ago: executing program 2 (id=17896): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 491.667221ms ago: executing program 4 (id=17897): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0xa82, 0x0) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38, 0x4000001}}], 0x1, 0x0) 469.639853ms ago: executing program 2 (id=17898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0x140}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bf", 0x11}], 0x2) 405.427909ms ago: executing program 8 (id=17900): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000d042d7b70000000002000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 402.824ms ago: executing program 8 (id=17901): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000003200)={0xc, {0x3b, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb"}}, 0x41) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 341.073596ms ago: executing program 4 (id=17902): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000a40)=[{r0, 0x201}], 0x1, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 320.580018ms ago: executing program 7 (id=17903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 319.975348ms ago: executing program 2 (id=17904): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$kcm(0xa, 0x2, 0x0) 316.986328ms ago: executing program 8 (id=17905): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x166) r1 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x4000001c, 0x10, 0x2, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 248.911055ms ago: executing program 2 (id=17906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001400010026bd700000004000e0000002000000000000000000000000ffffffff0000000000000000000000000000fff5000000000a"], 0xb8}}, 0x2c000010) 186.374622ms ago: executing program 4 (id=17907): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 185.575081ms ago: executing program 2 (id=17908): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) 162.902113ms ago: executing program 8 (id=17909): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 162.097593ms ago: executing program 7 (id=17910): r0 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x5460, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) 101.35267ms ago: executing program 8 (id=17911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ext4_load_inode\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") 34.154896ms ago: executing program 4 (id=17912): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000008600), 0x0, 0x4008000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.439739ms ago: executing program 4 (id=17913): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0x7}, 0x14}}, 0x0) 0s ago: executing program 8 (id=17914): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) kernel console output (not intermixed with test programs): e loop9): ext4_acquire_dquot:6945: comm syz.9.16667: Failed to acquire dquot type 0 [ 1356.719727][T20322] EXT4-fs (loop1): 1 truncate cleaned up [ 1356.730334][T20322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1356.734343][T20354] EXT4-fs (loop9): 1 truncate cleaned up [ 1356.754036][T20322] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.16658: Invalid inode table block 0 in block_group 0 [ 1356.767894][T20322] xt_hashlimit: max too large, truncated to 1048576 [ 1356.776319][T20322] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.16658: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1356.783571][T20364] loop7: detected capacity change from 0 to 512 [ 1356.825572][T20354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.886998][T20374] xt_policy: output policy not valid in PREROUTING and INPUT [ 1356.888015][T20354] ip6gre2: entered allmulticast mode [ 1357.026265][T20380] ip6gre1: entered allmulticast mode [ 1357.026979][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16667'. [ 1357.057668][T20384] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16675'. [ 1357.104778][T20384] loop7: detected capacity change from 0 to 1024 [ 1357.116091][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16676'. [ 1357.117949][T19475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.135933][T20384] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1357.149130][T20384] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1357.168311][T20384] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1357.195622][T20384] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16675: Invalid inode table block 0 in block_group 0 [ 1357.224950][T20392] loop9: detected capacity change from 0 to 512 [ 1357.250172][T20384] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1357.267797][T20384] EXT4-fs error (device loop7): ext4_quota_write:7334: inode #3: comm syz.7.16675: mark_inode_dirty error [ 1357.293386][T20384] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16675: Failed to acquire dquot type 0 [ 1357.315503][T20392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1357.353210][T20384] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16675: Invalid inode table block 0 in block_group 0 [ 1357.378460][T20392] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1357.416455][T20384] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1357.510874][T20400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1357.533878][T20384] EXT4-fs error (device loop7): ext4_ext_truncate:4475: inode #15: comm syz.7.16675: mark_inode_dirty error [ 1357.559751][T20384] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16675: Invalid inode table block 0 in block_group 0 [ 1357.579939][T20384] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1357.704121][T19475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.981726][T20384] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1358.005783][T20410] xt_policy: output policy not valid in PREROUTING and INPUT [ 1358.015171][T20384] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16675: Invalid inode table block 0 in block_group 0 [ 1358.043931][T20384] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1358.077444][T20384] EXT4-fs error (device loop7): ext4_truncate:4637: inode #15: comm syz.7.16675: mark_inode_dirty error [ 1358.103155][T20384] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1358.123151][T20384] EXT4-fs (loop7): 1 truncate cleaned up [ 1358.136794][T20384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1358.180357][T20384] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16675: Invalid inode table block 0 in block_group 0 [ 1358.205580][T20414] lo speed is unknown, defaulting to 1000 [ 1358.218507][T20414] lo speed is unknown, defaulting to 1000 [ 1358.234847][T20419] xt_hashlimit: max too large, truncated to 1048576 [ 1358.285476][T20419] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.16675: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1358.561630][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16690'. [ 1358.594679][T20426] delete_channel: no stack [ 1358.662575][T20426] vlan2: entered allmulticast mode [ 1358.667774][T20426] bridge0: entered allmulticast mode [ 1358.731943][T20427] delete_channel: no stack [ 1358.767896][T20430] xt_hashlimit: max too large, truncated to 1048576 [ 1358.883516][T20438] loop5: detected capacity change from 0 to 512 [ 1358.907380][T20438] EXT4-fs: Ignoring removed oldalloc option [ 1358.960216][T20438] EXT4-fs (loop5): 1 truncate cleaned up [ 1358.972382][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 1358.972401][ T29] audit: type=1400 audit(2000000504.330:57970): avc: denied { relabelto } for pid=20439 comm="syz.9.16696" name="NETLINK" dev="sockfs" ino=198746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 1359.060204][T20438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.090116][T20438] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.16695: invalid fast symlink length 39 [ 1359.102657][T20438] EXT4-fs (loop5): Remounting filesystem read-only [ 1359.116327][T20438] netlink: 'syz.5.16695': attribute type 1 has an invalid length. [ 1359.124229][T20438] netlink: 224 bytes leftover after parsing attributes in process `syz.5.16695'. [ 1359.173455][T19643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.326279][T20449] loop9: detected capacity change from 0 to 512 [ 1359.359666][T20449] EXT4-fs: Ignoring removed oldalloc option [ 1359.365892][T20449] EXT4-fs: inline encryption not supported [ 1359.371920][T20449] EXT4-fs: Ignoring removed mblk_io_submit option [ 1359.417853][T20449] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1359.438277][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.493748][T20449] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.16699: bg 0: block 64: padding at end of block bitmap is not set [ 1359.515768][T20449] Quota error (device loop9): write_blk: dquota write failed [ 1359.526312][T20449] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1359.536767][T20449] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.16699: Failed to acquire dquot type 0 [ 1359.548969][T20449] EXT4-fs (loop9): 1 truncate cleaned up [ 1359.555352][T20449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.578858][T20449] ip6gre3: entered allmulticast mode [ 1359.680235][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16699'. [ 1359.842618][T19475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.853042][T20463] netlink: 'syz.0.16704': attribute type 1 has an invalid length. [ 1359.853643][T19773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.860945][T20463] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16704'. [ 1359.914909][T20463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20463 comm=syz.0.16704 [ 1359.932763][T20467] netlink: 5420 bytes leftover after parsing attributes in process `syz.9.16703'. [ 1360.008392][T20479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16705'. [ 1360.049267][T20479] loop1: detected capacity change from 0 to 1024 [ 1360.067017][T20476] lo speed is unknown, defaulting to 1000 [ 1360.073892][T20479] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1360.084914][T20476] lo speed is unknown, defaulting to 1000 [ 1360.100191][T20479] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1360.116708][T20479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1360.133935][T20479] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.16705: Invalid inode table block 0 in block_group 0 [ 1360.158565][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16713'. [ 1360.226987][T20492] delete_channel: no stack [ 1360.260066][T20479] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1360.269863][T20479] EXT4-fs error (device loop1): ext4_quota_write:7334: inode #3: comm syz.1.16705: mark_inode_dirty error [ 1360.281581][T20479] Quota error (device loop1): write_blk: dquota write failed [ 1360.289040][T20479] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1360.299078][T20479] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.16705: Failed to acquire dquot type 0 [ 1360.314098][T20490] vlan2: entered allmulticast mode [ 1360.319279][T20490] bridge0: entered allmulticast mode [ 1360.335506][T20479] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.16705: Invalid inode table block 0 in block_group 0 [ 1360.352920][T20479] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1360.362773][T20479] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.16705: mark_inode_dirty error [ 1360.387910][T20491] lo speed is unknown, defaulting to 1000 [ 1360.394762][T20491] lo speed is unknown, defaulting to 1000 [ 1360.408426][T20495] loop5: detected capacity change from 0 to 1024 [ 1360.410724][T20479] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.16705: Invalid inode table block 0 in block_group 0 [ 1360.421280][T20492] delete_channel: no stack [ 1360.468185][T20479] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1360.471249][ T5501] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1360.496122][T20479] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1360.511299][ T29] audit: type=1326 audit(2000000505.870:57971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20494 comm="syz.5.16714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff764efc9 code=0x7ffc0000 [ 1360.535458][ T29] audit: type=1326 audit(2000000505.870:57972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20494 comm="syz.5.16714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff764efc9 code=0x7ffc0000 [ 1360.566547][ T5501] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1360.582384][T20501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.613849][T20479] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.16705: Invalid inode table block 0 in block_group 0 [ 1360.678419][T20479] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1360.727994][ T29] audit: type=1326 audit(2000000505.880:57973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20494 comm="syz.5.16714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0ff764efc9 code=0x7ffc0000 [ 1360.751925][ T29] audit: type=1326 audit(2000000505.880:57974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20494 comm="syz.5.16714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff764efc9 code=0x7ffc0000 [ 1360.776188][ T29] audit: type=1326 audit(2000000505.880:57975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20494 