last executing test programs: 3m15.005395708s ago: executing program 32 (id=560): r0 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 1m50.024521043s ago: executing program 33 (id=5139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getegid() semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) removexattr(0x0, 0x0) 1m40.590942962s ago: executing program 34 (id=4922): connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f00000000c0)={[0x1]}) 1m14.398115524s ago: executing program 35 (id=5916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x1800, 0x200, 0x0) 1m4.963072132s ago: executing program 36 (id=6174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001b80)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 46.849916391s ago: executing program 4 (id=6745): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r0, 0x8182) mremap(&(0x7f0000003000/0x14000)=nil, 0x14000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 46.646557537s ago: executing program 4 (id=6758): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad132bc192, 0x4002011, r2, 0x0) 46.60439673s ago: executing program 4 (id=6770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close(r1) 46.552801924s ago: executing program 4 (id=6764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x40000) 46.529470096s ago: executing program 4 (id=6766): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 46.397491146s ago: executing program 4 (id=6769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 40.172827113s ago: executing program 37 (id=6953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000580)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000280)="c06a9c0a049a01b8dc994875572edb297601a2c4317d1781b797eb6227f58a339a7082b6e6891fac77ae52d526811e0d1096127ff579530ea452", 0x3a}], 0x2) 31.341964815s ago: executing program 38 (id=6769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 21.778429744s ago: executing program 6 (id=7462): socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000001a00), 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") mknod$loop(0x0, 0x800, 0x1) 21.70294287s ago: executing program 6 (id=7466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) socket$inet6(0xa, 0x800000000000002, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21.587100619s ago: executing program 6 (id=7470): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 21.586319129s ago: executing program 6 (id=7473): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 21.583546219s ago: executing program 6 (id=7475): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000"], 0x2dc}}, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 20.854984176s ago: executing program 6 (id=7507): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="4cf2a36adc4bc2ebb4b811ea6fc55952"}}) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x20000, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0xffa1, 0x2007bb}) 20.80645426s ago: executing program 39 (id=7507): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="4cf2a36adc4bc2ebb4b811ea6fc55952"}}) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x20000, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0xffa1, 0x2007bb}) 8.893673153s ago: executing program 9 (id=7919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 8.656812311s ago: executing program 9 (id=7922): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000000009"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x2000, 0x800) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 8.616946925s ago: executing program 9 (id=7923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x12, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}}, 0x0) 8.616810995s ago: executing program 5 (id=7924): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 8.508535583s ago: executing program 5 (id=7927): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(0x3) 8.505666923s ago: executing program 9 (id=7928): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 8.475287606s ago: executing program 9 (id=7932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {0xcd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x3, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 8.440789769s ago: executing program 5 (id=7935): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 8.220036426s ago: executing program 9 (id=7938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0c00070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8.191479378s ago: executing program 40 (id=7938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0c00070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8.179871849s ago: executing program 8 (id=7941): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x12, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}}, 0x0) 8.155619151s ago: executing program 5 (id=7942): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 8.120302294s ago: executing program 5 (id=7944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 8.105997665s ago: executing program 8 (id=7945): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000000c0)=0x20006, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 8.046894449s ago: executing program 8 (id=7946): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4000000b, 0x0) 7.862339314s ago: executing program 5 (id=7949): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000000009"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x2000, 0x800) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 7.811341738s ago: executing program 41 (id=7949): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000000009"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x2000, 0x800) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 7.725954454s ago: executing program 8 (id=7954): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 7.66179189s ago: executing program 8 (id=7958): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec25, 0x80, 0x5, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001800)=""/201, 0xc9}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 7.295585418s ago: executing program 8 (id=7959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x10800, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.255129722s ago: executing program 42 (id=7959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x10800, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.209064222s ago: executing program 2 (id=7970): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 5.179706644s ago: executing program 2 (id=7973): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4000005) 5.150289906s ago: executing program 2 (id=7977): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.009655117s ago: executing program 2 (id=7980): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4.926359464s ago: executing program 2 (id=7982): mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4.907405876s ago: executing program 2 (id=7983): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1400000000000000290000000b00000035d6000000000000180000000000000029000000040000002f000000000000009a9835e3a23bc9f1"], 0x30}}], 0x1, 0x810) 1.477836244s ago: executing program 0 (id=8082): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) acct(&(0x7f0000000040)='./file0\x00') 1.424510088s ago: executing program 0 (id=8086): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x445bd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 1.353960393s ago: executing program 0 (id=8090): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x30000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x66020000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 1.102675244s ago: executing program 7 (id=8096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setrlimit(0x7, &(0x7f0000000400)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8000100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x986}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.102198473s ago: executing program 0 (id=8097): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) 1.039209568s ago: executing program 0 (id=8098): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x1, 0x2d0}, &(0x7f0000000600), &(0x7f0000000080)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x37, 0x3700, 0x0, 0x0, 0x0}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.038887278s ago: executing program 7 (id=8099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 949.297635ms ago: executing program 7 (id=8102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 877.933791ms ago: executing program 1 (id=8107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r0}, 0x38) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x8040) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000001580)=""/4096) 790.981308ms ago: executing program 7 (id=8108): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r0, &(0x7f0000000400), 0x0}, 0x20) 761.51107ms ago: executing program 1 (id=8109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="35002dbd7000fcdbdf250f000000300002800800010005000000080001000d00000008000100000000000400040008000200ff000000040004000400040044000780080001"], 0x264}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040080) 676.669067ms ago: executing program 1 (id=8111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x17, 0x4009, 0x0, 0x1, 0x0}) 676.044827ms ago: executing program 7 (id=8113): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r1, r1, 0x0, 0x800000009) 639.55197ms ago: executing program 1 (id=8114): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0x0) 639.05153ms ago: executing program 0 (id=8116): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 587.294474ms ago: executing program 1 (id=8117): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 543.850227ms ago: executing program 3 (id=8118): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 518.882449ms ago: executing program 1 (id=8119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 443.213745ms ago: executing program 3 (id=8120): io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x36, &(0x7f0000000040)) io_destroy(r0) io_cancel(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0) 275.661578ms ago: executing program 3 (id=8121): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 250.32225ms ago: executing program 7 (id=8122): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 103.461412ms ago: executing program 3 (id=8123): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) sendmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0], 0xa0, 0x80}}], 0x1, 0x4008010) 46.045966ms ago: executing program 3 (id=8124): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x27, 0x1, @thr={0x0, 0x0}}, 0x0) ptrace(0x10, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40c4) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 0s ago: executing program 3 (id=8125): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) creat(&(0x7f0000000000)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.7.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd563ebf749 code=0x7ffc0000 [ 202.992507][T18962] loop4: detected capacity change from 0 to 2048 [ 203.060972][T18962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.161645][ T3332] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 203.180414][ T3332] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 203.215056][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.225789][T14583] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.262184][T18994] loop7: detected capacity change from 0 to 2048 [ 203.332836][T18994] Alternate GPT is invalid, using primary GPT. [ 203.339072][T18994] loop7: p2 p3 p7 [ 203.388127][T19010] loop4: detected capacity change from 0 to 512 [ 203.394640][T19012] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6678'. [ 203.409457][T19010] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 203.415171][T19012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6678'. [ 203.426762][T19010] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6677: invalid indirect mapped block 2683928664 (level 1) [ 203.441121][T19010] EXT4-fs (loop4): Remounting filesystem read-only [ 203.447796][T19012] veth1_macvtap (unregistering): left allmulticast mode [ 203.447777][T19010] EXT4-fs (loop4): 1 truncate cleaned up [ 203.461751][T19010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.495523][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.558423][T14535] Bluetooth: hci1: Frame reassembly failed (-84) [ 204.100130][T19035] loop6: detected capacity change from 0 to 512 [ 204.117955][T19035] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 204.139560][T19035] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6697: bg 0: block 104: invalid block bitmap [ 204.165316][T19035] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 204.175160][T19035] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6697: invalid indirect mapped block 1 (level 1) [ 204.206825][T19035] EXT4-fs (loop6): 1 truncate cleaned up [ 204.215963][T19035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.258413][T15419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.308289][T19049] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6689'. [ 204.338794][T19053] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6695'. [ 204.360797][T19055] loop6: detected capacity change from 0 to 512 [ 204.363632][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6695'. [ 204.368524][T19055] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 204.384783][T19055] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6694: invalid indirect mapped block 2683928664 (level 1) [ 204.400037][T19055] EXT4-fs (loop6): Remounting filesystem read-only [ 204.406715][T19055] EXT4-fs (loop6): 1 truncate cleaned up [ 204.412926][T19055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.441323][T15419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.770879][T19094] loop6: detected capacity change from 0 to 512 [ 204.781354][T19094] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.6708: inode has both inline data and extents flags [ 204.795154][T19094] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6708: couldn't read orphan inode 15 (err -117) [ 204.807926][T19094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.828157][T15419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.239473][ T4033] Bluetooth: hci0: command 0x1003 tx timeout [ 205.241391][ T4252] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.559250][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.559290][ T4252] Bluetooth: hci1: command 0x1003 tx timeout [ 206.088686][T19100] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6711'. [ 206.102567][T19104] netlink: 212892 bytes leftover after parsing attributes in process `syz.6.6713'. [ 206.114575][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6711'. [ 