last executing test programs: 1m17.996661826s ago: executing program 32 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1m15.002516057s ago: executing program 33 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x800, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x2448, 0x43, 0x0, 0x20) 49.380149762s ago: executing program 34 (id=910): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = epoll_create(0x4) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0xb, 0x0, 0x0) 49.372600272s ago: executing program 5 (id=912): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 49.299959708s ago: executing program 5 (id=913): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x104) 49.248828182s ago: executing program 5 (id=914): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x2) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 48.949287337s ago: executing program 5 (id=925): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 48.550513979s ago: executing program 5 (id=920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r1, 0x0) 48.250220463s ago: executing program 35 (id=922): open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',msize=0x0000000000001000']) 47.959694536s ago: executing program 5 (id=930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 47.929686158s ago: executing program 36 (id=930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 42.649984514s ago: executing program 8 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 42.561260691s ago: executing program 8 (id=1058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x100000) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x800, r0, 0x0}]) shutdown(r0, 0x0) 42.484840827s ago: executing program 8 (id=1059): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)) ppoll(&(0x7f0000000300)=[{r2, 0x2220}], 0x1, &(0x7f0000000340), 0x0, 0x0) 42.466896009s ago: executing program 8 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 42.405573584s ago: executing program 8 (id=1062): writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 42.241154547s ago: executing program 8 (id=1070): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 42.185490852s ago: executing program 37 (id=1070): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 17.740826251s ago: executing program 9 (id=1933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002840)='./file1\x00', 0x20640, 0x131) 17.681082956s ago: executing program 9 (id=1936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000700000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 17.625501601s ago: executing program 9 (id=1938): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0xb29, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 17.561012956s ago: executing program 9 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x81901) 17.528772618s ago: executing program 9 (id=1943): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16.710122794s ago: executing program 2 (id=1985): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 16.485826482s ago: executing program 2 (id=1993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 16.025456299s ago: executing program 9 (id=2000): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16.025197449s ago: executing program 38 (id=2000): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15.912505769s ago: executing program 3 (id=2003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x2, 0x3, 0xa, 0x3}, {0x2c1, 0x40, 0xe, 0x9}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) 15.533301529s ago: executing program 2 (id=2011): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ab", 0x1}], 0x1) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 15.454870885s ago: executing program 2 (id=2014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 15.433978447s ago: executing program 2 (id=2016): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000ef18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) 15.047803328s ago: executing program 3 (id=2026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14.913518159s ago: executing program 2 (id=2029): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 14.876166092s ago: executing program 39 (id=2029): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 14.873550632s ago: executing program 3 (id=2032): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 14.814870457s ago: executing program 3 (id=2034): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 14.788637079s ago: executing program 3 (id=2036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cf", 0x8b}, {&(0x7f00000001c0)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e7ff02f7ca7ee", 0x3a}], 0x2}}], 0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14.386862551s ago: executing program 3 (id=2039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) 14.345271845s ago: executing program 40 (id=2039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) 1.133695509s ago: executing program 0 (id=2397): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.086605493s ago: executing program 0 (id=2398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.022131488s ago: executing program 0 (id=2413): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 894.791008ms ago: executing program 0 (id=2408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) 858.687711ms ago: executing program 0 (id=2410): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 780.226668ms ago: executing program 1 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 713.324193ms ago: executing program 1 (id=2418): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 662.000917ms ago: executing program 1 (id=2422): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r2 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc80, 0x4004080, 0x0, 0x0) 640.125659ms ago: executing program 1 (id=2424): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 598.706042ms ago: executing program 1 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) 566.163155ms ago: executing program 1 (id=2429): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 445.465054ms ago: executing program 4 (id=2445): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 444.760344ms ago: executing program 4 (id=2446): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) 422.457406ms ago: executing program 4 (id=2435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 388.873049ms ago: executing program 4 (id=2437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x3}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x7fff, 0x1, 0x8, 0x0, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 289.254397ms ago: executing program 4 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 