comm="syz.5.16714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff764efc9 code=0x7ffc0000 [ 1360.816505][T20501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.849715][T20479] EXT4-fs error (device loop1): ext4_truncate:4637: inode #15: comm syz.1.16705: mark_inode_dirty error [ 1360.886706][T20479] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1360.922554][T20479] EXT4-fs (loop1): 1 truncate cleaned up [ 1360.928907][T20479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1360.951167][T20501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.007105][T20479] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.16705: Invalid inode table block 0 in block_group 0 [ 1361.043936][T20479] xt_hashlimit: max too large, truncated to 1048576 [ 1361.062700][T20501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.073846][T20479] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.16705: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1361.197164][ T3746] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.223751][ T3746] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.255235][ T3746] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.280975][ T3746] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.085141][T20532] lo speed is unknown, defaulting to 1000 [ 1362.085157][T20542] blktrace: Concurrent blktraces are not allowed on loop11 [ 1362.108927][T20532] lo speed is unknown, defaulting to 1000 [ 1362.264398][T20550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16733'. [ 1362.309826][T20550] loop7: detected capacity change from 0 to 1024 [ 1362.327940][T20550] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1362.350844][T20550] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1362.369960][T20550] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1362.389689][T20550] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16733: Invalid inode table block 0 in block_group 0 [ 1362.409815][T20550] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1362.429665][T20550] EXT4-fs error (device loop7): ext4_quota_write:7334: inode #3: comm syz.7.16733: mark_inode_dirty error [ 1362.445708][T20550] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16733: Failed to acquire dquot type 0 [ 1362.463061][T20550] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16733: Invalid inode table block 0 in block_group 0 [ 1362.487543][T20550] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1362.549998][T20550] EXT4-fs error (device loop7): ext4_ext_truncate:4475: inode #15: comm syz.7.16733: mark_inode_dirty error [ 1362.570661][T20531] uprobe: syz.9.16726:20531 failed to unregister, leaking uprobe [ 1362.578708][T20550] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16733: Invalid inode table block 0 in block_group 0 [ 1362.601937][T20550] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1362.643910][T20550] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1362.671588][T20550] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16733: Invalid inode table block 0 in block_group 0 [ 1362.712376][T20550] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1362.729838][T20550] EXT4-fs error (device loop7): ext4_truncate:4637: inode #15: comm syz.7.16733: mark_inode_dirty error [ 1362.759934][T20550] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1362.769323][T20550] EXT4-fs (loop7): 1 truncate cleaned up [ 1362.782995][T20550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1362.943570][T20550] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.16733: Invalid inode table block 0 in block_group 0 [ 1362.997269][T19773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.148866][T20565] lo speed is unknown, defaulting to 1000 [ 1363.169822][T20565] lo speed is unknown, defaulting to 1000 [ 1363.774195][T20583] ip6gre2: entered allmulticast mode [ 1363.877868][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16744'. [ 1364.111932][T20606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16745'. [ 1364.194466][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 1364.194487][ T29] audit: type=1326 audit(2000000509.550:58055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.199856][T20614] atomic_op ffff8882140d6928 conn xmit_atomic 0000000000000000 [ 1364.203324][ T29] audit: type=1326 audit(2000000509.550:58056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.255876][ T29] audit: type=1326 audit(2000000509.550:58057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.279824][ T29] audit: type=1326 audit(2000000509.550:58058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.303607][ T29] audit: type=1326 audit(2000000509.550:58059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.327358][ T29] audit: type=1326 audit(2000000509.550:58060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.351063][ T29] audit: type=1326 audit(2000000509.550:58061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.374877][ T29] audit: type=1326 audit(2000000509.550:58062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20600 comm="syz.1.16750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2034f0efc9 code=0x7ffc0000 [ 1364.614544][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.640662][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.655981][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.665751][T20620] usb usb8: usbfs: process 20620 (syz.1.16757) did not claim interface 0 before use [ 1365.617239][T20652] FAT-fs (loop15): unable to read boot sector [ 1366.540950][T20717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.549019][T20719] IPv6: NLM_F_CREATE should be specified when creating new route [ 1366.557657][T20717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.788849][T20739] netlink: 'syz.5.16779': attribute type 4 has an invalid length. [ 1367.797003][T20739] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.16779'. [ 1367.962757][ T29] audit: type=1400 audit(2000000513.320:58063): avc: denied { write } for pid=20744 comm="syz.7.16782" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1368.204930][T20760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.268007][T20760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.512066][T20775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16796'. [ 1368.523606][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16795'. [ 1368.532792][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16795'. [ 1368.864445][T20783] hub 2-0:1.0: USB hub found [ 1368.869257][T20783] hub 2-0:1.0: 8 ports detected [ 1369.322154][T20794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.160389][T20804] bond0: entered promiscuous mode [ 1370.165500][T20804] bond_slave_0: entered promiscuous mode [ 1370.171512][T20804] bond_slave_1: entered promiscuous mode [ 1370.177266][T20804] bond0: entered allmulticast mode [ 1370.182426][T20804] bond_slave_0: entered allmulticast mode [ 1370.188179][T20804] bond_slave_1: entered allmulticast mode [ 1370.190018][T20794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.482697][T20843] netlink: 'syz.0.16817': attribute type 7 has an invalid length. [ 1371.490662][T20843] netlink: 'syz.0.16817': attribute type 1 has an invalid length. [ 1371.959693][T20844] tmpfs: Unsupported parameter 'huge' [ 1372.233842][ T5509] usb usb2-port1: attempt power cycle [ 1372.579864][T20870] bridge_slave_0: left allmulticast mode [ 1372.585612][T20870] bridge_slave_0: left promiscuous mode [ 1372.591373][T20870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.603826][T20870] bridge_slave_1: left allmulticast mode [ 1372.610471][T20870] bridge_slave_1: left promiscuous mode [ 1372.616392][T20870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.634818][T20870] bond0: (slave bond_slave_0): Releasing backup interface [ 1372.648893][T20870] bond0: (slave bond_slave_1): Releasing backup interface [ 1372.668555][T20870] team0: Port device team_slave_0 removed [ 1372.681691][T20870] team0: Port device team_slave_1 removed [ 1372.692676][T20870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.700259][T20870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.712283][T20870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1372.719916][T20870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.733490][T20870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1373.474189][T20890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.491500][T20890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.630724][T20899] netlink: 'syz.9.16831': attribute type 7 has an invalid length. [ 1373.638612][T20899] netlink: 'syz.9.16831': attribute type 1 has an invalid length. [ 1373.826812][T20908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.836132][T20908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.429898][ T5509] usb usb2-port1: unable to enumerate USB device [ 1374.810927][ T29] audit: type=1400 audit(2000000520.170:58064): avc: denied { listen } for pid=20946 comm="syz.7.16857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1375.505966][T20964] netlink: 'syz.1.16864': attribute type 5 has an invalid length. [ 1375.520018][T20964] batman_adv: batadv0: Adding interface: vxlan0 [ 1375.526383][T20964] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.589364][T20964] batman_adv: batadv0: Interface activated: vxlan0 [ 1375.610609][ T3713] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.628071][ T3713] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.640796][ T3713] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.679773][T20977] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1375.691254][ T3713] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.741147][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.748622][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.756187][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.763693][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.771203][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.778685][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.786131][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.793614][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.859037][T20989] bridge_slave_0: left allmulticast mode [ 1375.864804][T20989] bridge_slave_0: left promiscuous mode [ 1375.870606][T20989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.884897][T20995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.898504][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.906119][ T5509] hid-generic 00A0:0008:0003.000E: unknown main item tag 0x0 [ 1375.906544][T20995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.924300][T20989] bridge_slave_1: left allmulticast mode [ 1375.930277][T20989] bridge_slave_1: left promiscuous mode [ 1375.936102][T20989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.950484][ T5509] hid-generic 00A0:0008:0003.000E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1375.976232][T20989] bond0: (slave bond_slave_0): Releasing backup interface [ 1375.988173][T20989] bond0: (slave bond_slave_1): Releasing backup interface [ 1376.002406][T20989] team0: Port device team_slave_0 removed [ 1376.015750][T20989] team0: Port device team_slave_1 removed [ 1376.023523][T20989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.031026][T20989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.044808][T20989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.052383][T20989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.067679][T20989] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1376.182880][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16882'. [ 1376.308251][T21018] syz_tun: entered allmulticast mode [ 1376.342584][T21024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.351773][T21024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.640738][ T29] audit: type=1400 audit(2000000522.990:58065): avc: denied { ioctl } for pid=21033 comm="syz.1.16889" path="socket:[199591]" dev="sockfs" ino=199591 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1377.666606][ T29] audit: type=1400 audit(2000000522.990:58066): avc: denied { getopt } for pid=21033 comm="syz.1.16889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1378.072335][T21031] bridge0: entered promiscuous mode [ 1378.081726][ T3713] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.122583][T21044] netlink: 'syz.9.16890': attribute type 7 has an invalid length. [ 1378.130491][T21044] netlink: 'syz.9.16890': attribute type 1 has an invalid length. [ 1378.141268][ T29] audit: type=1400 audit(2000000523.210:58067): avc: denied { ioctl } for pid=21039 comm="syz.7.16891" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1378.168489][ T3713] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.302725][ T3713] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.311729][ T3713] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.413246][T21051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.422214][T21051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.433728][ T29] audit: type=1400 audit(2000000523.770:58068): avc: denied { name_bind } for pid=21045 comm="syz.0.16892" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1378.644572][T21057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.670834][T21057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.341297][T21066] usb