206.174361][T19109] loop4: detected capacity change from 0 to 512 [ 206.186197][T19109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.6717: iget: bad extra_isize 90 (inode size 256) [ 206.200130][T19109] EXT4-fs (loop4): Remounting filesystem read-only [ 206.206779][T19109] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 206.215924][T18990] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 206.216075][T19109] EXT4-fs (loop4): 1 orphan inode deleted [ 206.228103][T19109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.268524][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.301967][T19118] loop8: detected capacity change from 0 to 512 [ 206.308642][T19118] ext4: Bad value for 'max_dir_size_kb' [ 206.317593][T19119] netlink: 'syz.9.6722': attribute type 2 has an invalid length. [ 206.382348][ T1087] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.432169][T19137] loop4: detected capacity change from 0 to 512 [ 206.462846][T19137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.505270][T19137] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.6728: lblock 23 mapped to illegal pblock 18 (length 1) [ 206.548237][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.591299][T19147] netlink: 'syz.4.6732': attribute type 10 has an invalid length. [ 206.599238][T19147] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6732'. [ 206.612765][T19147] ipvlan2: entered promiscuous mode [ 206.618393][T19147] bridge0: port 4(ipvlan2) entered blocking state [ 206.625255][T19147] bridge0: port 4(ipvlan2) entered disabled state [ 206.631891][T19147] ipvlan2: entered allmulticast mode [ 206.637186][T19147] bridge0: entered allmulticast mode [ 206.643106][T19147] ipvlan2: left allmulticast mode [ 206.648137][T19147] bridge0: left allmulticast mode [ 208.439262][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.970020][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 208.970038][ T29] audit: type=1400 audit(208.940:10790): avc: denied { name_connect } for pid=19148 comm="syz.7.6734" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 209.005850][T19154] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6733'. [ 209.018918][T19158] 9pnet_fd: p9_fd_create_unix (19158): problem connecting socket: ./file0: -2 [ 209.029894][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6733'. [ 209.058693][T19162] loop4: detected capacity change from 0 to 512 [ 209.082101][ T29] audit: type=1400 audit(209.060:10791): avc: denied { create } for pid=19164 comm="syz.8.6741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.101690][T19162] ext4: Bad value for 'max_dir_size_kb' [ 209.115833][T19163] netlink: 'syz.7.6738': attribute type 2 has an invalid length. [ 209.164887][ T29] audit: type=1400 audit(209.140:10792): avc: denied { read write } for pid=19171 comm="syz.8.6750" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 209.224235][ T29] audit: type=1400 audit(209.140:10793): avc: denied { open } for pid=19171 comm="syz.8.6750" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 209.247106][ T29] audit: type=1400 audit(209.190:10794): avc: denied { ioctl } for pid=19171 comm="syz.8.6750" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 209.298346][T19183] netlink: 'syz.9.6752': attribute type 83 has an invalid length. [ 209.352587][T19190] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 209.406834][ T29] audit: type=1400 audit(209.380:10795): avc: denied { create } for pid=19198 comm="syz.4.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.469103][T19206] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6763'. [ 209.472935][ T29] audit: type=1400 audit(209.410:10796): avc: denied { bind } for pid=19198 comm="syz.4.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.497038][ T29] audit: type=1400 audit(209.410:10797): avc: denied { module_request } for pid=19205 comm="syz.6.6763" kmod="netdev-veth1_macvtap" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.519131][ T29] audit: type=1400 audit(209.430:10798): avc: denied { sys_module } for pid=19205 comm="syz.6.6763" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 209.519273][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6763'. [ 209.563396][ T29] audit: type=1400 audit(209.530:10799): avc: denied { mounton } for pid=19215 comm="syz.4.6766" path="/1426/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 209.651197][T19229] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.506071][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6783'. [ 210.517605][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6783'. [ 210.587416][T19265] loop8: detected capacity change from 0 to 128 [ 210.645483][T19268] rdma_op ffff88811c56c980 conn xmit_rdma 0000000000000000 [ 210.910305][T19287] loop8: detected capacity change from 0 to 2048 [ 210.945092][T19287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.040325][T17247] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 211.086245][T17247] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 211.132159][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.168665][T19301] loop7: detected capacity change from 0 to 512 [ 211.202556][T19301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.273211][T16263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.620091][T19335] loop8: detected capacity change from 0 to 1024 [ 211.629570][T19335] EXT4-fs: Ignoring removed nobh option [ 211.635154][T19335] EXT4-fs: Ignoring removed bh option [ 211.640640][T19335] EXT4-fs: Ignoring removed orlov option [ 211.681961][T19342] loop7: detected capacity change from 0 to 764 [ 211.690075][T19335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.714590][T19346] loop9: detected capacity change from 0 to 512 [ 211.741181][T19346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.797587][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.823451][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.967175][T19371] loop7: detected capacity change from 0 to 2048 [ 211.981561][T19371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.034191][T16263] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 212.073022][T16263] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 212.111107][T16263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.156237][T19384] loop7: detected capacity change from 0 to 1024 [ 212.171833][T19384] EXT4-fs: Ignoring removed nobh option [ 212.177456][T19384] EXT4-fs: Ignoring removed bh option [ 212.182860][T19384] EXT4-fs: Ignoring removed orlov option [ 212.216846][T19384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.262371][T16263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.796137][T19416] loop8: detected capacity change from 0 to 1024 [ 212.825367][T19416] EXT4-fs: inline encryption not supported [ 212.832526][T19416] EXT4-fs: Ignoring removed nobh option [ 212.838186][T19416] EXT4-fs: Ignoring removed bh option [ 212.853538][T19416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.866603][T19426] EXT4-fs: Ignoring removed nobh option [ 212.872241][T19426] EXT4-fs: Ignoring removed bh option [ 212.877704][T19426] EXT4-fs: Ignoring removed orlov option [ 212.900321][T19426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.916159][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.942799][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.036541][T19450] __nla_validate_parse: 4 callbacks suppressed [ 213.036617][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6862'. [ 213.043585][T19452] gre0: entered promiscuous mode [ 213.056718][T19452] gre0: entered allmulticast mode [ 213.084604][T19450] IPVS: Error connecting to the multicast addr [ 213.225843][T19475] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6882'. [ 213.248458][T19475] 0ªX¹¦À: renamed from caif0 [ 213.254867][T19475] 0ªX¹¦À: entered allmulticast mode [ 213.260242][T19475] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 213.299272][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6875'. [ 213.319168][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6875'. [ 213.342838][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6875'. [ 213.361469][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6875'. [ 213.531064][T19506] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6888'. [ 213.551429][T19506] 0ªX¹¦À: renamed from caif0 [ 213.567409][T19506] 0ªX¹¦À: entered allmulticast mode [ 213.572703][T19506] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 213.717685][T19518] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6902'. [ 213.742348][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6892'. [ 213.752229][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6892'. [ 213.767853][T19518] 0ªX¹¦À: renamed from caif0 [ 213.784674][T19518] 0ªX¹¦À: entered allmulticast mode [ 213.789946][T19518] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 213.981183][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 213.981198][ T29] audit: type=1326 audit(213.960:10906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 214.049407][ T29] audit: type=1326 audit(213.960:10907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 214.072558][ T29] audit: type=1326 audit(213.960:10908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 214.095562][ T29] audit: type=1326 audit(213.960:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 214.118568][ T29] audit: type=1326 audit(213.960:10910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 214.229425][ T29] audit: type=1400 audit(214.210:10911): avc: denied { create } for pid=19552 comm="syz.8.6909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.267890][ T29] audit: type=1400 audit(214.230:10912): avc: denied { write } for pid=19552 comm="syz.8.6909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.331374][T19559] set_capacity_and_notify: 3 callbacks suppressed [ 214.331391][T19559] loop6: detected capacity change from 0 to 164 [ 214.393702][ T29] audit: type=1400 audit(214.370:10913): avc: denied { ioctl } for pid=19564 comm="syz.8.6916" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.574169][ T29] audit: type=1400 audit(214.550:10914): avc: denied { name_bind } for pid=19577 comm="syz.6.6922" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 214.650498][ T29] audit: type=1400 audit(214.630:10915): avc: denied { read write } for pid=19584 comm="syz.6.6924" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.845690][T19592] loop8: detected capacity change from 0 to 1024 [ 214.859732][T19592] EXT4-fs: Ignoring removed bh option [ 214.876916][T19592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.937979][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.372579][T19634] loop7: detected capacity change from 0 to 2048 [ 215.408320][T19634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.479578][T19634] loop7: detected capacity change from 2048 to 64 [ 215.554172][T16374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.589091][T19636] kmmpd-loop7: attempt to access beyond end of device [ 215.589091][T19636] loop7: rw=8402945, sector=256, nr_sectors = 4 limit=64 [ 215.602817][T19636] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 215.726510][T19648] loop9: detected capacity change from 0 to 1024 [ 215.740169][T19648] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.764897][T19648] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 215.785840][T14579] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.809385][T19648] EXT4-fs (loop9): orphan cleanup on readonly fs [ 215.822140][T19648] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.6952: Freeing blocks not in datazone - block = 0, count = 4096 [ 215.892818][T14579] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.920573][T19648] EXT4-fs (loop9): 1 orphan inode deleted [ 215.942871][T19648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.979148][T14579] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.016314][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.074214][T14579] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.171608][T19667] x_tables: duplicate entry at hook 1 [ 216.188906][T14579] bridge_slave_1: left allmulticast mode [ 216.194632][T14579] bridge_slave_1: left promiscuous mode [ 216.200331][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.229938][T14579] bridge_slave_0: left allmulticast mode [ 216.235597][T14579] bridge_slave_0: left promiscuous mode [ 216.241438][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.497513][T14579] bond0 (unregistering): left promiscuous mode [ 216.503769][T14579] bond_slave_0: left promiscuous mode [ 216.509333][T14579] bond_slave_1: left promiscuous mode [ 216.535898][T14579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.557676][T19683] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 216.575585][T14579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.588468][T19681] loop9: detected capacity change from 0 to 512 [ 216.601820][T14579] bond0 (unregistering): Released all slaves [ 216.636455][T19681] EXT4-fs (loop9): too many log groups per flexible block group [ 216.650221][T19681] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 216.657222][T19681] EXT4-fs (loop9): mount failed [ 216.667972][T14579] batadv0: left promiscuous mode [ 216.674871][T14579] hsr_slave_0: left promiscuous mode [ 216.680837][T14579] hsr_slave_1: left promiscuous mode [ 216.686614][T14579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.694072][T14579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.701693][T14579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.709162][T14579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.719463][T14579] veth1_vlan: left promiscuous mode [ 216.724698][T14579] veth0_vlan: left promiscuous mode [ 216.796814][T19691] loop8: detected capacity change from 0 to 1024 [ 216.819910][T19691] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.830841][T19691] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 216.838861][T19691] EXT4-fs (loop8): orphan cleanup on readonly fs [ 216.846228][T19691] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.6968: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.859941][T19691] EXT4-fs (loop8): 1 orphan inode deleted [ 216.865918][T14579] team0 (unregistering): Port device team_slave_1 removed [ 216.866249][T19691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.885718][T14579] team0 (unregistering): Port device team_slave_0 removed [ 216.906450][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.106017][T19655] chnl_net:caif_netlink_parms(): no params data found [ 217.109770][T19707] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 217.109770][T19707] program syz.8.6983 not setting count and/or reply_len properly [ 217.216811][T19655] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.224065][T19655] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.252582][T19655] bridge_slave_0: entered allmulticast mode [ 217.271091][T19655] bridge_slave_0: entered promiscuous mode [ 217.305741][T19655] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.312967][T19655] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.338131][T19655] bridge_slave_1: entered allmulticast mode [ 217.353946][T19655] bridge_slave_1: entered promiscuous mode [ 217.417978][T19655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.429132][T19729] netlink: 'syz.6.6981': attribute type 1 has an invalid length. [ 217.436924][T19729] netlink: 'syz.6.6981': attribute type 2 has an invalid length. [ 217.451115][T19655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.477689][T19655] team0: Port device team_slave_0 added [ 217.488553][T19655] team0: Port device team_slave_1 added [ 217.506905][T19655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.514067][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.540191][T19655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.552737][T19655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.559877][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.585798][T19655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.644191][T19655] hsr_slave_0: entered promiscuous mode [ 217.658587][T19655] hsr_slave_1: entered promiscuous mode [ 217.671283][T19655] debugfs: 'hsr0' already exists in 'hsr' [ 217.677133][T19655] Cannot create hsr debugfs directory [ 217.701948][T19743] loop9: detected capacity change from 0 to 128 [ 217.720834][T19743] EXT4-fs: Ignoring removed nobh option [ 217.735198][T19743] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.791138][T18588] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.007454][T19655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.016609][T19655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.025360][T19655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.034758][T19655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.064370][T19655] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.071459][T19655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.078744][T19655] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.085805][T19655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.118366][T19655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.132003][ T1897] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.140223][ T1897] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.153769][T19655] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.167587][ T1897] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.174721][ T1897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.184063][ T1897] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.191381][ T1897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.215462][T19655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.226005][T19655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.301691][T19767] loop9: detected capacity change from 0 to 1024 [ 218.308412][T19767] ext4: Unknown parameter 'uid<00000000000000000000' [ 218.319135][T19655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.401209][T19655] veth0_vlan: entered promiscuous mode [ 218.409021][T19655] veth1_vlan: entered promiscuous mode [ 218.424690][T19655] veth0_macvtap: entered promiscuous mode [ 218.433104][T19655] veth1_macvtap: entered promiscuous mode [ 218.443313][T19655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.460624][T19655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.470967][T14541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.484334][T14541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.501187][T14541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.511001][T17536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.543893][T19778] loop8: detected capacity change from 0 to 512 [ 218.589148][T19778] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 218.610179][T19785] FAT-fs (loop9): bogus number of FAT sectors [ 218.616431][T19785] FAT-fs (loop9): Can't find a valid FAT filesystem [ 218.628439][T19778] EXT4-fs (loop8): invalid journal inode [ 218.645227][T19778] EXT4-fs (loop8): can't get journal size [ 218.679811][T19778] EXT4-fs (loop8): 1 truncate cleaned up [ 218.770086][T19792] __nla_validate_parse: 12 callbacks suppressed [ 218.770100][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6998'. [ 218.803003][T19795] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 218.812240][T19795] EXT4-fs (loop6): invalid journal inode [ 218.817902][T19795] EXT4-fs (loop6): can't get journal size [ 218.839467][T19795] EXT4-fs (loop6): 1 truncate cleaned up [ 218.900366][T19801] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.7001: lblock 0 mapped to illegal pblock 0 (length 1) [ 218.957586][T19801] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 218.970037][T19801] EXT4-fs (loop9): This should not happen!! Data will be lost [ 218.970037][T19801] [ 219.008603][T19816] netlink: 'syz.6.7012': attribute type 1 has an invalid length. [ 219.031836][T19810] Alternate GPT is invalid, using primary GPT. [ 219.038238][T19810] loop8: p2 p3 p7 [ 219.082854][T19822] FAT-fs (loop6): bogus number of FAT sectors [ 219.089012][T19822] FAT-fs (loop6): Can't find a valid FAT filesystem [ 219.160943][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 219.160956][ T29] audit: type=1400 audit(219.140:11087): avc: denied { load_policy } for pid=19819 comm="syz.9.7015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 219.197390][T19820] SELinux: failed to load policy [ 219.247729][T19831] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 219.259723][ T29] audit: type=1400 audit(219.240:11088): avc: denied { read } for pid=19832 comm="syz.8.7022" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.283698][ T29] audit: type=1400 audit(219.240:11089): avc: denied { ioctl } for pid=19832 comm="syz.8.7022" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.289337][T19831] EXT4-fs (loop0): invalid journal inode [ 219.334934][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7033'. [ 219.343958][ T29] audit: type=1326 audit(219.310:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.359255][T19831] EXT4-fs (loop0): can't get journal size [ 219.366978][ T29] audit: type=1326 audit(219.310:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.396408][ T29] audit: type=1326 audit(219.360:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.419434][ T29] audit: type=1326 audit(219.360:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.442449][ T29] audit: type=1326 audit(219.360:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.465546][ T29] audit: type=1326 audit(219.360:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.488560][ T29] audit: type=1326 audit(219.360:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.8.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 219.522691][T19831] EXT4-fs (loop0): 1 truncate cleaned up [ 219.567254][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7035'. [ 219.645158][T19853] set_capacity_and_notify: 6 callbacks suppressed [ 219.645174][T19853] loop9: detected capacity change from 0 to 512 [ 219.648735][T19854] netlink: 'syz.8.7028': attribute type 1 has an invalid length. [ 219.661803][T19853] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 219.693404][T19853] EXT4-fs (loop9): invalid journal inode [ 219.701315][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7029'. [ 219.709501][T19853] EXT4-fs (loop9): can't get journal size [ 219.723171][T19853] EXT4-fs (loop9): 1 truncate cleaned up [ 219.797287][T19864] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7032'. [ 224.658590][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 224.658604][ T29] audit: type=1400 audit(224.630:11110): avc: denied { execmem } for pid=19875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 224.704731][ T29] audit: type=1400 audit(224.680:11111): avc: denied { read } for pid=19876 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 224.727243][ T29] audit: type=1400 audit(224.680:11112): avc: denied { open } for pid=19876 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 224.750256][ T29] audit: type=1400 audit(224.680:11113): avc: denied { mounton } for pid=19876 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 224.800468][ T1967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 42611 - 0 [ 224.836717][T19876] chnl_net:caif_netlink_parms(): no params data found [ 224.852172][ T1967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 42611 - 0 [ 224.880280][T19876] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.887304][T19876] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.894444][T19876] bridge_slave_0: entered allmulticast mode [ 224.901176][T19876] bridge_slave_0: entered promiscuous mode [ 224.908392][ T1967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 42611 - 0 [ 224.919810][T19876] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.926850][T19876] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.934158][T19876] bridge_slave_1: entered allmulticast mode [ 224.941290][T19876] bridge_slave_1: entered promiscuous mode [ 224.957267][T19876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.967390][T19876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.977086][ T1967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 42611 - 0 [ 224.997772][T19876] team0: Port device team_slave_0 added [ 225.004228][T19876] team0: Port device team_slave_1 added [ 225.018614][T19876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.025673][T19876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.051592][T19876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.062715][T19876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.069658][T19876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.095656][T19876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.121575][T19876] hsr_slave_0: entered promiscuous mode [ 225.127507][T19876] hsr_slave_1: entered promiscuous mode [ 225.133277][T19876] debugfs: 'hsr0' already exists in 'hsr' [ 225.138986][T19876] Cannot create hsr debugfs directory [ 225.157467][T19894] loop8: detected capacity change from 0 to 128 [ 225.165028][T19894] EXT4-fs: Ignoring removed nobh option [ 225.174414][T19896] loop9: detected capacity change from 0 to 2048 [ 225.199414][T19894] EXT4-fs mount: 10 callbacks suppressed [ 225.199431][T19894] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.218099][ T1967] vlan2: left promiscuous mode [ 225.223102][ T1967] bridge0: port 3(vlan2) entered disabled state [ 225.232360][ T1967] bridge_slave_1: left allmulticast mode [ 225.238003][ T1967] bridge_slave_1: left promiscuous mode [ 225.242021][T19896] Alternate GPT is invalid, using primary GPT. [ 225.243827][ T1967] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.250017][T19896] loop9: p2 p3 p7 [ 225.264608][ T1967] bridge_slave_0: left promiscuous mode [ 225.270400][ T1967] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.288324][T17247] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.302770][T19904] loop0: detected capacity change from 0 to 256 [ 225.315014][T19904] FAT-fs (loop0): bogus number of FAT sectors [ 225.321215][T19904] FAT-fs (loop0): Can't find a valid FAT filesystem [ 225.350375][ T29] audit: type=1400 audit(225.320:11114): avc: denied { name_bind } for pid=19907 comm="syz.8.7046" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 225.371617][ T29] audit: type=1400 audit(225.320:11115): avc: denied { node_bind } for pid=19907 comm="syz.8.7046" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 225.461367][ T1967] bond0 (unregistering): left promiscuous mode [ 225.467537][ T1967] bond_slave_0: left promiscuous mode [ 225.473072][ T1967] bond_slave_1: left promiscuous mode [ 225.479603][ T1967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.488216][ T1967] bond_slave_0: left allmulticast mode [ 225.494834][ T1967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.504048][ T1967] bond_slave_1: left allmulticast mode [ 225.509873][ T1967] bond0 (unregistering): Released all slaves [ 225.545350][T19876] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.555655][T19876] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.567009][ T1967] tipc: Disabling bearer [ 225.572360][ T1967] tipc: Left network mode [ 225.577876][ T1967] IPVS: stopping backup sync thread 18745 ... [ 225.584291][ T1967] dummy0: left promiscuous mode [ 225.590745][ T1967] hsr_slave_0: left promiscuous mode [ 225.596267][ T1967] hsr_slave_1: left promiscuous mode [ 225.601980][ T1967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.610683][ T1967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.661482][T19876] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.671914][T19876] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.725248][T19876] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.735559][T19876] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.804203][T19876] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.814495][T19876] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.913125][T19876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.921940][T19876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.930495][T19876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.938922][T19876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.952703][ T1967] IPVS: stop unused estimator thread 0... [ 225.976717][T19876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.988096][T19876] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.997442][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.004573][ T1633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.015715][T17505] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.022824][T17505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.077132][T19876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.164145][T19876] veth0_vlan: entered promiscuous mode [ 226.171900][T19876] veth1_vlan: entered promiscuous mode [ 226.186412][T19876] veth0_macvtap: entered promiscuous mode [ 226.194024][T19876] veth1_macvtap: entered promiscuous mode [ 226.207357][T19876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.217251][T19876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.227997][T14526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.236890][T14526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.245679][T14526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.254637][T14526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.294932][ T29] audit: type=1400 audit(226.270:11116): avc: denied { kexec_image_load } for pid=19937 comm="syz.6.7059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 226.307167][T19944] loop0: detected capacity change from 0 to 512 [ 226.329762][T19944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.338457][T19944] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.363061][T19944] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.7062: Allocating blocks 41-42 which overlap fs metadata [ 226.387856][T19951] loop5: detected capacity change from 0 to 512 [ 226.395127][T19944] Quota error (device loop0): write_blk: dquota write failed [ 226.402523][T19944] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 226.413410][T19951] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 226.414993][T19957] loop9: detected capacity change from 0 to 512 [ 226.428774][T19951] EXT4-fs (loop5): invalid journal inode [ 226.434668][T19951] EXT4-fs (loop5): can't get journal size [ 226.440784][T19944] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.7062: Allocating blocks 41-42 which overlap fs metadata [ 226.441192][T19951] EXT4-fs (loop5): 1 truncate cleaned up [ 226.459574][T19944] Quota error (device loop0): write_blk: dquota write failed [ 226.460735][T19951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.467570][T19944] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.7062: Failed to acquire dquot type 1 [ 226.493156][T19957] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.504829][T19957] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 226.514940][T19957] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.7065: Corrupt directory, running e2fsck is recommended [ 226.528281][T19944] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 226.529462][T19957] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 226.543150][T19944] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7062: corrupted inode contents [ 226.554090][T19957] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.7065: corrupted in-inode xattr: e_name out of bounds [ 226.564113][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.577265][T19957] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.7065: couldn't read orphan inode 15 (err -117) [ 226.598270][T19957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.617747][T19957] EXT4-fs (loop9): shut down requested (2) [ 226.636726][T19944] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.7062: mark_inode_dirty error [ 226.650634][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.667345][T19944] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7062: corrupted inode contents [ 226.693412][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7048'. [ 226.694723][T19944] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.7062: mark_inode_dirty error [ 226.718394][T19971] loop6: detected capacity change from 0 to 1024 [ 226.731038][T19944] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7062: corrupted inode contents [ 226.745637][T19944] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 226.758064][T19975] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.772913][T19944] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7062: corrupted inode contents [ 226.785367][T19944] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.7062: mark_inode_dirty error [ 226.797171][T19944] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 226.808112][T19944] EXT4-fs (loop0): 1 truncate cleaned up [ 226.815698][T19944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.860193][T19655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.860324][T19985] openvswitch: netlink: Missing key (keys=40, expected=80) [ 226.923601][T19995] 9p: Bad value for 'source' [ 226.937602][ T3507] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 226.945328][ T3507] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 226.963903][ T3507] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 226.974672][ T3507] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 227.850614][T20096] loop6: detected capacity change from 0 to 2048 [ 227.862296][T20096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.896209][T15419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.915630][T20103] netlink: '': attribute type 6 has an invalid length. [ 227.966892][T20115] ref_ctr_offset mismatch. inode: 0x40 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 228.046234][T20129] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.053416][T20129] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.075748][T20132] loop5: detected capacity change from 0 to 512 [ 228.091389][T20132] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7134: bad orphan inode 11862016 [ 228.102723][T20132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 228.134385][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 228.147156][T20139] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.198742][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.206188][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.213175][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.241669][T20149] infiniband syz2: set active [ 228.246423][T20149] infiniband syz2: added ip6_vti0 [ 228.251584][ T3515] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.264690][T20149] RDS/IB: syz2: added [ 228.268779][T20149] smc: adding ib device syz2 with port count 1 [ 228.274950][T20149] smc: ib device syz2 port 1 has no pnetid [ 228.281266][ T3515] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.287543][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.317889][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.347297][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.386838][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.401906][T20158] netlink: 'syz.8.7144': attribute type 298 has an invalid length. [ 228.422538][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.461735][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.499362][T20149] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.755017][T20181] --map-set only usable from mangle table [ 228.775063][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7156'. [ 228.885558][T14562] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.029606][T20214] netlink: 'syz.0.7171': attribute type 1 has an invalid length. [ 229.074454][T20218] xt_connbytes: Forcing CT accounting to be enabled [ 229.146942][T20225] loop0: detected capacity change from 0 to 512 [ 229.155136][T20225] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 229.163644][T20225] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.170478][T20225] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.185741][T20225] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 229.192746][T20225] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.7176: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 229.211157][T20225] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7176: couldn't read orphan inode 13 (err -117) [ 229.223845][T20225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.239332][T20225] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 229.248955][T20225] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 229.259460][T20225] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.299050][T19655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.369908][T20232] macvtap0: refused to change device tx_queue_len [ 229.461054][T20243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.519692][T14562] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 229.536038][T14562] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65545 with max blocks 25 with error 28 [ 229.548741][T14562] EXT4-fs (loop8): This should not happen!! Data will be lost [ 229.548741][T14562] [ 229.558407][T14562] EXT4-fs (loop8): Total free blocks count 0 [ 229.564703][T14562] EXT4-fs (loop8): Free/Dirty block details [ 229.570724][T14562] EXT4-fs (loop8): free_blocks=65280 [ 229.575996][T14562] EXT4-fs (loop8): dirty_blocks=25 [ 229.581117][T14562] EXT4-fs (loop8): Block reservation details [ 229.587087][T14562] EXT4-fs (loop8): i_reserved_data_blocks=25 [ 229.597113][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.617758][T20259] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 229.724500][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 229.724517][ T29] audit: type=1400 audit(229.700:11241): avc: denied { mount } for pid=20276 comm="syz.8.7199" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.846686][ T29] audit: type=1400 audit(229.820:11242): avc: denied { unmount } for pid=17247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.946267][ T29] audit: type=1400 audit(229.920:11243): avc: denied { mounton } for pid=20298 comm="syz.0.7209" path="/55/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 229.986243][ T29] audit: type=1400 audit(229.960:11244): avc: denied { connect } for pid=20302 comm="syz.6.7211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.060146][ T29] audit: type=1326 audit(230.040:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.8.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 230.085171][ T29] audit: type=1326 audit(230.070:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.8.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 230.109266][ T29] audit: type=1326 audit(230.070:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.8.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 230.132378][ T29] audit: type=1326 audit(230.070:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.8.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 230.155314][ T29] audit: type=1326 audit(230.070:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.8.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 230.178323][ T29] audit: type=1326 audit(230.080:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20308 comm="syz.8.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682078f749 code=0x7ffc0000 [ 230.202151][T20311] openvswitch: netlink: Missing key (keys=40, expected=80) [ 230.386395][T20331] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7225'. [ 230.401592][T20331] netlink: zone id is out of range [ 230.406718][T20331] netlink: zone id is out of range [ 230.412201][T20331] netlink: zone id is out of range [ 230.428041][T20331] netlink: set zone limit has 8 unknown bytes [ 230.459317][T20338] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7228'. [ 230.469126][T20338] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ [ 230.493874][ T3507] kernel write not supported for file bpf-map (pid: 3507 comm: kworker/1:8) [ 230.573547][T20360] set_capacity_and_notify: 1 callbacks suppressed [ 230.573612][T20360] loop8: detected capacity change from 0 to 512 [ 230.590993][T20360] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 230.606795][T20360] EXT4-fs (loop8): 1 truncate cleaned up [ 230.614274][T20360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.634464][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.700886][T20373] loop9: detected capacity change from 0 to 512 [ 230.709368][T20373] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.740619][T20373] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.7245: Allocating blocks 41-42 which overlap fs metadata [ 230.754679][T20373] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.7245: Allocating blocks 41-42 which overlap fs metadata [ 230.768687][T20373] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7245: Failed to acquire dquot type 1 [ 230.784308][T20373] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 230.798751][T20377] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7247'. [ 230.798999][T20373] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7245: corrupted inode contents [ 230.820362][T20373] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.7245: mark_inode_dirty error [ 230.832023][T20373] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7245: corrupted inode contents [ 230.844183][T20373] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.7245: mark_inode_dirty error [ 230.855703][T20373] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7245: corrupted inode contents [ 230.868097][T20373] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 230.877198][T20373] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.7245: corrupted inode contents [ 230.895789][T20373] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.7245: mark_inode_dirty error [ 230.912286][T20373] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 230.921289][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.921405][ T4252] Bluetooth: hci0: command 0x1003 tx timeout [ 230.936979][T20373] EXT4-fs (loop9): 1 truncate cleaned up [ 230.943188][T20373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.976840][T20373] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 231.014646][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.132454][T20422] binfmt_misc: register: failed to install interpreter file ./file0 [ 231.212049][T20436] netlink: 'syz.0.7274': attribute type 2 has an invalid length. [ 231.305226][ T53] tipc: Subscription rejected, illegal request [ 231.374792][T20451] netlink: 268 bytes leftover after parsing attributes in process `syz.8.7282'. [ 231.635771][ T3507] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 231.643605][ T3507] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 231.652022][ T3507] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 231.670974][ T3507] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 231.687249][T20513] loop0: detected capacity change from 0 to 512 [ 231.704388][T20515] loop9: detected capacity change from 0 to 2048 [ 231.705907][T20513] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.7312: inode has both inline data and extents flags [ 231.724633][T20513] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7312: couldn't read orphan inode 15 (err -117) [ 231.737406][T20513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.737982][T20515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.753226][T20513] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 231.777065][T20517] 9pnet: p9_errstr2errno: server reported unknown error [ 231.778292][T20515] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.7313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 231.802224][T20515] EXT4-fs (loop9): Remounting filesystem read-only [ 231.830125][T19655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.843110][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.900665][T20536] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7320'. [ 232.034954][T20565] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7335'. [ 232.077610][T20573] loop0: detected capacity change from 0 to 512 [ 232.090994][T20573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.108589][T20573] EXT4-fs (loop0): shut down requested (1) [ 232.126187][T19655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.205755][T20595] netlink: 'syz.0.7347': attribute type 3 has an invalid length. [ 232.213572][T20595] netlink: 'syz.0.7347': attribute type 4 has an invalid length. [ 232.221445][T20595] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.7347'. [ 