268.451989ms ago: executing program 4 (id=2441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 188.660395ms ago: executing program 6 (id=2442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) 167.855007ms ago: executing program 6 (id=2447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 149.496838ms ago: executing program 7 (id=2448): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0xa000200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) process_vm_writev(0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000180)=""/6, 0x6}], 0x5, &(0x7f0000002940)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000740)=""/126, 0x7e}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000007c0)=""/72, 0x48}, {&(0x7f0000000840)=""/118, 0x76}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x7, 0x0) 112.426262ms ago: executing program 6 (id=2449): r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x8000002c) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r2, r0, 0x0) finit_module(r2, 0x0, 0x0) 112.244011ms ago: executing program 7 (id=2450): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x8, 0x0, 0x0) 112.111121ms ago: executing program 6 (id=2451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x22, 0x10, "3f77972ac4fc58927bc82cfd08af"}, @sack_perm={0x4, 0x2}, @generic={0x1, 0x9, "8bfbc627eeec28"}, @window={0x3, 0x3, 0x1}, @mptcp=@generic={0x61, 0xd, "a17e9619722074df9e0a15"}, @exp_fastopen={0xfe, 0xc, 0xf989, "3f921749b2fb1bc9"}, @sack={0x5, 0xa, [0x100, 0x4]}]}}}}}}}, 0x0) 111.891801ms ago: executing program 7 (id=2452): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f000059e000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r2, 0x2b3c7000) 68.586135ms ago: executing program 6 (id=2453): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 68.363785ms ago: executing program 7 (id=2454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) 67.947775ms ago: executing program 7 (id=2455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 51.664826ms ago: executing program 7 (id=2456): r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0x2, 0x19f}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 487.19µs ago: executing program 6 (id=2457): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 0s ago: executing program 0 (id=2458): setreuid(0xee01, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) kernel console output (not intermixed with test programs): 9] audit: type=1326 audit(1754867215.136:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05cf7dec23 code=0x7ffc0000 [ 71.701449][ T29] audit: type=1326 audit(1754867215.136:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05cf7dec23 code=0x7ffc0000 [ 71.724704][ T29] audit: type=1326 audit(1754867215.136:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cf7debe9 code=0x7ffc0000 [ 71.748065][ T29] audit: type=1326 audit(1754867215.136:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cf7debe9 code=0x7ffc0000 [ 71.771404][ T29] audit: type=1326 audit(1754867215.136:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05cf7debe9 code=0x7ffc0000 [ 71.794834][ T29] audit: type=1326 audit(1754867215.136:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cf7debe9 code=0x7ffc0000 [ 71.818308][ T29] audit: type=1326 audit(1754867215.136:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f05cf7debe9 code=0x7ffc0000 [ 71.976088][ T6170] loop6: detected capacity change from 0 to 512 [ 71.994051][ T6170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 72.025572][ T6170] EXT4-fs (loop6): 1 truncate cleaned up [ 72.031636][ T6170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.053173][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 72.084734][ T4347] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /118/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.120509][ T4347] EXT4-fs error (device loop6): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.156287][ T4347] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /118/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.189903][ T4347] EXT4-fs error (device loop6): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.216814][ T4347] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /118/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.246438][ T6189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.271677][ T4347] EXT4-fs error (device loop6): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.292920][ T4347] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /118/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.293162][ T6193] loop3: detected capacity change from 0 to 8192 [ 72.316598][ T4347] EXT4-fs error (device loop6): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.344901][ T4347] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /118/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.369076][ T6189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.383718][ T4347] EXT4-fs error (device loop6): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 72.427554][ T6189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.487981][ T6189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.541995][ T3557] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563076][ T3585] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.568037][ T4730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.591812][ T3585] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.603428][ T3585] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.746096][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.761512][ T3557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.129974][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 73.207504][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.214749][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.222312][ T6219] bridge_slave_0: entered allmulticast mode [ 73.229317][ T6219] bridge_slave_0: entered promiscuous mode [ 73.236485][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.243574][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.251083][ T6219] bridge_slave_1: entered allmulticast mode [ 73.258250][ T6219] bridge_slave_1: entered promiscuous mode [ 73.274483][ T6272] loop5: detected capacity change from 0 to 1024 [ 73.294553][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.306269][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.318289][ T6272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.343676][ T6219] team0: Port device team_slave_0 added [ 73.350783][ T6219] team0: Port device team_slave_1 added [ 73.370402][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.374055][ T6272] loop5: detected capacity change from 1024 to 0 [ 73.377502][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.403204][ T6272] bio_check_eod: 17 callbacks suppressed [ 73.403222][ T6272] syz.5.925: attempt to access beyond end of device [ 73.403222][ T6272] loop5: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 73.409653][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.410855][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.431808][ T6272] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.925: reading directory lblock 0 [ 73.439101][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.483683][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.554015][ T6272] syz.5.925: attempt to access beyond end of device [ 73.554015][ T6272] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 73.567229][ T6272] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 73.610016][ T6272] EXT4-fs (loop5): I/O error while writing superblock [ 73.648787][ T6219] hsr_slave_0: entered promiscuous mode [ 73.656345][ T4104] syz-executor: attempt to access beyond end of device [ 73.656345][ T4104] loop5: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 73.672106][ T4104] syz-executor: attempt to access beyond end of device [ 73.672106][ T4104] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 73.681105][ T6219] hsr_slave_1: entered promiscuous mode [ 73.691692][ T6219] debugfs: 'hsr0' already exists in 'hsr' [ 73.693401][ T4104] syz-executor: attempt to access beyond end of device [ 73.693401][ T4104] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 73.697501][ T6219] Cannot create hsr debugfs directory [ 73.718158][ T4104] syz-executor: attempt to access beyond end of device [ 73.718158][ T4104] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 73.719069][ T3557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.731766][ T4104] syz-executor: attempt to access beyond end of device [ 73.731766][ T4104] loop5: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 73.757374][ T4104] syz-executor: attempt to access beyond end of device [ 73.757374][ T4104] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 73.771226][ T4104] syz-executor: attempt to access beyond end of device [ 73.771226][ T4104] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 73.794455][ T4104] syz-executor: attempt to access beyond end of device [ 73.794455][ T4104] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 73.809383][ T4104] EXT4-fs error (device loop5): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 73.822634][ T4104] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 73.832306][ T4104] EXT4-fs (loop5): I/O error while writing superblock [ 73.839116][ T4104] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: IO failure [ 73.849186][ T4104] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 73.857590][ T4104] EXT4-fs (loop5): I/O error while writing superblock [ 73.864477][ T4104] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 73.877051][ T4104] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 73.887937][ T3557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.909422][ T4104] EXT4-fs (loop5): I/O error while writing superblock [ 73.942563][ T3572] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:44: unable to read itable block [ 73.965782][ T3572] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 73.974874][ T3572] EXT4-fs (loop5): I/O error while writing superblock [ 73.983048][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.993696][ T3557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.013347][ T4104] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 74.033456][ T4104] EXT4-fs (loop5): I/O error while writing superblock [ 74.042034][ T6279] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 74.065249][ T6219] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.094720][ T6219] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.108494][ T6219] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.126644][ T3557] bridge_slave_1: left allmulticast mode [ 74.132336][ T3557] bridge_slave_1: left promiscuous mode [ 74.138116][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.155749][ T3557] bridge_slave_0: left allmulticast mode [ 74.161425][ T3557] bridge_slave_0: left promiscuous mode [ 74.167243][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.287074][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.298938][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.326370][ T3557] bond0 (unregistering): Released all slaves [ 74.337173][ T6219] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.383268][ T3557] hsr_slave_0: left promiscuous mode [ 74.391752][ T3557] hsr_slave_1: left promiscuous mode [ 74.401782][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.409529][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.417241][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.424745][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.435600][ T3557] veth1_macvtap: left promiscuous mode [ 74.441075][ T3557] veth0_macvtap: left promiscuous mode [ 74.446795][ T3557] veth1_vlan: left promiscuous mode [ 74.452019][ T3557] veth0_vlan: left promiscuous mode [ 74.517229][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 74.526404][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 74.561857][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.581894][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.601108][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.608296][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.624210][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.631365][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.703326][ T6219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.714367][ T6219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.736046][ T6332] chnl_net:caif_netlink_parms(): no params data found [ 74.804563][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.811659][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.819168][ T6332] bridge_slave_0: entered allmulticast mode [ 74.826099][ T6332] bridge_slave_0: entered promiscuous mode [ 74.837956][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 74.847037][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.854214][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.861375][ T6332] bridge_slave_1: entered allmulticast mode [ 74.867925][ T6332] bridge_slave_1: entered promiscuous mode [ 74.902592][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.913324][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.940626][ T6332] team0: Port device team_slave_0 added [ 74.953630][ T6332] team0: Port device team_slave_1 added [ 74.967060][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.975999][ T3557] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.987353][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.994539][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.001783][ T6357] bridge_slave_0: entered allmulticast mode [ 75.008482][ T6357] bridge_slave_0: entered promiscuous mode [ 75.016202][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.023258][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.030482][ T6357] bridge_slave_1: entered allmulticast mode [ 75.037098][ T6357] bridge_slave_1: entered promiscuous mode [ 75.049082][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.056083][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.082081][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.093449][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.100456][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.126421][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.138814][ T3557] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.163538][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.174415][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.208158][ T3557] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.220115][ T6357] team0: Port device team_slave_0 added [ 75.227086][ T6357] team0: Port device team_slave_1 added [ 75.235230][ T6332] hsr_slave_0: entered promiscuous mode [ 75.241361][ T6332] hsr_slave_1: entered promiscuous mode [ 75.247875][ T6332] debugfs: 'hsr0' already exists in 'hsr' [ 75.253607][ T6332] Cannot create hsr debugfs directory [ 75.272807][ T3557] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.300778][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.307788][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.333793][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.345085][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.352057][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.378095][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.433538][ T6357] hsr_slave_0: entered promiscuous mode [ 75.441095][ T6357] hsr_slave_1: entered promiscuous mode [ 75.447601][ T6357] debugfs: 'hsr0' already exists in 'hsr' [ 75.453373][ T6357] Cannot create hsr debugfs directory [ 75.516643][ T6332] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 75.528022][ T6332] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 75.539617][ T6332] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 75.548660][ T6219] veth0_vlan: entered promiscuous mode [ 75.559429][ T6332] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 75.571592][ T3557] bridge_slave_1: left allmulticast mode [ 75.577367][ T3557] bridge_slave_1: left promiscuous mode [ 75.582994][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.592765][ T3557] bridge_slave_0: left allmulticast mode [ 75.598473][ T3557] bridge_slave_0: left promiscuous mode [ 75.604250][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.706893][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.716691][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.726409][ T3557] bond0 (unregistering): Released all slaves [ 75.735468][ T6219] veth1_vlan: entered promiscuous mode [ 75.781607][ T6219] veth0_macvtap: entered promiscuous mode [ 75.791512][ T6219] veth1_macvtap: entered promiscuous mode [ 75.801140][ T3557] hsr_slave_0: left promiscuous mode [ 75.807121][ T3557] hsr_slave_1: left promiscuous mode [ 75.812727][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.820184][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.827828][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.835266][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.845876][ T3557] veth1_macvtap: left promiscuous mode [ 75.851350][ T3557] veth0_macvtap: left promiscuous mode [ 75.857097][ T3557] veth1_vlan: left promiscuous mode [ 75.862357][ T3557] veth0_vlan: left promiscuous mode [ 75.929065][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 75.938937][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 75.980525][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.999730][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.007208][ T6357] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 76.024201][ T6357] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 76.033876][ T6357] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 76.042930][ T3586] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.051765][ T6357] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 76.064203][ T3586] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.077315][ T3586] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086267][ T3586] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.116118][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.128134][ T6332] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.143391][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.150509][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.163662][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.170791][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.213022][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 76.213036][ T29] audit: type=1326 audit(1754867219.716:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.253146][ T29] audit: type=1326 audit(1754867219.756:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.276637][ T29] audit: type=1326 audit(1754867219.756:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34933fec23 code=0x7ffc0000 [ 76.299885][ T29] audit: type=1326 audit(1754867219.756:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34933fec23 code=0x7ffc0000 [ 76.323274][ T29] audit: type=1326 audit(1754867219.756:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.346722][ T29] audit: type=1326 audit(1754867219.756:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.370196][ T29] audit: type=1326 audit(1754867219.756:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.393628][ T29] audit: type=1326 audit(1754867219.756:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.417652][ T29] audit: type=1326 audit(1754867219.756:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.440887][ T29] audit: type=1326 audit(1754867219.856:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.7.