usb8: usbfs: process 21066 (syz.9.16899) did not claim interface 0 before use [ 1379.466147][ T29] audit: type=1400 audit(2000000524.820:58069): avc: denied { read } for pid=21073 comm="syz.5.16903" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1379.491606][ T29] audit: type=1400 audit(2000000524.820:58070): avc: denied { open } for pid=21073 comm="syz.5.16903" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1379.546345][ T29] audit: type=1400 audit(2000000524.900:58071): avc: denied { write } for pid=21073 comm="syz.5.16903" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1379.586181][T21079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.595371][T21079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.697898][ T29] audit: type=1400 audit(2000000525.050:58072): avc: denied { write } for pid=21080 comm="syz.7.16905" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1380.988336][T21107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1381.870407][T21134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.879524][T21134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.119991][ T3699] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 1384.128678][ T3699] ref_tracker: netdev@ffff888119ad4550 has 1/1 users at [ 1384.128678][ T3699] fib_check_nh+0x5be/0xbe0 [ 1384.128678][ T3699] rtm_new_nexthop+0x220b/0x45f0 [ 1384.128678][ T3699] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 1384.128678][ T3699] netlink_rcv_skb+0x123/0x220 [ 1384.128678][ T3699] rtnetlink_rcv+0x1c/0x30 [ 1384.128678][ T3699] netlink_unicast+0x5c0/0x690 [ 1384.128678][ T3699] netlink_sendmsg+0x58b/0x6b0 [ 1384.128678][ T3699] __sock_sendmsg+0x145/0x180 [ 1384.128678][ T3699] ____sys_sendmsg+0x345/0x4e0 [ 1384.128678][ T3699] ___sys_sendmsg+0x17b/0x1d0 [ 1384.128678][ T3699] __sys_sendmmsg+0x178/0x300 [ 1384.128678][ T3699] __x64_sys_sendmmsg+0x57/0x70 [ 1384.128678][ T3699] x64_sys_call+0x1c4a/0x3000 [ 1384.128678][ T3699] do_syscall_64+0xd2/0x200 [ 1384.128678][ T3699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.128678][ T3699] [ 1384.522652][T21190] netlink: 'syz.1.16942': attribute type 10 has an invalid length. [ 1384.531380][T21190] syz_tun: entered promiscuous mode [ 1384.557042][T21190] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1384.570993][T21189] SELinux: failed to load policy [ 1384.630708][T21195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.658678][T21195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.300847][T20690] Bluetooth: hci0: Frame reassembly failed (-84) [ 1385.699708][T21254] netlink: 'syz.1.16964': attribute type 2 has an invalid length. [ 1385.707697][T21254] netlink: 'syz.1.16964': attribute type 1 has an invalid length. [ 1385.715659][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16964'. [ 1385.972432][T21262] netlink: 'syz.5.16972': attribute type 4 has an invalid length. [ 1386.155933][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16976'. [ 1386.170909][T21273] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1387.329687][ T4106] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1387.335902][T21215] Bluetooth: hci0: command 0x1003 tx timeout [ 1387.819739][T21323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.842736][T21320] syz_tun: entered allmulticast mode [ 1387.848948][T21323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.002681][T21335] Process accounting resumed [ 1389.812430][T21370] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1390.096209][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17016'. [ 1390.252594][T21387] syzkaller1: entered promiscuous mode [ 1390.258179][T21387] syzkaller1: entered allmulticast mode [ 1390.589091][T21395] bridge_slave_0: left allmulticast mode [ 1390.594929][T21395] bridge_slave_0: left promiscuous mode [ 1390.600766][T21395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.631853][T21395] bridge_slave_1: left allmulticast mode [ 1390.637574][T21395] bridge_slave_1: left promiscuous mode [ 1390.643330][T21395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.667627][T21395] bond0: (slave bond_slave_0): Releasing backup interface [ 1390.680837][T21395] bond0: (slave bond_slave_1): Releasing backup interface [ 1390.697985][T21395] team0: Port device team_slave_0 removed [ 1390.710169][T21395] team0: Port device team_slave_1 removed [ 1390.717816][T21395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.725436][T21395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.736569][T21395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.744084][T21395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.872017][T21395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1391.040285][T21401] tipc: Enabling of bearer rejected, failed to enable media [ 1391.320442][T21419] netlink: 'syz.9.17025': attribute type 7 has an invalid length. [ 1391.329528][T21419] netlink: 'syz.9.17025': attribute type 1 has an invalid length. [ 1391.688718][ T29] audit: type=1400 audit(2000000537.040:58073): avc: denied { getopt } for pid=21426 comm="syz.5.17030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1391.739276][T21425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.746521][T21425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.812647][T21425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.827008][T21425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.887364][T21425] batman_adv: batadv0: Interface deactivated: vxlan0 [ 1391.907970][T20682] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.917004][T20682] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.926052][T20682] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.935163][T20682] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.956538][T20690] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.965509][T20690] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.977379][T20690] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.986343][T20690] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.132023][T21445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.150024][T21445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.613862][T21447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.627835][T21447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.682620][ T29] audit: type=1400 audit(2000000538.040:58074): avc: denied { map } for pid=21456 comm="syz.5.17042" path="socket:[202396]" dev="sockfs" ino=202396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1392.707035][ T29] audit: type=1400 audit(2000000538.040:58075): avc: denied { read accept } for pid=21456 comm="syz.5.17042" path="socket:[202396]" dev="sockfs" ino=202396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1392.758621][T21459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.767349][T21459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.581787][T21472] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1394.002167][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17053'. [ 1394.841632][T21536] netlink: 256 bytes leftover after parsing attributes in process `syz.7.17067'. [ 1394.914363][T21538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17071'. [ 1395.198021][T21545] netlink: 'syz.9.17073': attribute type 10 has an invalid length. [ 1395.206051][T21545] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17073'. [ 1395.259104][T21543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1395.277788][T21545] batman_adv: batadv0: Adding interface: veth1_vlan [ 1395.284533][T21545] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.313731][T21545] batman_adv: batadv0: Interface activated: veth1_vlan [ 1395.683819][T21556] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17078'. [ 1395.753948][T21559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.762922][T21559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.303855][T21564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.312903][T21564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.173441][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.182741][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.739124][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17088'. [ 1398.233785][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.241336][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.248866][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.256378][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.263854][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.271413][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.279000][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.286510][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.294028][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.301528][ T5499] hid-generic 0000:0000:0001.000F: unknown main item tag 0x0 [ 1398.333572][ T5499] hid-generic 0000:0000:0001.000F: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1399.198313][T21600] lo speed is unknown, defaulting to 1000 [ 1399.205800][T21600] lo speed is unknown, defaulting to 1000 [ 1399.407722][T21613] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1399.463409][T21615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.493666][T21615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.538796][T21619] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17103'. [ 1399.713318][T21628] loop5: detected capacity change from 0 to 512 [ 1399.722322][T21628] EXT4-fs: dax option not supported [ 1399.733906][T21628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.743005][T21628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.949405][ T29] audit: type=1400 audit(2000000545.300:58076): avc: denied { connect } for pid=21631 comm="syz.7.17109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1399.987314][T21636] bridge0: port 1(syz_tun) entered blocking state [ 1399.993910][T21636] bridge0: port 1(syz_tun) entered disabled state [ 1400.000971][T21636] syz_tun: entered allmulticast mode [ 1400.007417][T21636] syz_tun: entered promiscuous mode [ 1400.013929][T21636] bridge0: port 1(syz_tun) entered blocking state [ 1400.020461][T21636] bridge0: port 1(syz_tun) entered forwarding state [ 1400.795198][T21663] Set syz1 is full, maxelem 65536 reached [ 1400.923868][T21667] rdma_rxe: rxe_newlink: failed to add lo [ 1400.930461][T21667] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1400.937630][T21667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.946597][T21667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.955284][T21667] netlink: 'syz.7.17122': attribute type 1 has an invalid length. [ 1400.999261][T21667] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1401.009481][T21667] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1401.059517][T21667] bond1: (slave vcan1): making interface the new active one [ 1401.097531][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17122'. [ 1401.110780][T21667] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1401.124476][T21671] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 1401.140192][T21671] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 1401.733363][T21700] loop5: detected capacity change from 0 to 512 [ 1401.737893][T21702] 9pnet_virtio: no channels available for device syz [ 1401.773006][T21700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1401.787322][T21700] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1401.804180][ T29] audit: type=1400 audit(2000000547.160:58077): avc: denied { mounton } for pid=21699 comm="syz.5.17134" path="/132/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1401.886197][ T29] audit: type=1400 audit(2000000547.240:58078): avc: denied { remove_name } for pid=21699 comm="syz.5.17134" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1402.350895][T21700] loop5: detected capacity change from 512 to 64 [ 1402.414052][T21716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.422971][T21716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.433763][ T29] audit: type=1400 audit(2000000547.240:58079): avc: denied { unlink } for pid=21699 comm="syz.5.17134" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1402.460698][T21711] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Out of memory [ 1402.478045][T21711] EXT4-fs error (device loop5): __ext4_unlink:3270: inode #2: comm syz.5.17134: mark_inode_dirty error [ 1402.712565][T19643] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Out of memory [ 1402.722165][T19643] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 1402.764432][T19643] syz_tun (unregistering): left allmulticast mode [ 1403.000408][T21734] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1403.102811][T19643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.566435][T21753] loop1: detected capacity change from 0 to 512 [ 1403.584766][T21753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.597542][T21753] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.618776][T21753] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1403.633748][T21753] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1403.646284][T21753] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1403.646284][T21753] [ 