232.262549][T20606] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7352'. [ 232.274986][T20604] loop9: detected capacity change from 0 to 512 [ 232.300501][T20604] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 232.316208][T20604] EXT4-fs (loop9): mount failed [ 232.353575][T20616] netlink: '+}[@': attribute type 1 has an invalid length. [ 232.360902][T20616] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 232.458427][T20634] SELinux: failed to load policy [ 232.467712][T20635] loop8: detected capacity change from 0 to 512 [ 232.494586][T20635] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.7362: iget: bad extra_isize 90 (inode size 256) [ 232.552291][T20635] EXT4-fs (loop8): Remounting filesystem read-only [ 232.579498][T20635] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 232.616521][T20635] EXT4-fs (loop8): 1 orphan inode deleted [ 232.635874][T20635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.649893][T20635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.760162][T20660] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 232.768645][T20660] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 232.777414][T20660] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 232.786414][T20660] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 233.039001][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7388'. [ 233.099952][T20723] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 233.120212][T20729] netlink: 'syz.9.7394': attribute type 29 has an invalid length. [ 233.142097][T20731] 9p: Bad value for 'rfdno' [ 233.220019][T20750] vhci_hcd vhci_hcd.4: default hub control req: 6003 v56be i0003 l0 [ 233.528344][T20807] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 233.697632][T20849] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 233.697632][T20849] program syz.6.7424 not setting count and/or reply_len properly [ 233.814957][ T3918] Process accounting resumed [ 233.862311][T20884] loop5: detected capacity change from 0 to 1024 [ 233.869121][T20884] EXT4-fs: inline encryption not supported [ 233.875097][T20884] EXT4-fs: Ignoring removed orlov option [ 233.893844][T20884] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 233.909489][T20889] syzkaller1: entered promiscuous mode [ 233.915079][T20889] syzkaller1: entered allmulticast mode [ 233.926735][T20884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 233.937866][T20884] System zones: 0-1, 3-12 [ 233.942758][T20884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.994915][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.007371][T20901] netlink: 'syz.8.7445': attribute type 1 has an invalid length. [ 234.061500][T20914] pim6reg: entered allmulticast mode [ 234.080093][T20914] pim6reg: left allmulticast mode [ 234.107582][T20922] vhci_hcd vhci_hcd.0: invalid port number 33 [ 234.113813][T20922] vhci_hcd vhci_hcd.0: default hub control req: 0008 v000d i0021 l0 [ 234.176064][T20937] loop6: detected capacity change from 0 to 128 [ 234.184572][T20937] FAT-fs (loop6): Directory bread(block 162) failed [ 234.191709][T20937] FAT-fs (loop6): Directory bread(block 163) failed [ 234.198348][T20937] FAT-fs (loop6): Directory bread(block 164) failed [ 234.205767][T20937] FAT-fs (loop6): Directory bread(block 165) failed [ 234.206574][T20940] ip6_vti0 speed is unknown, defaulting to 1000 [ 234.212645][T20937] FAT-fs (loop6): Directory bread(block 166) failed [ 234.219578][T20941] loop5: detected capacity change from 0 to 1024 [ 234.232097][T20937] FAT-fs (loop6): Directory bread(block 167) failed [ 234.232120][T20937] FAT-fs (loop6): Directory bread(block 168) failed [ 234.242768][T20941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.245492][T20937] FAT-fs (loop6): Directory bread(block 169) failed [ 234.283484][T20941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.324725][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.520808][T20976] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 234.530161][T20976] SELinux: failed to load policy [ 234.538931][T20979] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 234.650389][T20998] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.7492: EA inode hash validation failed [ 234.674948][T20998] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.7492: corrupted inode contents [ 234.719053][T20998] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.7492: mark_inode_dirty error [ 234.732881][T20998] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.7492: corrupted inode contents [ 234.744934][T20998] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.7492: mark_inode_dirty error [ 234.757260][T20998] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.7492: mark inode dirty (error -117) [ 234.771075][T20998] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 234.781565][T20998] EXT4-fs (loop5): 1 orphan inode deleted [ 234.787781][T20998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.816084][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 234.816099][ T29] audit: type=1400 audit(234.790:11477): avc: denied { watch watch_reads } for pid=21010 comm="syz.9.7498" path="/197" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 234.846198][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.857452][ T29] audit: type=1326 audit(234.840:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 234.888264][ T29] audit: type=1326 audit(234.840:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 234.911320][ T29] audit: type=1326 audit(234.840:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 234.934650][ T29] audit: type=1326 audit(234.840:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 234.957636][ T29] audit: type=1326 audit(234.840:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 234.980803][ T29] audit: type=1326 audit(234.840:11483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 235.003925][ T29] audit: type=1326 audit(234.860:11484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 235.027021][ T29] audit: type=1326 audit(234.860:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 235.050036][ T29] audit: type=1326 audit(234.860:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.0.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 235.088995][T21015] hub 9-0:1.0: USB hub found [ 235.095222][T21015] hub 9-0:1.0: 8 ports detected [ 235.096540][T21025] sock: sock_set_timeout: `syz.0.7505' (pid 21025) tries to set negative timeout [ 235.123474][T14552] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.166194][T14552] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.194384][T21037] tipc: Enabling of bearer rejected, failed to enable media [ 235.212241][T21038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.226941][T14552] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.250879][T21038] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.301861][T14552] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.313291][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.363899][T21041] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.395235][T14552] bridge_slave_1: left allmulticast mode [ 235.400975][T14552] bridge_slave_1: left promiscuous mode [ 235.406646][T14552] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.436202][T21065] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.450002][T14552] bridge_slave_0: left allmulticast mode [ 235.455911][T14552] bridge_slave_0: left promiscuous mode [ 235.461740][T14552] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.471940][T21065] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7521: Invalid block bitmap block 0 in block_group 0 [ 235.486156][T21065] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7521: Failed to acquire dquot type 0 [ 235.512355][T21065] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.7521: Freeing blocks not in datazone - block = 0, count = 4096 [ 235.528599][T21065] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7521: Invalid inode bitmap blk 0 in block_group 0 [ 235.543856][T21065] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 235.552983][T21065] EXT4-fs (loop5): 1 orphan inode deleted [ 235.552922][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 235.560155][T21065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.608025][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.660951][T14552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.670683][T14552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.680275][T14552] bond0 (unregistering): Released all slaves [ 235.711536][T21075] usb usb7: usbfs: process 21075 (syz.0.7525) did not claim interface 0 before use [ 235.737365][T14552] IPVS: stopping backup sync thread 16806 ... [ 235.773545][T21041] chnl_net:caif_netlink_parms(): no params data found [ 235.785078][T14552] hsr_slave_0: left promiscuous mode [ 235.796793][T21083] set_capacity_and_notify: 4 callbacks suppressed [ 235.796811][T21083] loop0: detected capacity change from 0 to 2048 [ 235.810020][T14552] hsr_slave_1: left promiscuous mode [ 235.815874][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.823351][T14552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.835604][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.843178][T14552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.852997][T21083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.865802][T14552] veth1_vlan: left promiscuous mode [ 235.879308][T14552] veth0_vlan: left promiscuous mode [ 235.962352][T14552] team0 (unregistering): Port device team_slave_0 removed [ 236.094574][T21041] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.101849][T21041] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.109343][T21041] bridge_slave_0: entered allmulticast mode [ 236.119705][T21041] bridge_slave_0: entered promiscuous mode [ 236.126694][T19655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.136564][T21041] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.143683][T21041] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.152495][T21041] bridge_slave_1: entered allmulticast mode [ 236.159071][T21041] bridge_slave_1: entered promiscuous mode [ 236.190515][T21041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.204350][T21041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.250520][T21041] team0: Port device team_slave_0 added [ 236.257245][T21041] team0: Port device team_slave_1 added [ 236.267979][T14552] IPVS: stop unused estimator thread 0... [ 236.305843][T21041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.312875][T21041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.338886][T21041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.350307][T21041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.357255][T21041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.383314][T21041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.414256][T21041] hsr_slave_0: entered promiscuous mode [ 236.422843][T21041] hsr_slave_1: entered promiscuous mode [ 236.422980][T21128] loop5: detected capacity change from 0 to 128 [ 236.472523][T21131] loop5: detected capacity change from 0 to 512 [ 236.479053][T21131] EXT4-fs: Ignoring removed oldalloc option [ 236.497903][T21133] loop8: detected capacity change from 0 to 1024 [ 236.501781][T21135] ip6tnl1: entered promiscuous mode [ 236.505961][T21133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.509518][T21135] ip6tnl1: entered allmulticast mode [ 236.524774][T21131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.544115][T21133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.571587][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.645598][T21145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.663101][T21145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.673196][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.754794][T21159] nfs: Deprecated parameter 'nointr' [ 236.785263][T21041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.800149][T21041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.811539][T21041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.833634][T21041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.849131][T21041] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.856219][T21041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.863582][T21041] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.870684][T21041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.897770][T21041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.911954][T14562] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.921638][T14562] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.944821][T21041] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.957882][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.964950][T14546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.973470][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.980525][T14546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.047351][T21041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.108928][T21193] loop8: detected capacity change from 0 to 4096 [ 237.120992][T21193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.155807][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.173350][T21041] veth0_vlan: entered promiscuous mode [ 237.181296][T21041] veth1_vlan: entered promiscuous mode [ 237.216833][T21041] veth0_macvtap: entered promiscuous mode [ 237.227942][T21041] veth1_macvtap: entered promiscuous mode [ 237.263192][T21041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.274261][T21041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.308206][T14545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.347100][T14545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.386576][T14545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.419424][T14545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.579357][T21228] netlink: 'syz.3.7582': attribute type 1 has an invalid length. [ 237.587134][T21228] __nla_validate_parse: 9 callbacks suppressed [ 237.587150][T21228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7582'. [ 237.959882][T21246] loop5: detected capacity change from 0 to 8192 [ 237.976511][T21253] loop0: detected capacity change from 0 to 4096 [ 237.999054][T21253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.133047][T19655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.215447][T21269] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 238.452116][T21296] netlink: 'syz.5.7609': attribute type 1 has an invalid length. [ 238.474671][T21299] netlink: 'syz.0.7611': attribute type 1 has an invalid length. [ 238.514791][T21301] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.601338][T14534] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.663417][T21317] loop3: detected capacity change from 0 to 2048 [ 238.671532][T21319] netlink: 'syz.5.7623': attribute type 29 has an invalid length. [ 238.731246][T21317] Alternate