1403.656004][T21753] EXT4-fs (loop1): Total free blocks count 0 [ 1403.662064][T21753] EXT4-fs (loop1): Free/Dirty block details [ 1403.667997][T21753] EXT4-fs (loop1): free_blocks=65280 [ 1403.673408][T21753] EXT4-fs (loop1): dirty_blocks=23 [ 1403.678539][T21753] EXT4-fs (loop1): Block reservation details [ 1403.684615][T21753] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 1403.685070][T21763] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 1403.745193][T21752] lo speed is unknown, defaulting to 1000 [ 1403.751348][T21752] lo speed is unknown, defaulting to 1000 [ 1403.874081][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17160'. [ 1403.883958][T21779] bond0: (slave syz_tun): Releasing backup interface [ 1403.892403][T21779] bridge_slave_0: left allmulticast mode [ 1403.898369][T21779] bridge_slave_0: left promiscuous mode [ 1403.904200][T21779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.912712][T21779] bridge_slave_1: left allmulticast mode [ 1403.918393][T21779] bridge_slave_1: left promiscuous mode [ 1403.924414][T21779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.934046][T21779] bond0: (slave bond_slave_0): Releasing backup interface [ 1403.943629][T21779] bond0: (slave bond_slave_1): Releasing backup interface [ 1403.953295][T21779] team0: Port device team_slave_0 removed [ 1403.960435][T21779] team0: Port device team_slave_1 removed [ 1403.967322][T21779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.975367][T21779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.983233][T21779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1404.005153][T21778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1404.040952][T21144] IPVS: starting estimator thread 0... [ 1404.046749][T21780] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1404.085658][T21784] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1404.129803][T21787] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1404.160364][T21752] chnl_net:caif_netlink_parms(): no params data found [ 1404.214552][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17164'. [ 1404.230487][T21811] bridge0: port 1(syz_tun) entered blocking state [ 1404.237011][T21811] bridge0: port 1(syz_tun) entered disabled state [ 1404.244097][T21811] syz_tun: entered allmulticast mode [ 1404.259824][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.266957][T21752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.278357][T21752] bridge_slave_0: entered allmulticast mode [ 1404.285509][T21752] bridge_slave_0: entered promiscuous mode [ 1404.292784][T21752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.293336][T21813] netlink: 44 bytes leftover after parsing attributes in process `syz.7.17170'. [ 1404.299958][T21752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.300408][T21752] bridge_slave_1: entered allmulticast mode [ 1404.333045][T21752] bridge_slave_1: entered promiscuous mode [ 1404.365962][T21752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.391897][T21752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.436721][T21752] team0: Port device team_slave_0 added [ 1404.447630][T21752] team0: Port device team_slave_1 added [ 1404.466708][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17182'. [ 1404.482287][T21752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.489394][T21752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.515509][T21752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.527465][T21752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.534610][T21752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.560738][T21752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.593968][T21752] hsr_slave_0: entered promiscuous mode [ 1404.600733][T21752] hsr_slave_1: entered promiscuous mode [ 1404.607290][T21752] debugfs: 'hsr0' already exists in 'hsr' [ 1404.613512][T21752] Cannot create hsr debugfs directory [ 1404.711182][ T5494] hid_parser_main: 78 callbacks suppressed [ 1404.711204][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.724582][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.732024][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.739457][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.746903][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.754405][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.761870][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.769275][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.776819][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.784316][ T5494] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 1404.792363][ T5494] hid-generic 00A0:0006:0003.0010: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1404.833791][T21858] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1404.889104][T21860] loop1: detected capacity change from 0 to 512 [ 1404.897840][T21860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1404.922276][T21860] EXT4-fs (loop1): 1 truncate cleaned up [ 1404.928378][T21860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.953793][T19773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.250589][T21752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1405.286691][T21752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1405.316224][T21752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1405.366458][T21752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1405.483421][T21752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.501488][T21752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.528035][T21752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1405.538494][T21752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.556987][T20690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.564151][T20690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.587641][T20690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.594888][T20690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.845458][T21752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.096083][T21752] veth0_vlan: entered promiscuous mode [ 1406.111967][T21752] veth1_vlan: entered promiscuous mode [ 1406.145658][T21752] veth0_macvtap: entered promiscuous mode [ 1406.158842][T21752] veth1_macvtap: entered promiscuous mode [ 1406.176038][T21752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.190385][T21752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.204655][ T3713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.228991][ T3713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.238356][ T3713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.247434][ T3713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.305250][T21921] loop3: detected capacity change from 0 to 512 [ 1406.334830][T21921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.348033][T21921] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.404690][T21752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.426350][T21935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.462450][T21935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.504136][T21928] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 1406.534687][T20690] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.548562][T20690] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.563124][T20690] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.586071][T20690] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.672426][T21956] loop1: detected capacity change from 0 to 512 [ 1406.683538][T21956] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.17221: inode has both inline data and extents flags [ 1406.710835][T21956] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.17221: couldn't read orphan inode 15 (err -117) [ 1406.724732][T21956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.743049][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17221'. [ 1406.845360][T21960] netlink: 'syz.7.17214': attribute type 4 has an invalid length. [ 1406.853412][T21960] netlink: 17 bytes leftover after parsing attributes in process `syz.7.17214'. [ 1406.984471][T19773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.002682][T21960] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1407.035033][T21970] rdma_rxe: rxe_newlink: failed to add lo [ 1407.088063][T21970] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1407.124798][T21970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.159410][T21970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.207845][T21970] netlink: 'syz.1.17223': attribute type 1 has an invalid length. [ 1407.347731][T21972] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 1407.357938][T21972] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1407.447212][T21972] bond1: (slave vcan0): making interface the new active one [ 1407.455720][T21972] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 1407.466991][T21976] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1407.915804][T22000] netlink: 'syz.0.17238': attribute type 7 has an invalid length. [ 1407.923739][T22000] netlink: 'syz.0.17238': attribute type 1 has an invalid length. [ 1408.133839][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17244'. [ 1408.278646][T22023] syz_tun: entered allmulticast mode [ 1408.391195][T22031] loop1: detected capacity change from 0 to 512 [ 1408.411959][T22031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.439945][T22031] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.472324][T22041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=22041 comm=syz.0.17255 [ 1408.514305][T19773] EXT4-fs error (device loop1): ext4_lookup:1784: inode #11: comm syz-executor: ' ' linked to parent dir [ 1408.540318][T19773] EXT4-fs error (device loop1): ext4_lookup:1784: inode #11: comm syz-executor: ' ' linked to parent dir [ 1408.604508][T19773] syz_tun (unregistering): left allmulticast mode [ 1408.611549][T19773] bridge0: port 1(syz_tun) entered disabled state [ 1408.701788][T19773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.781643][T22065] loop9: detected capacity change from 0 to 512 [ 1408.793210][T22063] bridge_slave_0: left allmulticast mode [ 1408.798971][T22063] bridge_slave_0: left promiscuous mode [ 1408.804836][T22063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.831756][T22065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.856809][T22063] bridge_slave_1: left allmulticast mode [ 1408.862675][T22063] bridge_slave_1: left promiscuous mode [ 1408.862751][T22065] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.868378][T22063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.892567][T22063] bond0: (slave bond_slave_0): Releasing backup interface [ 1408.915587][T22063] bond0: (slave bond_slave_1): Releasing backup interface [ 1408.943740][T22063] team0: Port device team_slave_0 removed [ 1408.954854][T22063] team0: Port device team_slave_1 removed [ 1408.962633][T22063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1408.970276][T22063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.980159][T22063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.987584][T22063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.989655][T22065] loop9: detected capacity change from 512 to 64 [ 1409.009164][T22063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1409.035803][T19475] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Out of memory [ 1409.048015][T19475] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 1409.098993][T19475] syz_tun (unregistering): left allmulticast mode [ 1409.153545][T19475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.232469][T22070] lo speed is unknown, defaulting to 1000 [ 1409.250998][T22070] lo speed is unknown, defaulting to 1000 [ 1409.354839][T22084] lo speed is unknown, defaulting to 1000 [ 1409.378663][T22084] lo speed is unknown, defaulting to 1000 [ 1409.617855][T22087] lo speed is unknown, defaulting to 1000 [ 1409.644636][T22087] lo speed is unknown, defaulting to 1000 [ 1409.795302][T22070] chnl_net:caif_netlink_parms(): no params data found [ 1409.919908][T22070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.927042][T22070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.946950][T22070] bridge_slave_0: entered allmulticast mode [ 1409.961615][T22070] bridge_slave_0: entered promiscuous mode [ 1410.063055][T22070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.070804][T22070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.079151][T22070] bridge_slave_1: entered allmulticast mode [ 1410.086584][T22070] bridge_slave_1: entered promiscuous mode [ 1410.204822][T20696] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.224441][T22070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.238840][T22070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.248099][T20696] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.257077][T20696] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.310981][T20696] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.346864][T22070] team0: Port device team_slave_0 added [ 1410.367697][T22070] team0: Port device team_slave_1 added [ 1410.405258][T22070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.412301][T22070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.438386][T22070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.755916][T22124] loop3: detected capacity change from 0 to 512 [ 1410.854133][T22070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.858818][T22124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.861248][T22070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.873965][T22124] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.899630][T22070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.933812][T22124] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1410.992190][T22087] chnl_net:caif_netlink_parms(): no params data found [ 1411.023873][T21752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.033419][T22070] hsr_slave_0: entered promiscuous mode [ 1411.040768][T22070] hsr_slave_1: entered promiscuous mode [ 1411.047244][T22070] debugfs: 'hsr0' already exists in 'hsr' [ 1411.053050][T22070] Cannot create hsr debugfs directory [ 1411.213619][T22087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.220893][T22087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.229173][T22087] bridge_slave_0: entered allmulticast mode [ 1411.236309][T22087] bridge_slave_0: entered promiscuous mode [ 1411.266196][T22087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.273465][T22087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.280889][T22087] bridge_slave_1: entered allmulticast mode [ 1411.287891][T22087] bridge_slave_1: entered promiscuous mode [ 1411.326621][T22148] loop3: detected capacity change from 0 to 512 [ 1411.340503][T22087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.363437][T22087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.381076][T22148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1411.395228][T22148] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.410738][T22087] team0: Port device team_slave_0 added [ 1411.419510][T22087] team0: Port device team_slave_1 added [ 1411.439884][T22148] loop3: detected capacity change from 512 to 64 [ 1411.452464][T22087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.459476][T22087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.485608][T22087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.500185][T22087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.507196][T22087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.533240][T22087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.552497][T21752] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 1411.562419][T21752] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 1411.580941][T22087] hsr_slave_0: entered promiscuous mode [ 1411.587997][T22087] hsr_slave_1: entered promiscuous mode [ 1411.594299][T22087] debugfs: 'hsr0' already exists in 'hsr' [ 1411.600122][T22087] Cannot create hsr debugfs directory [ 1411.689960][T22161] hub 2-0:1.0: USB hub found [ 1411.694893][T22161] hub 2-0:1.0: 8 ports detected [ 1412.091067][T21752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.287017][T22087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.304355][T22166] lo speed is unknown, defaulting to 1000 [ 1412.310675][T22166] lo speed is unknown, defaulting to 1000 [ 1412.428857][T22087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.603077][T22087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.666902][T22166] chnl_net:caif_netlink_parms(): no params data found [ 1412.688090][T22087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.778935][T22166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.786111][T22166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.795181][T22166] bridge_slave_0: entered allmulticast mode [ 1412.802940][T22166] bridge_slave_0: entered promiscuous mode [ 1412.833331][T22166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.840483][T22166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.847937][T22166] bridge_slave_1: entered allmulticast mode [ 1412.855951][T22166] bridge_slave_1: entered promiscuous mode [ 1412.875978][T22087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1412.885165][T22087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1412.894878][T22087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1412.907342][T22166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.918842][T22166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.928058][T22087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1412.959265][T22166] team0: Port device team_slave_0 added [ 1412.970731][T22166] team0: Port device team_slave_1 added [ 1412.992476][T22070] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1413.004596][T22166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.011649][T22166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.037694][T22166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.048585][T22070] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1413.058265][T22070] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1413.068886][T22166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.075905][T22166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.102125][T22166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.117175][T22070] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1413.164216][T22087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.178339][T22087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.219756][T22166] hsr_slave_0: entered promiscuous mode [ 1413.226525][T22166] hsr_slave_1: entered promiscuous mode [ 1413.233894][T22166] debugfs: 'hsr0' already exists in 'hsr' [ 1413.235403][T22201] loop7: detected capacity change from 0 to 512 [ 1413.239692][T22166] Cannot create hsr debugfs directory [ 1413.262854][T20696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.270114][T20696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.288532][T22201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.301305][T22201] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.324210][T22201] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1413.341281][T20682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.348400][T20682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.415438][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.428593][T22166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.456978][T22070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.473662][T22166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.487282][T22070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.501534][T20673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.508702][T20673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.524604][T22166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.539501][T20682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.546620][T20682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.579926][T22087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.596364][T22070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1413.606877][T22070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1413.622435][T22166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.696889][T22166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1413.706836][T22166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1413.717814][T22166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1413.731025][T22166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1413.739796][T20838] usb usb2-port1: attempt power cycle [ 1413.753735][T22070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.818491][T22166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.835478][T22166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.851998][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.859184][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.879268][T20690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.886445][T20690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.902629][T22087] veth0_vlan: entered promiscuous mode [ 1413.915315][T22087] veth1_vlan: entered promiscuous mode [ 1413.959263][T22087] veth0_macvtap: entered promiscuous mode [ 1413.972068][T22087] veth1_macvtap: entered promiscuous mode [ 1414.009408][T22087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.028847][T22246] loop7: detected capacity change from 0 to 2048 [ 1414.040439][T22246] EXT4-fs: Ignoring removed mblk_io_submit option [ 1414.041481][T22087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1414.046906][T22246] EXT4-fs: Ignoring removed i_version option [ 1414.080376][T22246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.104965][ T29] audit: type=1400 audit(2000000559.460:58080): avc: denied { unlink } for pid=22245 comm="syz.7.17306" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1414.107590][T22166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.160501][T22070] veth0_vlan: entered promiscuous mode [ 1414.168359][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.175032][T20690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.186418][T20690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.207073][T20690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.221146][T22070] veth1_vlan: entered promiscuous mode [ 1414.236983][T20690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.265297][T22260] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1414.287971][T22070] veth0_macvtap: entered promiscuous mode [ 1414.301992][T22070] veth1_macvtap: entered promiscuous mode [ 1414.326794][T22070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.340748][T22070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1414.363551][T20675] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.399202][T20675] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.428375][T20675] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.442884][T22166] veth0_vlan: entered promiscuous mode [ 1414.472047][T20696] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.493228][T22166] veth1_vlan: entered promiscuous mode [ 1414.575158][T22276] loop8: detected capacity change from 0 to 512 [ 1414.578176][T22166] veth0_macvtap: entered promiscuous mode [ 1414.608625][T22166] veth1_macvtap: entered promiscuous mode [ 1414.620725][T22276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.626555][T22166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.643597][T22166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1414.652836][T22276] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.670922][T20673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.697838][T22276] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1414.736158][T20673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.748605][T22276] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1414.761150][T22276] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1414.761150][T22276] [ 1414.771022][T22276] EXT4-fs (loop8): Total free blocks count 0 [ 1414.777029][T22276] EXT4-fs (loop8): Free/Dirty block details [ 1414.783059][T22276] EXT4-fs (loop8): free_blocks=65280 [ 1414.785824][T20673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.788368][T22276] EXT4-fs (loop8): dirty_blocks=23 [ 1414.788388][T22276] EXT4-fs (loop8): Block reservation details [ 1414.788400][T22276] EXT4-fs (loop8): i_reserved_data_blocks=23 [ 1414.854382][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.878299][T20673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.972725][T22291] loop2: detected capacity change from 0 to 512 [ 1415.058811][T22295] loop7: detected capacity change from 0 to 2048 [ 1415.061279][T22291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.066062][T22295] EXT4-fs: Ignoring removed mblk_io_submit option [ 1415.084171][T22295] EXT4-fs: Ignoring removed i_version option [ 1415.095908][T22291] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.111320][T22295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1415.139055][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.156039][T22166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.312978][T22317] loop4: detected capacity change from 0 to 512 [ 1415.352284][T22318] tipc: Started in network mode [ 1415.357235][T22318] tipc: Node identity 963b984591dd, cluster identity 4711 [ 1415.364689][T22318] tipc: Enabled bearer , priority 0 [ 1415.404344][T22317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.417457][T22317] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.417949][T20673] tipc: Resetting bearer [ 1415.438450][T22317] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1415.454793][T22317] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1415.467437][T22317] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1415.467437][T22317] [ 1415.477139][T22317] EXT4-fs (loop4): Total free blocks count 0 [ 1415.483260][T22317] EXT4-fs (loop4): Free/Dirty block details [ 1415.489242][T22317] EXT4-fs (loop4): free_blocks=65280 [ 1415.494641][T22317] EXT4-fs (loop4): dirty_blocks=23 [ 1415.499795][T22317] EXT4-fs (loop4): Block reservation details [ 1415.505793][T22317] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 1415.512014][T22313] tipc: Resetting bearer [ 1415.530169][T22313] tipc: Disabling bearer [ 1415.637505][T20838] usb usb2-port1: unable to enumerate USB device [ 1415.753772][T22087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.795643][T22329] bridge_slave_0: left allmulticast mode [ 1415.801586][T22329] bridge_slave_0: left promiscuous mode [ 1415.807326][T22329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.820371][T22329] bridge_slave_1: left allmulticast mode [ 1415.820852][T22332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.826080][T22329] bridge_slave_1: left promiscuous mode [ 1415.840163][T22329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.853310][T22329] bond0: (slave bond_slave_0): Releasing backup interface [ 1415.861080][T22332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.875620][T22329] bond0: (slave bond_slave_1): Releasing backup interface [ 1415.902652][T22329] team0: Port device team_slave_0 removed [ 1415.923141][T22329] team0: Port device team_slave_1 removed [ 1415.941018][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.948439][T22329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.968107][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.975591][T22329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.000444][T22329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1416.137196][T22342] new mount options do not match the existing superblock, will be ignored [ 1416.231011][T22351] loop8: detected capacity change from 0 to 128 [ 1416.252327][T22351] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1416.266176][T22351] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1416.389809][T22070] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1416.433607][T22359] syz_tun: entered allmulticast mode [ 1416.475247][T22367] loop4: detected capacity change from 0 to 1024 [ 1416.491808][T22367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1416.532287][T22087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.571590][T22377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.581908][T22377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.152897][T22385] loop2: detected capacity change from 0 to 128 [ 1417.171616][T22385] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1417.202003][T22385] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1417.239283][T22166] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1417.280283][T22395] new mount options do not match the existing superblock, will be ignored [ 1417.327127][T22401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.336174][T22401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.445357][T22412] program syz.0.17361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1417.515669][T22414] loop8: detected capacity change from 0 to 2048 [ 1417.551680][T22414] GPT:first_usable_lbas don't match. [ 1417.557098][T22414] GPT:34 != 290 [ 1417.560727][T22414] GPT: Use GNU Parted to correct GPT errors. [ 1417.566950][T22414] loop8: p1 p2 p3 [ 1417.725709][T22420] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1418.018381][ T29] audit: type=1400 audit(2000000563.370:58081): avc: denied { append } for pid=22433 comm="syz.8.17370" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1418.084964][T22437] bridge_slave_0: left allmulticast mode [ 1418.090719][T22437] bridge_slave_0: left promiscuous mode [ 1418.096783][T22437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.107725][T22437] bridge_slave_1: left allmulticast mode [ 1418.109021][T22439] loop8: detected capacity change from 0 to 512 [ 1418.113491][T22437] bridge_slave_1: left promiscuous mode [ 1418.113675][T22437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.153190][T22437] bond0: (slave bond_slave_0): Releasing backup interface [ 1418.167280][T22437] bond0: (slave bond_slave_1): Releasing backup interface [ 1418.182908][T22437] team0: Port device team_slave_0 removed [ 1418.189927][T22439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.203127][T22439] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.206593][T22437] team0: Port device team_slave_1 removed [ 1418.222776][T22437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.230273][T22437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.240630][T22437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.248086][T22437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.252907][T22446] loop7: detected capacity change from 0 to 512 [ 1418.264268][T22446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1418.267621][T22437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1418.278070][T22446] EXT4-fs (loop7): Online resizing not supported with sparse_super2 [ 1418.302648][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.322209][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.365180][T22451] bridge0: port 1(syz_tun) entered disabled state [ 1418.379410][T22451] syz_tun (unregistering): left allmulticast mode [ 1418.386071][T22451] syz_tun (unregistering): left promiscuous mode [ 1418.392586][T22451] bridge0: port 1(syz_tun) entered disabled state [ 1418.433406][T22463] bond1: option all_slaves_active: invalid value (9) [ 1418.441734][T22463] bond1 (unregistering): Released all slaves [ 1418.691849][T22470] loop7: detected capacity change from 0 to 512 [ 1418.701731][T22470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1418.740904][T22470] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1418.751565][T22470] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.17384: bg 0: block 248: padding at end of block bitmap is not set [ 1418.767077][T22470] Quota error (device loop7): write_blk: dquota write failed [ 1418.774854][T22470] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1418.784910][T22470] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.17384: Failed to acquire dquot type 1 [ 1418.880333][T22473] loop2: detected capacity change from 0 to 512 [ 1418.895718][T22470] EXT4-fs (loop7): 1 truncate cleaned up [ 1418.924298][T22473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.944863][T22470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1418.960344][T22473] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.997994][T22470] EXT4-fs (loop7): shut down requested (0) [ 1419.016810][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.031772][T22166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.036104][T22481] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17388'. [ 1419.058929][T22483] new mount options do not match the existing superblock, will be ignored [ 1419.115770][T22486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1419.241142][T22503] program syz.7.17397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1419.440640][T22517] new mount options do not match the existing superblock, will be ignored [ 1419.520038][ T5499] IPVS: starting estimator thread 0... [ 1419.572850][T22534] loop2: detected capacity change from 0 to 128 [ 1419.629747][T22526] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1419.680191][T22534] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1419.697635][T22534] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1419.842825][T22543] loop7: detected capacity change from 0 to 2048 [ 1419.902331][T22543] GPT:first_usable_lbas don't match. [ 1419.907707][T22543] GPT:34 != 290 [ 1419.911213][T22543] GPT: Use GNU Parted to correct GPT errors. [ 1419.917311][T22543] loop7: p1 p2 p3 [ 1420.106949][T22548] loop7: detected capacity change from 0 to 256 [ 1420.165194][T22166] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1420.189735][T22548] FAT-fs (loop7): codepage cp852 not found [ 1420.190904][T22553] new mount options do not match the existing superblock, will be ignored [ 1420.237301][T22557] loop2: detected capacity change from 0 to 128 [ 1420.397241][T22576] loop2: detected capacity change from 0 to 2048 [ 1420.416691][T22576] EXT4-fs: Ignoring removed mblk_io_submit option [ 1420.423394][T22576] EXT4-fs: Ignoring removed i_version option [ 1420.467136][T22576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1420.469690][ T29] audit: type=1400 audit(2000000565.820:58082): avc: denied { setopt } for pid=22582 comm="syz.4.17433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1420.502453][T22589] loop8: detected capacity change from 0 to 512 [ 1420.512614][T22589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1420.526511][T22589] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1420.533082][T22593] loop4: detected capacity change from 0 to 512 [ 1420.536410][T22589] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.17434: bg 0: block 248: padding at end of block bitmap is not set [ 1420.554881][T22589] Quota error (device loop8): write_blk: dquota write failed [ 1420.562352][T22589] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1420.572486][T22589] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.17434: Failed to acquire dquot type 1 [ 1420.586085][T22589] EXT4-fs (loop8): 1 truncate cleaned up [ 1420.592512][T22166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.602127][T22589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1420.619129][T22593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.651167][T22593] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.662021][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.677622][T22603] block device autoloading is deprecated and will be removed. [ 1420.694751][T22593] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1420.709478][T22593] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1420.722112][T22593] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1420.722112][T22593] [ 1420.731835][T22593] EXT4-fs (loop4): Total free blocks count 0 [ 1420.737882][T22593] EXT4-fs (loop4): Free/Dirty block details [ 1420.743851][T22593] EXT4-fs (loop4): free_blocks=65280 [ 1420.749245][T22593] EXT4-fs (loop4): dirty_blocks=23 [ 1420.754427][T22593] EXT4-fs (loop4): Block reservation details [ 1420.760700][T22593] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 1420.800818][ T29] audit: type=1400 audit(2000000566.160:58083): avc: denied { map } for pid=22620 comm="syz.7.17447" path="socket:[207363]" dev="sockfs" ino=207363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1420.825553][T22618] loop8: detected capacity change from 0 to 512 [ 1420.846939][T22087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.860179][T22618] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.873213][T22618] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.913897][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.977074][T22638] new mount options do not match the existing superblock, will be ignored [ 1421.156449][T22649] loop4: detected capacity change from 0 to 2048 [ 1421.181862][ T29] audit: type=1400 audit(2000000566.540:58084): avc: denied { setopt } for pid=22652 comm="syz.7.17462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1421.214497][T22649] GPT:first_usable_lbas don't match. [ 1421.219916][T22649] GPT:34 != 290 [ 1421.223445][T22649] GPT: Use GNU Parted to correct GPT errors. [ 1421.229010][T22657] loop2: detected capacity change from 0 to 512 [ 1421.229735][T22649] loop4: p1 p2 p3 [ 1421.252825][T22657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.266310][T22657] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1421.299799][T22166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.498365][T22677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17473'. [ 1421.715777][T22686] loop0: detected capacity change from 0 to 2048 [ 1421.722833][T22686] EXT4-fs: Ignoring removed mblk_io_submit option [ 1421.729284][T22686] EXT4-fs: Ignoring removed i_version option [ 1421.751184][T22686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1421.765309][ T29] audit: type=1400 audit(2000000567.120:58085): avc: denied { read } for pid=22685 comm="syz.0.17477" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1421.808808][ T29] audit: type=1400 audit(2000000567.120:58086): avc: denied { open } for pid=22685 comm="syz.0.17477" path="/230/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1421.857347][T19370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.922114][T22698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17482'. [ 1421.953713][ T29] audit: type=1400 audit(2000000567.310:58087): avc: denied { shutdown } for pid=22703 comm="syz.0.17485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1421.991431][ T5499] IPVS: starting estimator thread 0... [ 1421.997076][T22706] bridge_slave_0: left allmulticast mode [ 1422.000496][T22709] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1422.002975][T22706] bridge_slave_0: left promiscuous mode [ 1422.015536][T22706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.026167][T22709] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1422.034361][T22712] loop7: detected capacity change from 0 to 1024 [ 1422.042421][T22706] bridge_slave_1: left allmulticast mode [ 1422.048166][T22706] bridge_slave_1: left promiscuous mode [ 1422.054014][T22706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.063471][T22712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.076487][T22706] bond0: (slave bond_slave_0): Releasing backup interface [ 1422.086246][T22712] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.17488: Allocating blocks 385-513 which overlap fs metadata [ 1422.100487][T22710] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1422.101315][T22706] bond0: (slave bond_slave_1): Releasing