GPT is invalid, using primary GPT. [ 238.737639][T21317] loop3: p2 p3 p7 [ 238.952301][T21335] loop3: detected capacity change from 0 to 512 [ 238.991786][T21335] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7631: bad orphan inode 11862016 [ 239.020585][T21335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.076662][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 239.168527][T21343] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 239.325018][T21363] loop5: detected capacity change from 0 to 128 [ 239.336011][T21363] EXT4-fs: Ignoring removed nobh option [ 239.343813][T21363] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.375067][T19876] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.415376][T21371] ISOFS: unable to read i-node block [ 239.421744][T21371] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 239.472816][T21377] serio: Serial port ptm1 [ 239.627284][T21377] serio: Serial port ptm1 [ 239.676985][T21382] netlink: 'syz.3.7649': attribute type 1 has an invalid length. [ 240.237232][T21406] EXT4-fs: Ignoring removed i_version option [ 240.243436][T21406] EXT4-fs: Ignoring removed bh option [ 240.261028][T21406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.290560][T17247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.314220][T21413] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.319302][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 240.319316][ T29] audit: type=1400 audit(240.296:11558): avc: denied { block_suspend } for pid=21414 comm="syz.8.7671" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.366518][ T29] audit: type=1400 audit(240.346:11559): avc: denied { connect } for pid=21416 comm="syz.8.7673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.400929][ T29] audit: type=1400 audit(240.346:11560): avc: denied { write } for pid=21416 comm="syz.8.7673" path="socket:[69846]" dev="sockfs" ino=69846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.491023][T21431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.498170][ T29] audit: type=1326 audit(240.476:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.544277][T21431] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.7668: inode #196616: comm syz.3.7668: iget: illegal inode # [ 240.562415][ T29] audit: type=1326 audit(240.506:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.585470][ T29] audit: type=1326 audit(240.506:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.608468][ T29] audit: type=1326 audit(240.516:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.631438][ T29] audit: type=1326 audit(240.516:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.654372][ T29] audit: type=1326 audit(240.516:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.659244][T21431] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7668: error while reading EA inode 196616 err=-117 [ 240.677360][ T29] audit: type=1326 audit(240.516:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21434 comm="syz.9.7669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f031f749 code=0x7ffc0000 [ 240.691583][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.719096][ T4252] Bluetooth: hci0: command 0x1003 tx timeout [ 240.755642][T21439] EXT4-fs: Ignoring removed i_version option [ 240.761703][T21439] EXT4-fs: Ignoring removed bh option [ 240.767720][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.781311][T21439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.824190][T18588] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.853748][T21449] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7676'. [ 240.880582][T21454] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.928697][T21463] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7683'. [ 240.954421][T21469] set_capacity_and_notify: 5 callbacks suppressed [ 240.954439][T21469] loop3: detected capacity change from 0 to 2048 [ 240.971079][T21469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.985565][T21473] loop5: detected capacity change from 0 to 512 [ 240.992713][T21473] EXT4-fs: Ignoring removed i_version option [ 240.998736][T21473] EXT4-fs: Ignoring removed bh option [ 241.016855][T21473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.039949][T21479] 9p: Bad value for 'source' [ 241.106478][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.153864][T21041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.173588][T21485] loop5: detected capacity change from 0 to 512 [ 241.192425][T21485] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.204185][T21485] EXT4-fs (loop5): 1 truncate cleaned up [ 241.210279][T21485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.239846][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.337599][T21500] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.352414][T21503] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 241.389887][T21511] netlink: 444 bytes leftover after parsing attributes in process `syz.9.7701'. [ 241.411420][T21511] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7701'. [ 241.461415][T21514] loop9: detected capacity change from 0 to 164 [ 241.480724][T21514] ISOFS: unable to read i-node block [ 241.493908][T21514] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 241.594480][T21312] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 241.600823][T21520] loop9: detected capacity change from 0 to 2048 [ 241.815820][T21534] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 241.822431][T21534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.830162][T21534] vhci_hcd vhci_hcd.0: Device attached [ 241.836776][T21535] vhci_hcd: connection closed [ 241.836858][T14545] vhci_hcd vhci_hcd.8: stop threads [ 241.846837][T14545] vhci_hcd vhci_hcd.8: release socket [ 241.852256][T14545] vhci_hcd vhci_hcd.8: disconnect device [ 241.920511][T21552] netlink: 'syz.3.7720': attribute type 29 has an invalid length. [ 241.960482][T21556] netlink: 'syz.5.7722': attribute type 1 has an invalid length. [ 241.968265][T21556] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7722'. [ 242.376983][T21592] netlink: 'syz.8.7734': attribute type 29 has an invalid length. [ 242.409213][T21596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.419612][T21598] ref_ctr_offset mismatch. inode: 0xee offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 242.431472][T21597] netlink: 'syz.8.7737': attribute type 1 has an invalid length. [ 242.439620][T21597] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7737'. [ 242.472978][T21600] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7739'. [ 242.523809][T21606] loop8: detected capacity change from 0 to 512 [ 242.530688][T21608] netlink: 'syz.5.7752': attribute type 298 has an invalid length. [ 242.563994][T21606] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.7741: inode has both inline data and extents flags [ 242.585764][T21606] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.7741: couldn't read orphan inode 15 (err -117) [ 242.630368][T21606] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 242.796441][T21640] netlink: 'syz.9.7753': attribute type 1 has an invalid length. [ 242.804217][T21640] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7753'. [ 242.903607][T21667] loop3: detected capacity change from 0 to 512 [ 242.933298][T21667] EXT4-fs (loop3): shut down requested (1) [ 242.948335][T21675] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7772'. [ 243.036068][T21691] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 243.145755][T21696] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.161183][T21736] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7799'. [ 244.176217][T21736] netlink: zone id is out of range [ 244.181387][T21736] netlink: zone id is out of range [ 244.186854][T21736] netlink: zone id is out of range [ 244.187120][T21740] SELinux: failed to load policy [ 244.203314][T21736] netlink: set zone limit has 8 unknown bytes [ 244.237935][T21747] loop8: detected capacity change from 0 to 512 [ 244.247246][T21747] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.272167][T21750] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 244.278707][T21750] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.286374][T21750] vhci_hcd vhci_hcd.0: Device attached [ 244.298319][T21752] vhci_hcd: connection closed [ 244.298528][T14547] vhci_hcd vhci_hcd.3: stop threads [ 244.308521][T14547] vhci_hcd vhci_hcd.3: release socket [ 244.313987][T14547] vhci_hcd vhci_hcd.3: disconnect device [ 244.325636][T21747] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7803: Allocating blocks 41-42 which overlap fs metadata [ 244.339765][T21747] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7803: Allocating blocks 41-42 which overlap fs metadata [ 244.353798][T21747] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.7803: Failed to acquire dquot type 1 [ 244.365443][T21747] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 244.380065][T21747] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7803: corrupted inode contents [ 244.392245][T21747] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.7803: mark_inode_dirty error [ 244.404216][T21747] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7803: corrupted inode contents [ 244.416466][T21747] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.7803: mark_inode_dirty error [ 244.427890][T21747] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7803: corrupted inode contents [ 244.440549][T21747] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 244.449145][T21747] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7803: corrupted inode contents [ 244.462033][T21747] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.7803: mark_inode_dirty error [ 244.473254][T21747] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 244.482357][T21747] EXT4-fs (loop8): 1 truncate cleaned up [ 244.494915][T21747] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.531471][T21771] loop0: detected capacity change from 0 to 512 [ 244.538580][T21771] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.553592][T21771] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.7824: Allocating blocks 41-42 which overlap fs metadata [ 244.568550][T21771] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.7824: Failed to acquire dquot type 1 [ 244.586182][T21771] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 244.605607][T21771] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7824: corrupted inode contents [ 244.618238][T21771] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.7824: mark_inode_dirty error [ 244.630483][T21771] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7824: corrupted inode contents [ 244.642739][T21771] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.7824: mark_inode_dirty error [ 244.655408][T21771] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7824: corrupted inode contents [ 244.668031][T21771] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 244.676865][T21771] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.7824: corrupted inode contents [ 244.681550][T21780] 9pnet: p9_errstr2errno: server reported unknown error [ 244.696068][T21771] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.7824: mark_inode_dirty error [ 244.707548][T21771] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 244.716929][T21771] EXT4-fs (loop0): 1 truncate cleaned up [ 244.738584][T21771] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.929953][T21828] validate_nla: 1 callbacks suppressed [ 244.929969][T21828] netlink: 'syz.8.7843': attribute type 3 has an invalid length. [ 244.943288][T21828] netlink: 'syz.8.7843': attribute type 4 has an invalid length. [ 244.951030][T21828] netlink: 9067 bytes leftover after parsing attributes in process `syz.8.7843'. [ 245.078764][T21849] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 245.087282][T21849] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 245.124255][T21849] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 245.139244][T21849] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 245.141135][T21857] loop3: detected capacity change from 0 to 512 [ 245.155587][T21857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.176278][T21857] EXT4-fs (loop3): 1 truncate cleaned up [ 245.203975][T21865] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.7858: iget: bad extra_isize 90 (inode size 256) [ 245.217581][T21865] EXT4-fs (loop5): Remounting filesystem read-only [ 245.224653][T21865] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 245.234099][T21865] EXT4-fs (loop5): 1 orphan inode deleted [ 245.558310][T21912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7876'. [ 245.572730][T21909] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7875: iget: bad extra_isize 90 (inode size 256) [ 245.588691][T21909] EXT4-fs (loop0): Remounting filesystem read-only [ 245.605103][T21909] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 245.616724][T21909] EXT4-fs (loop0): 1 orphan inode deleted [ 245.634334][T21919] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 245.649357][T21919] EXT4-fs (loop3): mount failed [ 245.709896][T21932] netlink: 'syz.0.7884': attribute type 29 has an invalid length. [ 246.602403][T22081] set_capacity_and_notify: 3 callbacks suppressed [ 246.602418][T22081] loop3: detected capacity change from 0 to 512 [ 246.658952][T22081] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.7895: iget: bad extra_isize 90 (inode size 256) [ 246.690472][T22081] EXT4-fs (loop3): Remounting filesystem read-only [ 246.714202][T22081] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 246.725245][T22081] EXT4-fs (loop3): 1 orphan inode deleted [ 247.125144][T22170] loop9: detected capacity change from 0 to 512 [ 247.142639][T22170] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.7919: iget: bad extra_isize 90 (inode size 256) [ 247.164995][T22170] EXT4-fs (loop9): Remounting filesystem read-only [ 247.176103][T22170] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 247.194687][T22170] EXT4-fs (loop9): 1 orphan inode deleted [ 247.393999][T22201] pim6reg: entered allmulticast mode [ 247.409483][T22201] pim6reg: left allmulticast mode [ 247.444169][T22207] loop3: detected capacity change from 0 to 1024 [ 247.459842][T22207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.744706][T14546] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.843141][T14546] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.933127][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 247.933143][ T29] audit: type=1326 audit(247.916:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 247.978587][T14546] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.990500][ T29] audit: type=1326 audit(247.946:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 248.013497][ T29] audit: type=1326 audit(247.946:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 248.036524][ T29] audit: type=1326 audit(247.946:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 248.059500][ T29] audit: type=1326 audit(247.946:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2c6ebf749 code=0x7ffc0000 [ 248.095561][T22296] syzkaller1: entered promiscuous mode [ 248.101131][T22296] syzkaller1: entered allmulticast mode [ 248.147649][T14546] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.174727][T22281] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.239672][T14546] bridge_slave_1: left allmulticast mode [ 248.245387][T14546] bridge_slave_1: left promiscuous mode [ 248.251145][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.282829][T14546] bridge_slave_0: left allmulticast mode [ 248.288492][T14546] bridge_slave_0: left promiscuous mode [ 248.294135][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.342522][T22319] loop0: detected capacity change from 0 to 512 [ 248.353569][T22319] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.7957: EA inode hash validation failed [ 248.366340][T22319] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.7957: corrupted inode contents [ 248.378412][T22319] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.7957: mark_inode_dirty error [ 248.390000][T22319] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.7957: corrupted inode contents [ 248.402067][T22319] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.7957: mark_inode_dirty error [ 248.414244][T22319] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.7957: mark inode dirty (error -117) [ 248.426876][T22319] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 248.435981][T22319] EXT4-fs (loop0): 1 orphan inode deleted [ 248.442048][T14546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.452864][T14546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.462669][T14546] bond0 (unregistering): Released all slaves [ 248.476406][T22315] bridge_slave_0: default FDB implementation only supports local addresses [ 248.537797][T14546] hsr_slave_0: left promiscuous mode [ 248.543815][T14546] hsr_slave_1: left promiscuous mode [ 248.549434][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.556798][T14546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.564411][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.571787][T14546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.581590][T14546] veth1_vlan: left promiscuous mode [ 248.586856][T14546] veth0_vlan: left promiscuous mode [ 248.634748][T14546] team0 (unregistering): Port device team_slave_1 removed [ 248.644014][T14546] team0 (unregistering): Port device team_slave_0 removed [ 248.713332][T22281] chnl_net:caif_netlink_parms(): no params data found [ 248.753932][ T29] audit: type=1400 audit(248.736:11621): avc: denied { ioctl } for pid=22336 comm="syz.3.7963" path="socket:[72001]" dev="sockfs" ino=72001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.778356][ T29] audit: type=1400 audit(248.736:11622): avc: denied { bind } for pid=22336 comm="syz.3.7963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.825021][T22309] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.825293][T22281] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.838422][T22281] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.845591][T22281] bridge_slave_0: entered allmulticast mode [ 248.853301][T22281] bridge_slave_0: entered promiscuous mode [ 248.860556][T22281] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.867672][T22281] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.875293][T22281] bridge_slave_1: entered allmulticast mode [ 248.882097][T22281] bridge_slave_1: entered promiscuous mode [ 248.908707][T22281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.931081][T22281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.967363][T22281] team0: Port device team_slave_0 added [ 248.981559][T22281] team0: Port device team_slave_1 added [ 249.002496][T22339] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.010939][T22281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.017879][T22281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.043981][T22281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.061061][T22281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.068001][T22281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.094004][T22281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.122481][T14546] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.167400][T22281] hsr_slave_0: entered promiscuous mode [ 249.173431][T22281] hsr_slave_1: entered promiscuous mode [ 249.179590][T22281] debugfs: 'hsr0' already exists in 'hsr' [ 249.185387][T22281] Cannot create hsr debugfs directory [ 249.200068][T14546] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.211324][T22309] chnl_net:caif_netlink_parms(): no params data found [ 249.275185][T14546] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.306872][T22309] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.314086][T22309] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.321486][T22309] bridge_slave_0: entered allmulticast mode [ 249.327786][T22309] bridge_slave_0: entered promiscuous mode [ 249.336364][T22339] chnl_net:caif_netlink_parms(): no params data found [ 249.345090][T22309] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.352212][T22309] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.359453][T22309] bridge_slave_1: entered allmulticast mode [ 249.365858][T22309] bridge_slave_1: entered promiscuous mode [ 249.388101][T14546] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.410144][T22309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.422943][T22309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.451461][T22309] team0: Port device team_slave_0 added [ 249.462939][T22309] team0: Port device team_slave_1 added [ 249.468546][T22339] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.475750][T22339] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.483527][T22339] bridge_slave_0: entered allmulticast mode [ 249.490307][T22339] bridge_slave_0: entered promiscuous mode [ 249.502899][T22339] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.509974][T22339] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.517115][T22339] bridge_slave_1: entered allmulticast mode [ 249.523611][T22339] bridge_slave_1: entered promiscuous mode [ 249.542658][T22309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.549801][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.575888][T22309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.600925][T22309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.607859][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.633807][T22309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.647962][T22339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.664562][T22339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.680538][T14546] bridge_slave_1: left allmulticast mode [ 249.686271][T14546] bridge_slave_1: left promiscuous mode [ 249.692031][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.699974][T14546] bridge_slave_0: left allmulticast mode [ 249.705702][T14546] bridge_slave_0: left promiscuous mode [ 249.711379][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.744697][T14545] smc: removing ib device syz2 [ 249.789467][T14546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.800971][T14546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.810597][T14546] bond0 (unregistering): Released all slaves [ 249.850122][T18326] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.856394][T18326] syz2: Port: 1 Link DOWN [ 249.863800][T22309] hsr_slave_0: entered promiscuous mode [ 249.870958][T22309] hsr_slave_1: entered promiscuous mode [ 249.877056][T22309] debugfs: 'hsr0' already exists in 'hsr' [ 249.883449][T22309] Cannot create hsr debugfs directory [ 249.892066][T22339] team0: Port device team_slave_0 added [ 249.901119][T22339] team0: Port device team_slave_1 added [ 249.948498][T22339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.955507][T22339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.981464][T22339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.995039][T22339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.002046][T22339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.028012][T22339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.068717][T22339] hsr_slave_0: entered promiscuous mode [ 250.074836][T22339] hsr_slave_1: entered promiscuous mode [ 250.080685][T22339] debugfs: 'hsr0' already exists in 'hsr' [ 250.086416][T22339] Cannot create hsr debugfs directory [ 250.110376][T14546] hsr_slave_0: left promiscuous mode [ 250.116114][T14546] hsr_slave_1: left promiscuous mode [ 250.121693][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.129121][T14546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.136578][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.144030][T14546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.153883][T14546] veth1_macvtap: left promiscuous mode [ 250.159459][T14546] veth0_macvtap: left promiscuous mode [ 250.165005][T14546] veth1_vlan: left promiscuous mode [ 250.170293][T14546] veth0_vlan: left promiscuous mode [ 250.226545][T14546] team0 (unregistering): Port device team_slave_1 removed [ 250.235743][T14546] team0 (unregistering): Port device team_slave_0 removed [ 250.285539][T22281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.296929][T22281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.311305][T22309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.322800][T22281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.333677][T22281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.361180][T22309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.404458][T22281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.417386][T22281] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.426451][T14543] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.433588][T14543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.444487][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.451585][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.470977][T22309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.526966][T22281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.565766][T22309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.595753][T22281] veth0_vlan: entered promiscuous mode [ 250.604877][T22281] veth1_vlan: entered promiscuous mode [ 250.619134][T22281] veth0_macvtap: entered promiscuous mode [ 250.626333][T22281] veth1_macvtap: entered promiscuous mode [ 250.637557][T22281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.648047][T22281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.658651][T14543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.673781][T14543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.688298][T14543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.699989][T14543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.731267][T22391] __nla_validate_parse: 2 callbacks suppressed [ 250.731281][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7975'. [ 250.820875][T22309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.828448][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7972'. [ 250.842808][ T29] audit: type=1326 audit(250.826:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db4a6f749 code=0x7ffc0000 [ 250.865834][ T29] audit: type=1326 audit(250.826:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db4a6f749 code=0x7ffc0000 [ 250.888793][ T29] audit: type=1326 audit(250.826:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db4a6f749 code=0x7ffc0000 [ 250.915262][T22309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.935217][T22309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.957969][T22414] netlink: 'syz.3.7978': attribute type 3 has an invalid length. [ 251.012041][T22339] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.032731][T22309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.107150][T22339] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.199851][T22339] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.235161][T22339] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.317747][T22309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.343247][T22339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.384825][T22309] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.398766][T22339] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.410151][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.417220][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.434950][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.442053][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.451678][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.458721][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.468507][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.475591][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.497551][T22309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.507996][T22309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.605978][T22309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.622216][T22339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.700701][T22309] veth0_vlan: entered promiscuous mode [ 251.708356][T22309] veth1_vlan: entered promiscuous mode [ 251.728975][T22309] veth0_macvtap: entered promiscuous mode [ 251.738284][T22309] veth1_macvtap: entered promiscuous mode [ 251.749799][T22309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.761678][T22309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.773477][T14558] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.791219][T14558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.813097][T14558] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.822274][T14558] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.831882][T22339] veth0_vlan: entered promiscuous mode [ 251.857512][T22339] veth1_vlan: entered promiscuous mode [ 251.885998][T22339] veth0_macvtap: entered promiscuous mode [ 251.903517][T22339] veth1_macvtap: entered promiscuous mode [ 251.924752][T22339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.940467][T22339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.951731][T14562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.981001][T14562] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.002194][T14562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.019929][T14562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.168509][T22474] loop7: detected capacity change from 0 to 8192 [ 252.261316][T22478] netlink: 'syz.0.7985': attribute type 7 has an invalid length. [ 252.376975][T22491] loop3: detected capacity change from 0 to 128 [ 252.548071][T22503] loop0: detected capacity change from 0 to 512 [ 252.569558][T22503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.591321][T22503] EXT4-fs (loop0): 1 truncate cleaned up [ 252.713465][T22519] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8006'. [ 252.722549][T22519] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8006'. [ 252.751403][T22526] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8009'. [ 252.885146][T22530] infiniband syz0: set active [ 252.885611][T22540] loop0: detected capacity change from 0 to 512 [ 252.889897][T22530] infiniband syz0: added bond_slave_0 [ 252.905024][T22539] netlink: 'syz.7.8016': attribute type 21 has an invalid length. [ 252.926534][T22539] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8016'. [ 252.935633][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8016'. [ 252.945553][T22530] RDS/IB: syz0: added [ 252.959824][T22530] smc: adding ib device syz0 with port count 1 [ 252.994564][T22530] smc: ib device syz0 port 1 has no pnetid [ 253.020043][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 253.020057][ T29] audit: type=1400 audit(253.006:11666): avc: denied { read write } for pid=22549 comm="syz.7.8019" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 253.244753][T22565] @0Ù: renamed from bond_slave_1 (while UP) [ 253.292461][ T29] audit: type=1400 audit(253.276:11667): avc: denied { setattr } for pid=22566 comm="syz.0.8027" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 253.369528][T22574] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8030'. [ 253.397207][T22574] IPVS: Error connecting to the multicast addr [ 253.419833][ T29] audit: type=1400 audit(253.406:11668): avc: denied { firmware_load } for pid=22578 comm="syz.0.8033" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 253.461305][ T29] audit: type=1400 audit(253.446:11669): avc: denied { mount } for pid=22580 comm="syz.0.8034" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 253.721230][T14823] Process accounting resumed [ 253.794749][ T29] audit: type=1400 audit(253.776:11670): avc: denied { read } for pid=22613 comm="syz.0.8050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 253.834700][T22618] loop0: detected capacity change from 0 to 512 [ 253.849948][T22618] EXT4-fs: Ignoring removed oldalloc option [ 253.866411][ T29] audit: type=1326 audit(253.846:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22620 comm="syz.7.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0106aef749 code=0x7ffc0000 [ 253.943958][ T29] audit: type=1326 audit(253.876:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22620 comm="syz.7.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0106aef749 code=0x7ffc0000 [ 253.967025][ T29] audit: type=1326 audit(253.876:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22620 comm="syz.7.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0106aef749 code=0x7ffc0000 [ 253.990020][ T29] audit: type=1326 audit(253.876:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22620 comm="syz.7.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0106aef749 code=0x7ffc0000 [ 254.013138][ T29] audit: type=1326 audit(253.876:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22620 comm="syz.7.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0106aef749 code=0x7ffc0000 [ 254.070717][T22633] netlink: 'syz.0.8057': attribute type 4 has an invalid length. [ 254.167351][T22646] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.8065'. [ 254.171983][T22640] loop0: detected capacity change from 0 to 8192 [ 254.178963][T22646] netlink: zone id is out of range [ 254.188042][T22646] netlink: zone id is out of range [ 254.195804][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8064'. [ 254.205505][T22646] netlink: set zone limit has 8 unknown bytes [ 254.213549][T22649] loop1: detected capacity change from 0 to 2048 [ 254.248910][T22649] EXT4-fs (loop1): failed to initialize system zone (-117) [ 254.258307][T22649] EXT4-fs (loop1): mount failed [ 254.287725][T22658] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 254.789943][T22703] loop3: detected capacity change from 0 to 8192 [ 254.957645][T22719] loop7: detected capacity change from 0 to 1024 [ 255.012563][T22719] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 255.246416][T22744] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 255.293567][T22747] vhci_hcd vhci_hcd.3: invalid port number 9 [ 255.363112][T22751] loop7: detected capacity change from 0 to 2048 [ 255.400153][T22751] EXT4-fs mount: 34 callbacks suppressed [ 255.400191][T22751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.450042][T22765] xt_hashlimit: max too large, truncated to 1048576 [ 255.457326][T22765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.648189][T22768] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8113: bg 0: block 345: padding at end of block bitmap is not set [ 255.695421][T22768] EXT4-fs (loop7): Remounting filesystem read-only [ 255.852051][T22339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.029361][T22767] ================================================================== [ 256.037468][T22767] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 256.044772][T22767] [ 256.047087][T22767] write to 0xffff88811be15548 of 4 bytes by task 22771 on cpu 1: [ 256.054798][T22767] touch_atime+0x1e8/0x340 [ 256.059225][T22767] shmem_file_read_iter+0x477/0x540 [ 256.064433][T22767] copy_splice_read+0x442/0x660 [ 256.069284][T22767] splice_direct_to_actor+0x290/0x680 [ 256.074652][T22767] do_splice_direct+0xda/0x150 [ 256.079405][T22767] do_sendfile+0x380/0x650 [ 256.083821][T22767] __x64_sys_sendfile64+0x105/0x150 [ 256.089040][T22767] x64_sys_call+0x2db1/0x3000 [ 256.093724][T22767] do_syscall_64+0xd8/0x2c0 [ 256.098234][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.104139][T22767] [ 256.106465][T22767] read to 0xffff88811be15548 of 4 bytes by task 22767 on cpu 0: [ 256.114090][T22767] atime_needs_update+0x25f/0x3e0 [ 256.119143][T22767] touch_atime+0x4a/0x340 [ 256.123475][T22767] shmem_file_read_iter+0x477/0x540 [ 256.128670][T22767] copy_splice_read+0x442/0x660 [ 256.133507][T22767] splice_direct_to_actor+0x290/0x680 [ 256.138866][T22767] do_splice_direct+0xda/0x150 [ 256.143617][T22767] do_sendfile+0x380/0x650 [ 256.148025][T22767] __x64_sys_sendfile64+0x105/0x150 [ 256.153216][T22767] x64_sys_call+0x2db1/0x3000 [ 256.157884][T22767] do_syscall_64+0xd8/0x2c0 [ 256.162382][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.168266][T22767] [ 256.170572][T22767] value changed: 0x005ecad3 -> 0x00f76153 [ 256.176269][T22767] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.178577][T22767] Reported by Kernel Concurrency Sanitizer on: [ 256.184725][T22767] CPU: 0 UID: 0 PID: 22767 Comm: syz.1.8119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.196088][T22767] Tainted: [W]=WARN [ 256.199875][T22767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.210109][T22767] ================================================================== [ 256.220922][T22783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.269493][T22783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.344096][T22783] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 256.472669][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.582292][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.609441][T22783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.632050][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.683582][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.741707][ T53] bridge_slave_1: left allmulticast mode [ 256.747418][ T53] bridge_slave_1: left promiscuous mode [ 256.753112][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.760908][ T53] bridge_slave_0: left allmulticast mode [ 256.766526][ T53] bridge_slave_0: left promiscuous mode [ 256.772148][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.842652][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.852479][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.862266][ T53] bond0 (unregistering): Released all slaves [ 256.901602][ T53] IPVS: stopping backup sync thread 21269 ... [ 256.921730][ T53] hsr_slave_0: left promiscuous mode [ 256.927401][ T53] hsr_slave_1: left promiscuous mode [ 256.933062][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.940444][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.947947][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.955362][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.966039][ T53] veth1_macvtap: left promiscuous mode [ 256.971527][ T53] veth0_macvtap: left promiscuous mode [ 256.977000][ T53] veth1_vlan: left promiscuous mode [ 256.982354][ T53] veth0_vlan: left promiscuous mode [ 257.041380][ T53] team0 (unregistering): Port device team_slave_1 removed [ 257.050908][ T53] team0 (unregistering): Port device team_slave_0 removed [ 257.384004][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.452300][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.492507][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.532179][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.593419][ T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.621511][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.671625][ T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.722034][ T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.793728][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.831941][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.891834][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.931779][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.012811][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.082270][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.122205][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.171820][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.221702][ T53] bridge_slave_1: left allmulticast mode [ 258.227341][ T53] bridge_slave_1: left promiscuous mode [ 258.233091][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.240863][ T53] bridge_slave_0: left allmulticast mode [ 258.246510][ T53] bridge_slave_0: left promiscuous mode [ 258.252128][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.260276][ T53] bridge_slave_1: left allmulticast mode [ 258.265918][ T53] bridge_slave_1: left promiscuous mode [ 258.271572][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.279143][ T53] bridge_slave_0: left allmulticast mode [ 258.284853][ T53] bridge_slave_0: left promiscuous mode [ 258.290528][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.298903][ T53] bridge_slave_1: left allmulticast mode [ 258.304548][ T53] bridge_slave_1: left promiscuous mode [ 258.310228][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.317835][ T53] bridge_slave_0: left allmulticast mode [ 258.323502][ T53] bridge_slave_0: left promiscuous mode [ 258.329281][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.337383][ T53] bridge_slave_1: left allmulticast mode [ 258.343112][ T53] bridge_slave_1: left promiscuous mode [ 258.348731][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.356411][ T53] bridge_slave_0: left allmulticast mode [ 258.362079][ T53] bridge_slave_0: left promiscuous mode [ 258.367702][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.492103][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.501723][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.510982][ T53] bond0 (unregistering): Released all slaves [ 258.552107][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.561685][ T53] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 258.570514][ T53] bond0 (unregistering): Released all slaves [ 258.631936][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.641618][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.651009][ T53] bond0 (unregistering): Released all slaves [ 258.711135][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.720703][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.730231][ T53] bond0 (unregistering): Released all slaves [ 258.738035][ T23] syz0: Port: 1 Link DOWN [ 258.835749][ T53] hsr_slave_0: left promiscuous mode [ 258.841382][ T53] hsr_slave_1: left promiscuous mode [ 258.846866][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.854296][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.861876][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.869281][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.878345][ T53] hsr_slave_0: left promiscuous mode [ 258.884028][ T53] hsr_slave_1: left promiscuous mode [ 258.889747][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.897151][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.904697][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.912070][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.921977][ T53] hsr_slave_0: left promiscuous mode [ 258.927492][ T53] hsr_slave_1: left promiscuous mode [ 258.933086][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.940476][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.947856][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.955225][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.963953][ T53] hsr_slave_0: left promiscuous mode [ 258.969744][ T53] hsr_slave_1: left promiscuous mode [ 258.975295][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.982668][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.990019][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.997376][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.013811][ T53] veth1_macvtap: left promiscuous mode [ 259.019296][ T53] veth0_macvtap: left promiscuous mode [ 259.024760][ T53] veth1_vlan: left promiscuous mode [ 259.029999][ T53] veth0_vlan: left promiscuous mode [ 259.035715][ T53] veth1_macvtap: left promiscuous mode [ 259.041187][ T53] veth0_macvtap: left promiscuous mode [ 259.046709][ T53] veth1_vlan: left promiscuous mode [ 259.052177][ T53] veth0_vlan: left promiscuous mode [ 259.057891][ T53] veth1_macvtap: left promiscuous mode [ 259.063421][ T53] veth0_macvtap: left promiscuous mode [ 259.068934][ T53] veth1_vlan: left promiscuous mode [ 259.074169][ T53] veth0_vlan: left promiscuous mode [ 259.082409][ T53] veth1_macvtap: left promiscuous mode [ 259.087927][ T53] veth0_macvtap: left promiscuous mode [ 259.093502][ T53] veth1_vlan: left promiscuous mode [ 259.098725][ T53] veth0_vlan: left promiscuous mode [ 259.240194][ T53] team0 (unregistering): Port device team_slave_1 removed [ 259.249520][ T53] team0 (unregistering): Port device team_slave_0 removed [ 259.297940][ T53] team0 (unregistering): Port device team_slave_1 removed [ 259.307167][ T53] team0 (unregistering): Port device team_slave_0 removed [ 259.358710][ T53] team0 (unregistering): Port device team_slave_1 removed [ 259.368165][ T53] team0 (unregistering): Port device team_slave_0 removed [ 259.378943][T14543] smc: removing ib device syz0 [ 259.417216][ T53] team0 (unregistering): Port device team_slave_1 removed [ 259.426618][ T53] team0 (unregistering): Port device team_slave_0 removed