backup interface [ 1422.109611][T22711] EXT4-fs (loop7): pa ffff888105730770: logic 16, phys. 129, len 24 [ 1422.122853][T22711] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 1422.147355][T22706] team0: Port device team_slave_0 removed [ 1422.156470][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.168030][T22706] team0: Port device team_slave_1 removed [ 1422.176285][T22706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.183840][T22706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.194068][T22706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.201848][T22706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.217588][T22706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1422.241454][T22721] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.17491'. [ 1422.445277][T22752] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.17504'. [ 1422.477174][T22756] loop2: detected capacity change from 0 to 2048 [ 1422.486806][T22755] netlink: 52 bytes leftover after parsing attributes in process `syz.7.17506'. [ 1422.496042][T22755] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17506'. [ 1422.505359][T22755] netlink: 52 bytes leftover after parsing attributes in process `syz.7.17506'. [ 1422.537314][T22756] GPT:first_usable_lbas don't match. [ 1422.542815][T22756] GPT:34 != 290 [ 1422.546311][T22756] GPT: Use GNU Parted to correct GPT errors. [ 1422.552561][T22756] loop2: p1 p2 p3 [ 1422.559399][T22750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1422.732770][T22792] loop8: detected capacity change from 0 to 128 [ 1422.754585][T22792] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1422.778830][T22788] syzkaller0: entered promiscuous mode [ 1422.784483][T22788] syzkaller0: entered allmulticast mode [ 1422.790750][T22792] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.829234][T22070] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1422.905064][T22802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1423.033262][T22814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.051946][T22802] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17527'. [ 1423.069973][T22814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.083020][T22802] team0: Mode changed to "loadbalance" [ 1423.279462][T22831] tipc: Started in network mode [ 1423.284424][T22831] tipc: Node identity 06f4b75380a7, cluster identity 4711 [ 1423.291703][T22831] tipc: Enabled bearer , priority 0 [ 1423.302341][T22830] tipc: Disabling bearer [ 1423.633038][T22836] loop7: detected capacity change from 0 to 512 [ 1423.658528][T22836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.672583][T22836] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.695368][T22836] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1423.710447][T22836] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1423.724516][T22836] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1423.724516][T22836] [ 1423.734267][T22836] EXT4-fs (loop7): Total free blocks count 0 [ 1423.741851][T22836] EXT4-fs (loop7): Free/Dirty block details [ 1423.747785][T22836] EXT4-fs (loop7): free_blocks=65280 [ 1423.754600][T22836] EXT4-fs (loop7): dirty_blocks=23 [ 1423.761418][T22836] EXT4-fs (loop7): Block reservation details [ 1423.767434][T22836] EXT4-fs (loop7): i_reserved_data_blocks=23 [ 1423.792603][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.888259][T22862] loop7: detected capacity change from 0 to 512 [ 1423.902987][T22862] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.976942][T22873] loop4: detected capacity change from 0 to 512 [ 1423.996932][T22873] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.019220][T22873] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1424.035366][T22873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1424.049173][T22873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1424.049173][T22873] [ 1424.060356][T22873] EXT4-fs (loop4): Total free blocks count 0 [ 1424.066430][T22873] EXT4-fs (loop4): Free/Dirty block details [ 1424.073569][T22873] EXT4-fs (loop4): free_blocks=65280 [ 1424.078904][T22873] EXT4-fs (loop4): dirty_blocks=23 [ 1424.084093][T22873] EXT4-fs (loop4): Block reservation details [ 1424.091386][T22873] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 1424.175491][T22899] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.17565'. [ 1424.387027][T22924] loop8: detected capacity change from 0 to 256 [ 1424.534654][T22938] lo: entered allmulticast mode [ 1425.257405][T22972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1425.717451][T20690] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.738594][T20690] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.769141][T20690] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.779807][T22989] tipc: Enabled bearer , priority 0 [ 1425.786528][T20690] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.799487][T22988] tipc: Disabling bearer [ 1425.837442][T22993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.849238][T22993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.888391][T22999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17607'. [ 1426.053723][T23016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17614'. [ 1426.066956][T23018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.090406][T23018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.109253][T23022] program syz.2.17617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1426.216834][ T29] audit: type=1326 audit(2000000571.570:58088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.241044][ T29] audit: type=1326 audit(2000000571.570:58089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.264920][ T29] audit: type=1326 audit(2000000571.570:58090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.288915][ T29] audit: type=1326 audit(2000000571.570:58091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.313222][ T29] audit: type=1326 audit(2000000571.570:58092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.330857][T23040] loop0: detected capacity change from 0 to 512 [ 1426.337268][ T29] audit: type=1326 audit(2000000571.570:58093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.366979][ T29] audit: type=1326 audit(2000000571.570:58094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.367174][T23040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1426.391607][ T29] audit: type=1326 audit(2000000571.570:58095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.391648][ T29] audit: type=1326 audit(2000000571.570:58096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.391685][ T29] audit: type=1326 audit(2000000571.570:58097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.0.17623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd096d7efc9 code=0x7ffc0000 [ 1426.477049][T23040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1426.483922][ C1] sd 0:0:1:0: [sda] tag#622 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1426.494234][ C1] sd 0:0:1:0: [sda] tag#622 CDB: Write(6) 0a 00 00 00 00 00 [ 1426.501991][T23040] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.17626: bg 0: block 248: padding at end of block bitmap is not set [ 1426.518322][T23040] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.17626: Failed to acquire dquot type 1 [ 1426.531121][T23040] EXT4-fs (loop0): 1 truncate cleaned up [ 1426.563014][T23050] loop2: detected capacity change from 0 to 512 [ 1426.584109][T23050] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.602855][T23058] loop0: detected capacity change from 0 to 1024 [ 1426.644673][T23065] netlink: 'syz.0.17634': attribute type 4 has an invalid length. [ 1426.652624][T23065] netlink: 17 bytes leftover after parsing attributes in process `syz.0.17634'. [ 1426.662725][T20838] usb usb2-port1: attempt power cycle [ 1426.707437][T23070] loop4: detected capacity change from 0 to 128 [ 1426.719194][T23070] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.773756][T23077] netlink: 168 bytes leftover after parsing attributes in process `syz.4.17639'. [ 1426.787645][T23080] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17640'. [ 1426.843558][T23089] loop0: detected capacity change from 0 to 1024 [ 1426.850468][T23085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1426.885135][T23094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.894713][T23094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.026892][T23103] syzkaller1: entered promiscuous mode [ 1427.033608][T23103] syzkaller1: entered allmulticast mode [ 1427.252844][T23111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17654'. [ 1427.293935][T23115] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.17656'. [ 1427.322432][T23117] loop0: detected capacity change from 0 to 1024 [ 1427.363271][T23121] loop0: detected capacity change from 0 to 256 [ 1427.425771][T23123] loop8: detected capacity change from 0 to 1024 [ 1427.446026][T23123] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1427.462951][T23123] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1427.476885][T23123] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1427.476885][T23123] [ 1427.487943][T23123] EXT4-fs (loop8): Total free blocks count 0 [ 1427.495386][T23123] EXT4-fs (loop8): Free/Dirty block details [ 1427.502748][T23123] EXT4-fs (loop8): free_blocks=68451041280 [ 1427.508615][T23123] EXT4-fs (loop8): dirty_blocks=80 [ 1427.515310][T23123] EXT4-fs (loop8): Block reservation details [ 1427.522907][T23123] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 1427.536977][T23130] syzkaller1: entered promiscuous mode [ 1427.544040][T23130] syzkaller1: entered allmulticast mode [ 1427.557042][T20696] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1427.569533][T20696] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1427.569533][T20696] [ 1427.593608][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17661'. [ 1427.702645][T23142] loop4: detected capacity change from 0 to 128 [ 1427.741326][T23142] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1427.787627][ T5510] IPVS: starting estimator thread 0... [ 1428.061576][T23167] syzkaller1: entered promiscuous mode [ 1428.067123][T23167] syzkaller1: entered allmulticast mode [ 1428.163184][T23173] loop4: detected capacity change from 0 to 128 [ 1428.173306][T23173] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1428.267726][T23178] loop4: detected capacity change from 0 to 256 [ 1428.300875][T23183] loop0: detected capacity change from 0 to 1024 [ 1428.320969][T23153] IPVS: using max 2160 ests per chain, 108000 per kthread [ 1428.534972][T20838] usb usb2-port1: unable to enumerate USB device [ 1428.560135][T22961] hub 2-0:1.0: USB hub found [ 1428.564884][T22961] hub 2-0:1.0: 8 ports detected [ 1428.604966][T23210] program syz.8.17696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1428.710500][T20696] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.733404][T20696] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.749132][T20696] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.760960][T23219] loop0: detected capacity change from 0 to 512 [ 1428.768082][T20690] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.772873][T23219] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1428.820398][ C1] sd 0:0:1:0: [sda] tag#613 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1428.830760][ C1] sd 0:0:1:0: [sda] tag#613 CDB: Write(6) 0a 00 00 00 00 00 [ 1428.961593][T23235] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17706'. [ 1429.075130][T23248] program syz.2.17712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1429.087469][T23246] tipc: Started in network mode [ 1429.094010][T23246] tipc: Node identity cee56e8eac08, cluster identity 4711 [ 1429.102640][T23246] tipc: Enabled bearer , priority 0 [ 1429.111996][T23245] tipc: Disabling bearer [ 1429.219877][ C1] sd 0:0:1:0: [sda] tag#621 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1429.230255][ C1] sd 0:0:1:0: [sda] tag#621 CDB: Write(6) 0a 00 00 00 00 00 [ 1429.260693][T23258] netlink: 168 bytes leftover after parsing attributes in process `syz.2.17716'. [ 1429.344386][T23264] loop2: detected capacity change from 0 to 512 [ 1429.376462][T23268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17721'. [ 1429.395170][T23264] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1429.545812][T23286] program syz.4.17727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1429.750195][ C1] sd 0:0:1:0: [sda] tag#582 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1429.760536][ C1] sd 0:0:1:0: [sda] tag#582 CDB: Write(6) 0a 00 00 00 00 00 [ 1429.809784][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17731'. [ 1429.854931][T23301] syzkaller1: entered promiscuous mode [ 1429.862042][T23301] syzkaller1: entered allmulticast mode [ 1429.962035][T23323] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.17742'. [ 1430.302193][T23351] random: crng reseeded on system resumption [ 1430.311264][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17755'. [ 1430.511257][ T5494] usb usb2-port1: attempt power cycle [ 1430.533199][T23375] syz_tun: entered allmulticast mode [ 1430.715581][T23399] tipc: Enabled bearer , priority 0 [ 1430.723924][T23398] tipc: Disabling bearer [ 1430.805561][T23407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.814437][T23407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.937801][T23423] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17788'. [ 1430.962191][T23425] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.17789'. [ 1431.090432][T23432] tipc: Started in network mode [ 1431.095375][T23432] tipc: Node identity c6368f0224b9, cluster identity 4711 [ 1431.102828][T23432] tipc: Enabled bearer , priority 0 [ 1431.114843][T23428] tipc: Resetting bearer [ 1431.129463][T23428] tipc: Disabling bearer [ 1431.245007][T23449] loop8: detected capacity change from 0 to 512 [ 1431.258059][T23449] EXT4-fs (loop8): 1 orphan inode deleted [ 1431.305744][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.319543][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.372200][T23470] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.17810'. [ 1431.418029][T23480] loop0: detected capacity change from 0 to 512 [ 1431.428306][T23480] EXT4-fs (loop0): 1 orphan inode deleted [ 1431.555969][T23498] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17822'. [ 1431.697284][T23510] loop7: detected capacity change from 0 to 512 [ 1431.700869][T23513] loop8: detected capacity change from 0 to 512 [ 1431.710897][T23513] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1431.723011][T23513] EXT4-fs (loop8): 1 truncate cleaned up [ 1431.729988][T23510] EXT4-fs (loop7): 1 orphan inode deleted [ 1431.794618][T19280] EXT4-fs unmount: 34 callbacks suppressed [ 1431.794711][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.862775][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.195085][T23531] loop8: detected capacity change from 0 to 1024 [ 1432.212144][T23531] EXT4-fs: inline encryption not supported [ 1432.236634][T23531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1432.256527][T23531] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1432.271970][T23531] EXT4-fs (loop8): Remounting filesystem read-only [ 1432.314048][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.416252][T23558] netlink: 64 bytes leftover after parsing attributes in process `syz.7.17845'. [ 1432.491526][T23558] team0: Mode "loadbalanc" not found [ 1432.532396][T23577] loop7: detected capacity change from 0 to 256 [ 1432.569846][ T5494] usb usb2-port1: unable to enumerate USB device [ 1432.623539][T20673] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.639849][T20673] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.680124][T20673] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.702275][T23587] loop2: detected capacity change from 0 to 1024 [ 1432.711833][T23588] tipc: Enabled bearer , priority 0 [ 1432.720362][T20673] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.729356][T23590] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1432.828399][T23583] tipc: Disabling bearer [ 1432.838185][T23587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.851647][T23601] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1432.864164][T23587] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1432.880146][T23587] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1432.892628][T23587] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1432.892628][T23587] [ 1432.902486][T23587] EXT4-fs (loop2): Total free blocks count 0 [ 1432.908492][T23587] EXT4-fs (loop2): Free/Dirty block details [ 1432.914493][T23587] EXT4-fs (loop2): free_blocks=68451041280 [ 1432.920586][T23587] EXT4-fs (loop2): dirty_blocks=80 [ 1432.925925][T23587] EXT4-fs (loop2): Block reservation details [ 1432.932102][T23587] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 1433.257768][T23608] loop7: detected capacity change from 0 to 512 [ 1433.275825][T23608] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1433.288724][T23613] hub 2-0:1.0: USB hub found [ 1433.293517][T23613] hub 2-0:1.0: 8 ports detected [ 1433.301958][T20673] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1433.316022][T23608] EXT4-fs (loop7): 1 truncate cleaned up [ 1433.322186][T23608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.352170][T19280] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.474713][T23632] loop8: detected capacity change from 0 to 512 [ 1433.477717][T23634] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1433.484728][T23632] EXT4-fs (loop8): 1 orphan inode deleted [ 1433.495469][T23632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.520315][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.691687][T23651] loop8: detected capacity change from 0 to 512 [ 1433.699004][T23651] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1433.712061][T23651] EXT4-fs (loop8): 1 truncate cleaned up [ 1433.718150][T23651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.748618][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.818407][T23668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.828320][T23668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.384759][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1434.384794][ T29] audit: type=1400 audit(2000000579.740:58132): avc: denied { getopt } for pid=23752 comm="syz.2.17888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1434.418152][T23753] netlink: 'syz.2.17888': attribute type 4 has an invalid length. [ 1434.715199][T23778] loop4: detected capacity change from 0 to 512 [ 1434.750159][T23781] loop2: detected capacity change from 0 to 256 [ 1434.794237][T23778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1434.821237][T23783] loop8: detected capacity change from 0 to 512 [ 1434.833512][T23783] EXT4-fs (loop8): 1 orphan inode deleted [ 1434.842020][T23778] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1434.850041][T23778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1434.859390][T23783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.872110][T23778] System zones: 0-1, 15-15, 18-18, 34-34 [ 1434.878311][T23778] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1434.896682][T23778] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1434.906516][T23778] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1434.921145][T23778] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1434.928245][T23778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.17890: bg 0: block 40: padding at end of block bitmap is not set [ 1434.939947][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.942911][T23778] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1434.961354][T23778] EXT4-fs (loop4): 1 truncate cleaned up [ 1434.968314][T23778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1435.003768][T23778] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1435.012477][T23778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1435.032982][T22087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.128951][T23807] loop8: detected capacity change from 0 to 512 [ 1435.136314][T23807] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1435.148571][T23807] EXT4-fs (loop8): 1 truncate cleaned up [ 1435.160032][T23807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.172573][ T5501] usb usb2-port1: attempt power cycle [ 1435.209227][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.221063][T26298] IPVS: starting estimator thread 0... [ 1435.221802][ T29] audit: type=1400 audit(2000000580.580:58133): avc: denied { read } for pid=23814 comm="syz.7.17903" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1435.251451][ T29] audit: type=1400 audit(2000000580.580:58134): avc: denied { open } for pid=23814 comm="syz.7.17903" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1435.276886][ T29] audit: type=1400 audit(2000000580.580:58135): avc: denied { ioctl } for pid=23814 comm="syz.7.17903" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1435.308505][T23819] __nla_validate_parse: 3 callbacks suppressed [ 1435.308544][T23819] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17906'. [ 1435.329725][T23817] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1435.349605][T23825] netlink: 'syz.8.17909': attribute type 4 has an invalid length. [ 1435.364774][T23827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1435.371379][T23827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1435.372857][T23831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.379015][T23827] vhci_hcd vhci_hcd.0: Device attached [ 1435.387392][ T29] audit: type=1400 audit(2000000580.730:58136): avc: denied { ioctl } for pid=23828 comm="syz.7.17910" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1435.426653][T23831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.440553][T23833] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 1435.447175][T23833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1435.454704][T23833] vhci_hcd vhci_hcd.0: Device attached [ 1435.455004][T23835] loop8: detected capacity change from 0 to 512 [ 1435.472123][T23835] EXT4-fs (loop8): 1 orphan inode deleted [ 1435.478502][T23835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.500764][T23827] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 1435.507321][T23827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1435.514991][T23827] vhci_hcd vhci_hcd.0: Device attached [ 1435.524428][T23827] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 1435.525055][T22070] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.531084][T23827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1435.531161][T23827] vhci_hcd vhci_hcd.0: Device attached [ 1435.533270][T23827] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 1435.559677][T23827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1435.567320][T23827] vhci_hcd vhci_hcd.0: Device attached [ 1435.577064][T23827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1435.585884][T23827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1435.596212][T23827] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 1435.602918][T23827] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1435.610623][T23827] vhci_hcd vhci_hcd.0: Device attached [ 1435.616962][T23850] vhci_hcd: connection closed [ 1435.617328][T23829] vhci_hcd: connection closed [ 1435.622515][ T3713] vhci_hcd: stop threads [ 1435.631503][ T3713] vhci_hcd: release socket [ 1435.635988][ T3713] vhci_hcd: disconnect device [ 1435.640912][T23844] vhci_hcd: connection closed [ 1435.641340][ T3713] vhci_hcd: stop threads [ 1435.650774][ T3713] vhci_hcd: release socket [ 1435.655415][ T3713] vhci_hcd: disconnect device [ 1435.662210][ T3713] vhci_hcd: stop threads [ 1435.666488][ T3713] vhci_hcd: release socket [ 1435.670934][ T3713] vhci_hcd: disconnect device [ 1435.676773][T23846] vhci_hcd: connection closed [ 1435.676954][T23839] vhci_hcd: connection closed [ 1435.681980][ T3713] vhci_hcd: stop threads [ 1435.690982][ T3713] vhci_hcd: release socket [ 1435.691764][T23834] vhci_hcd: connection closed [ 1435.695415][ T3713] vhci_hcd: disconnect device [ 1435.695515][T23834] ================================================================== [ 1435.700877][ T3713] vhci_hcd: stop threads [ 1435.704829][T23834] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1435.712920][ T3713] vhci_hcd: release socket [ 1435.717121][T23834] [ 1435.717131][T23834] write to 0xffffffff868a8198 of 88 bytes by task 3713 on cpu 0: [ 1435.724219][ T3713] vhci_hcd: disconnect device [ 1435.728586][T23834] prb_reserve+0x695/0xaf0 [ 1435.728612][T23834] vprintk_store+0x56d/0x860 [ 1435.728631][T23834] vprintk_emit+0x10d/0x580 [ 1435.756845][T23834] vprintk_default+0x26/0x30 [ 1435.761461][T23834] vprintk+0x1d/0x30 [ 1435.765451][T23834] _printk+0x79/0xa0 [ 1435.769373][T23834] vhci_shutdown_connection+0x1d3/0x1f0 [ 1435.774932][T23834] event_handler+0x18a/0x340 [ 1435.779632][T23834] process_scheduled_works+0x4ce/0x9d0 [ 1435.785178][T23834] worker_thread+0x582/0x770 [ 1435.789771][T23834] kthread+0x489/0x510 [ 1435.793846][T23834] ret_from_fork+0x122/0x1b0 [ 1435.798445][T23834] ret_from_fork_asm+0x1a/0x30 [ 1435.803218][T23834] [ 1435.805543][T23834] read to 0xffffffff868a8198 of 8 bytes by task 23834 on cpu 1: [ 1435.813176][T23834] _prb_read_valid+0x383/0x920 [ 1435.817947][T23834] prb_read_valid+0x3c/0x60 [ 1435.822451][T23834] console_unlock+0x164/0x2e0 [ 1435.827155][T23834] vprintk_emit+0x3b5/0x580 [ 1435.831666][T23834] vprintk_default+0x26/0x30 [ 1435.836269][T23834] vprintk+0x1d/0x30 [ 1435.840184][T23834] _printk+0x79/0xa0 [ 1435.844099][T23834] vhci_rx_loop+0x4ab/0x5f0 [ 1435.848621][T23834] kthread+0x489/0x510 [ 1435.852707][T23834] ret_from_fork+0x122/0x1b0 [ 1435.857304][T23834] ret_from_fork_asm+0x1a/0x30 [ 1435.862075][T23834] [ 1435.864397][T23834] value changed: 0x00000000000022e7 -> 0x00000000000042e7 [ 1435.871502][T23834] [ 1435.873826][T23834] Reported by Kernel Concurrency Sanitizer on: [ 1435.879983][T23834] CPU: 1 UID: 0 PID: 23834 Comm: vhci_rx Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1435.891101][T23834] Tainted: [W]=WARN [ 1435.894912][T23834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1435.904983][T23834] ================================================================== [ 1435.920724][ T3713] vhci_hcd: stop threads [ 1435.925045][ T3713] vhci_hcd: release socket [ 1435.929480][ T3713] vhci_hcd: disconnect device [ 1437.089807][ T5501] usb usb2-port1: unable to enumerate USB device