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34933febe9 code=0x7ffc0000 [ 76.467662][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.508933][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.538346][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.573586][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.580714][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.595679][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.602830][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.630903][ T6357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.641388][ T6357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.757378][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.805008][ T6332] veth0_vlan: entered promiscuous mode [ 76.825754][ T6332] veth1_vlan: entered promiscuous mode [ 76.835647][ T6475] loop3: detected capacity change from 0 to 512 [ 76.848453][ T6475] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 76.861947][ T6332] veth0_macvtap: entered promiscuous mode [ 76.877661][ T6332] veth1_macvtap: entered promiscuous mode [ 76.889655][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.902529][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.922728][ T3536] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.943625][ T3536] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.969386][ T3536] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.006961][ T3536] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.026530][ T6357] veth0_vlan: entered promiscuous mode [ 77.052143][ T6357] veth1_vlan: entered promiscuous mode [ 77.078154][ T6357] veth0_macvtap: entered promiscuous mode [ 77.087797][ T6357] veth1_macvtap: entered promiscuous mode [ 77.100740][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.124529][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.143539][ T3536] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162968][ T3536] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175239][ T3536] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184631][ T3557] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.352907][ T6522] loop7: detected capacity change from 0 to 512 [ 77.361455][ T6522] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 77.890556][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 77.900455][ T6598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.999'. [ 78.409318][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1022'. [ 78.422062][ T6648] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1022'. [ 78.571746][ T6660] loop9: detected capacity change from 0 to 4096 [ 78.606039][ T6660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.625339][ T6660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.010033][ T6680] loop8: detected capacity change from 0 to 128 [ 79.016758][ T6680] EXT4-fs: Ignoring removed nobh option [ 79.024977][ T6680] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.046580][ T6680] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.102836][ T6686] loop3: detected capacity change from 0 to 512 [ 79.121967][ T6686] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 79.130433][ T6686] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1038: invalid indirect mapped block 2683928664 (level 1) [ 79.147023][ T6686] EXT4-fs (loop3): 1 truncate cleaned up [ 79.153132][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.176516][ T6332] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.197121][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.305873][ T6701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.323547][ T6701] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.432395][ T6713] SELinux: ebitmap: truncated map [ 79.438453][ T6713] SELinux: failed to load policy [ 79.466894][ T6719] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 79.475117][ T6721] loop3: detected capacity change from 0 to 512 [ 79.482186][ T6721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 79.495270][ T6721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.501920][ T6721] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1052: Block bitmap for bg 0 marked uninitialized [ 79.515799][ T6721] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.526352][ T6721] EXT4-fs (loop3): 1 orphan inode deleted [ 79.532633][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.576305][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.842013][ T6745] netlink: zone id is out of range [ 79.847172][ T6745] netlink: zone id is out of range [ 79.852323][ T6745] netlink: zone id is out of range [ 79.857642][ T6745] netlink: zone id is out of range [ 79.862883][ T6745] netlink: zone id is out of range [ 79.868168][ T6745] netlink: zone id is out of range [ 79.873353][ T6745] netlink: zone id is out of range [ 79.939021][ T6701] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.953761][ T6753] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 79.975414][ T3586] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.998701][ T6701] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.029230][ T3586] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.069310][ T6701] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.108214][ T3586] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.146541][ T3572] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.163142][ T3586] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.182835][ T3572] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.199890][ T3572] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.211783][ T3572] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.248721][ T3586] bridge_slave_1: left allmulticast mode [ 80.252840][ T6779] loop9: detected capacity change from 0 to 8 [ 80.254708][ T3586] bridge_slave_1: left promiscuous mode [ 80.266424][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.274953][ T3586] bridge_slave_0: left allmulticast mode [ 80.280669][ T3586] bridge_slave_0: left promiscuous mode [ 80.286480][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.376388][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.386602][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.396414][ T3586] bond0 (unregistering): Released all slaves [ 80.435535][ T6787] loop0: detected capacity change from 0 to 512 [ 80.447352][ T6787] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1082: bad orphan inode 15 [ 80.460405][ T6787] ext4_test_bit(bit=14, block=18) = 1 [ 80.465989][ T6787] is_bad_inode(inode)=0 [ 80.470163][ T6787] NEXT_ORPHAN(inode)=1023 [ 80.474643][ T6787] max_ino=32 [ 80.477847][ T6787] i_nlink=0 [ 80.480999][ T3586] hsr_slave_0: left promiscuous mode [ 80.483185][ T6787] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.1082: corrupted xattr block 19: invalid header [ 80.500568][ T6787] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 80.509929][ T3586] hsr_slave_1: left promiscuous mode [ 80.515947][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.516277][ T6787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 80.523359][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.542938][ T6787] ext4 filesystem being mounted at /187/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 80.543220][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.561546][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.573728][ T3586] veth1_macvtap: left promiscuous mode [ 80.581552][ T3586] veth0_macvtap: left promiscuous mode [ 80.587464][ T3586] veth1_vlan: left promiscuous mode [ 80.593044][ T3586] veth0_vlan: left promiscuous mode [ 80.598937][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 80.676917][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 80.687025][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 80.758420][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 80.817492][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.824898][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.846054][ T6761] bridge_slave_0: entered allmulticast mode [ 80.862971][ T6761] bridge_slave_0: entered promiscuous mode [ 80.871893][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.879070][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.900310][ T6761] bridge_slave_1: entered allmulticast mode [ 80.911838][ T6761] bridge_slave_1: entered promiscuous mode [ 80.919698][ T6820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.930786][ T6820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.955475][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.971160][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.000148][ T6761] team0: Port device team_slave_0 added [ 81.006944][ T6761] team0: Port device team_slave_1 added [ 81.021324][ T6824] SELinux: ebitmap: truncated map [ 81.027775][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.028985][ T6824] SELinux: failed to load policy [ 81.034805][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.065723][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.077554][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.084608][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.110635][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.144062][ T6761] hsr_slave_0: entered promiscuous mode [ 81.152236][ T6761] hsr_slave_1: entered promiscuous mode [ 81.160305][ T6761] debugfs: 'hsr0' already exists in 'hsr' [ 81.166098][ T6761] Cannot create hsr debugfs directory [ 81.250719][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 81.250736][ T29] audit: type=1400 audit(2000000000.090:1411): avc: denied { execmem } for pid=6838 comm="syz.7.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.303985][ T29] audit: type=1400 audit(2000000000.140:1412): avc: denied { ioctl } for pid=6843 comm="syz.0.1103" path="socket:[17847]" dev="sockfs" ino=17847 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.334683][ T29] audit: type=1400 audit(2000000000.170:1413): avc: denied { write } for pid=6843 comm="syz.0.1103" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.335527][ T6844] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 81.355430][ T29] audit: type=1400 audit(2000000000.170:1414): avc: denied { read } for pid=6843 comm="syz.0.1103" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.383887][ T29] audit: type=1400 audit(2000000000.180:1415): avc: denied { name_bind } for pid=6842 comm="syz.9.1112" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.405799][ T29] audit: type=1400 audit(2000000000.180:1416): avc: denied { node_bind } for pid=6842 comm="syz.9.1112" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.502266][ T29] audit: type=1400 audit(2000000000.340:1417): avc: denied { create } for pid=6847 comm="syz.9.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.522369][ T29] audit: type=1400 audit(2000000000.340:1418): avc: denied { write } for pid=6847 comm="syz.9.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.542098][ T29] audit: type=1400 audit(2000000000.340:1419): avc: denied { connect } for pid=6847 comm="syz.9.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.590515][ T29] audit: type=1400 audit(2000000000.360:1420): avc: denied { create } for pid=6852 comm="syz.9.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.616657][ T6761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.631226][ T6761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.632066][ T6855] loop7: detected capacity change from 0 to 1024 [ 81.646226][ T6855] EXT4-fs: Ignoring removed nobh option [ 81.652595][ T6855] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.653727][ T6761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.673643][ T6761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.683597][ T6855] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.1106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 81.703816][ T6855] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1106: couldn't read orphan inode 11 (err -117) [ 81.716482][ T6855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.741381][ T6855] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.768930][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.773136][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.797284][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.809791][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.816896][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.830331][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.837476][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.860773][ T6875] loop9: detected capacity change from 0 to 7 [ 81.868638][ T6875] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.881977][ T6875] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.889883][ T6875] loop9: unable to read partition table [ 81.900798][ T6875] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 81.900798][ T6875] ) failed (rc=-5) [ 81.917557][ T6879] ref_ctr_offset mismatch. inode: 0xec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 81.962176][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.038252][ T6761] veth0_vlan: entered promiscuous mode [ 82.046723][ T6761] veth1_vlan: entered promiscuous mode [ 82.062913][ T6761] veth0_macvtap: entered promiscuous mode [ 82.070476][ T6761] veth1_macvtap: entered promiscuous mode [ 82.082013][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.093675][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.106075][ T3572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.117011][ T3572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.128252][ T3572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.140461][ T3572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.449680][ T6916] loop7: detected capacity change from 0 to 512 [ 82.466115][ T6916] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1125: bad orphan inode 15 [ 82.505997][ T6916] ext4_test_bit(bit=14, block=18) = 1 [ 82.511597][ T6916] is_bad_inode(inode)=0 [ 82.515823][ T6916] NEXT_ORPHAN(inode)=1023 [ 82.520325][ T6916] max_ino=32 [ 82.523535][ T6916] i_nlink=0 [ 82.527062][ T6916] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.1125: corrupted xattr block 19: invalid header [ 82.545681][ T6916] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 82.570645][ T6916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 82.658398][ T6916] ext4 filesystem being mounted at /47/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 82.702707][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 82.804255][ T6936] Falling back ldisc for ttyS3. [ 82.849948][ T6941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6941 comm=syz.3.1138 [ 82.908274][ T6948] ref_ctr_offset mismatch. inode: 0x512 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 83.206894][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1152'. [ 83.224226][ T6974] IPVS: Error joining to the multicast group [ 83.300278][ T6980] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 83.308241][ T6980] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 83.316050][ T6980] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1154'. [ 83.430886][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 83.757108][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.781006][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.479027][ T7074] SELinux: ebitmap: truncated map [ 84.485263][ T7074] SELinux: failed to load policy [ 84.549857][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.561219][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.662974][ T7094] bridge0: entered promiscuous mode [ 84.669158][ T7094] macsec1: entered promiscuous mode [ 84.676909][ T7094] bridge0: port 3(macsec1) entered blocking state [ 84.683404][ T7094] bridge0: port 3(macsec1) entered disabled state [ 84.690281][ T7094] macsec1: entered allmulticast mode [ 84.695614][ T7094] bridge0: entered allmulticast mode [ 84.702803][ T7094] macsec1: left allmulticast mode [ 84.708002][ T7094] bridge0: left allmulticast mode [ 84.716175][ T7094] bridge0: left promiscuous mode [ 85.154570][ T7100] Falling back ldisc for ttyS3. [ 85.525079][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 85.556222][ T3598] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.565262][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 85.574746][ T3598] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.603763][ T3598] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.625759][ T3598] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.721933][ T7124] SELinux: ebitmap: truncated map [ 85.734045][ T7124] SELinux: failed to load policy [ 85.798150][ T7130] sd 0:0:1:0: device reset [ 85.974202][ T7145] veth1_to_bond: entered allmulticast mode [ 85.986091][ T7144] veth1_to_bond: left allmulticast mode [ 86.025422][ T7147] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 86.033193][ T7147] netlink: 'syz.0.1233': attribute type 4 has an invalid length. [ 86.041065][ T7147] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1233'. [ 86.099549][ T7151] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 86.102825][ T7153] loop0: detected capacity change from 0 to 512 [ 86.107231][ T7151] SELinux: failed to load policy [ 86.141784][ T7153] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 86.175697][ T7153] System zones: 0-2, 18-18, 34-35 [ 86.232443][ T7153] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #4: comm syz.0.1236: iget: bad i_size value: 5910974510929920 [ 86.251813][ T7153] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1236: Bad quota inode: 4, type: 1 [ 86.265879][ T7153] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.285340][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 86.285354][ T29] audit: type=1400 audit(2000000005.130:1619): avc: denied { create } for pid=7175 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.293665][ T7153] EXT4-fs (loop0): mount failed [ 86.316937][ T29] audit: type=1400 audit(2000000005.130:1620): avc: denied { setopt } for pid=7175 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.336552][ T29] audit: type=1400 audit(2000000005.130:1621): avc: denied { write } for pid=7175 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.428051][ T7186] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 86.477844][ T29] audit: type=1400 audit(2000000005.200:1622): avc: denied { create } for pid=7177 comm="syz.7.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.478174][ T7190] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 86.497354][ T29] audit: type=1400 audit(2000000005.200:1623): avc: denied { setopt } for pid=7177 comm="syz.7.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.523809][ T29] audit: type=1400 audit(2000000005.240:1624): avc: denied { read } for pid=7181 comm="syz.3.1245" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 86.550899][ T29] audit: type=1400 audit(2000000005.240:1625): avc: denied { open } for pid=7181 comm="syz.3.1245" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 86.579982][ T29] audit: type=1400 audit(2000000005.270:1626): avc: denied { mac_admin } for pid=7185 comm="syz.3.1247" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.601157][ T29] audit: type=1400 audit(2000000005.280:1627): avc: denied { relabelto } for pid=7185 comm="syz.3.1247" name="file1" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 86.628018][ T29] audit: type=1400 audit(2000000005.280:1628): avc: denied { associate } for pid=7185 comm="syz.3.1247" name="file1" dev="tmpfs" ino=1356 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:utempter_exec_t:s0" [ 86.807249][ T7214] loop0: detected capacity change from 0 to 2048 [ 86.844942][ T7214] loop0: p1 < > p4 [ 86.859495][ T7214] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.978275][ T7233] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 86.978275][ T7233] program syz.2.1269 not setting count and/or reply_len properly [ 87.018045][ T7237] loop0: detected capacity change from 0 to 1024 [ 87.028439][ T7237] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.039444][ T7237] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.050996][ T7237] JBD2: no valid journal superblock found [ 87.056968][ T7237] EXT4-fs (loop0): Could not load journal inode [ 87.174988][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 87.184033][ T7257] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1279'. [ 87.195226][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 87.205265][ T7257] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1279'. [ 87.614414][ T7321] syzkaller1: entered promiscuous mode [ 87.619961][ T7321] syzkaller1: entered allmulticast mode [ 87.699036][ T7329] loop0: detected capacity change from 0 to 8192 [ 87.778059][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 87.787059][ T3395] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.901255][ T7351] loop9: detected capacity change from 0 to 164 [ 87.920001][ T7351] bio_check_eod: 17 callbacks suppressed [ 87.920018][ T7351] syz.9.1322: attempt to access beyond end of device [ 87.920018][ T7351] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 87.951153][ T7351] syz.9.1322: attempt to access beyond end of device [ 87.951153][ T7351] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.041574][ T7364] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 88.170452][ T7381] gtp0: entered promiscuous mode [ 88.285762][ T7389] loop7: detected capacity change from 0 to 512 [ 88.307191][ T7389] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.316338][ T7389] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 88.330632][ T7389] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 88.341907][ T7389] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 88.350397][ T7389] System zones: 0-2, 18-18, 34-35 [ 88.356622][ T7389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.647487][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.696784][ T7431] loop3: detected capacity change from 0 to 256 [ 88.768527][ T7436] SELinux: failed to load policy [ 88.922863][ T7456] loop7: detected capacity change from 0 to 764 [ 88.930200][ T7456] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.217020][ T7488] vhci_hcd: invalid port number 96 [ 89.222192][ T7488] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 89.791513][ T7510] __nla_validate_parse: 1 callbacks suppressed [ 89.791525][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1396'. [ 89.869230][ T7520] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 89.919459][ T7530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1406'. [ 90.082329][ T7550] loop3: detected capacity change from 0 to 512 [ 90.105348][ T7550] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 90.141669][ T7556] loop0: detected capacity change from 0 to 256 [ 90.159906][ T7550] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.167322][ T7556] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.180296][ T7550] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1415: Block bitmap for bg 0 marked uninitialized [ 90.215272][ T7550] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 90.215923][ T7559] tipc: Started in network mode [ 90.225744][ T7550] EXT4-fs (loop3): 1 orphan inode deleted [ 90.228909][ T7559] tipc: Node identity ac14140f, cluster identity 4711 [ 90.235066][ T7550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.256906][ T7559] tipc: New replicast peer: 255.255.255.255 [ 90.262995][ T7559] tipc: Enabled bearer , priority 10 [ 90.271376][ T7550] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 90.289849][ T7564] loop9: detected capacity change from 0 to 512 [ 90.293725][ T7550] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 90.314393][ T7564] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 90.336626][ T7564] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.351188][ T7564] EXT4-fs (loop9): 1 truncate cleaned up [ 90.357459][ T7564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.370515][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.382266][ T7564] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 90.382266][ T7564] program syz.9.1421 not setting count and/or reply_len properly [ 90.401192][ T7572] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 90.431809][ T6357] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.496478][ T7586] loop3: detected capacity change from 0 to 2048 [ 90.521070][ T7586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 90.575444][ T7604] loop7: detected capacity change from 0 to 512 [ 90.586334][ T7586] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.609354][ T7604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.612869][ T7586] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 90.634299][ T7586] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.634299][ T7586] [ 90.644065][ T7586] EXT4-fs (loop3): Total free blocks count 0 [ 90.650101][ T7586] EXT4-fs (loop3): Free/Dirty block details [ 90.656938][ T7586] EXT4-fs (loop3): free_blocks=2415919104 [ 90.660561][ T7604] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.662668][ T7586] EXT4-fs (loop3): dirty_blocks=32 [ 90.662686][ T7586] EXT4-fs (loop3): Block reservation details [ 90.684796][ T7586] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 90.702400][ T7604] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1438: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 90.725424][ T7604] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 90.731832][ T7617] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1443'. [ 90.734951][ T7604] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1438: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 90.760820][ T7604] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 90.774716][ T7604] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1438: bg 0: block 18: invalid block bitmap [ 90.792448][ T7622] bridge0: entered promiscuous mode [ 90.798048][ T7604] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1438: Failed to acquire dquot type 1 [ 90.811352][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 90.820594][ T7622] macsec1: entered promiscuous mode [ 90.838966][ T7604] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1438: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 90.858709][ T7604] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 90.869478][ T7604] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1438: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 90.887602][ T7604] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 90.897269][ T7622] bridge0: left promiscuous mode [ 90.934426][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.252570][ T7679] IPv4: Oversized IP packet from 127.202.26.0 [ 91.270236][ T7681] sd 0:0:1:0: device reset [ 91.309506][ T29] kauditd_printk_skb: 2106 callbacks suppressed [ 91.309525][ T29] audit: type=1400 audit(2000000010.150:3733): avc: denied { setattr } for pid=7686 comm="syz.9.1475" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.375450][ T29] audit: type=1400 audit(2000000010.220:3734): avc: denied { connect } for pid=7691 comm="syz.9.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.395467][ T3377] tipc: Node number set to 2886997007 [ 91.433256][ T29] audit: type=1400 audit(2000000010.270:3735): avc: denied { write } for pid=7694 comm="syz.2.1478" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.483325][ T29] audit: type=1326 audit(2000000010.320:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.506836][ T29] audit: type=1326 audit(2000000010.320:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.530966][ T29] audit: type=1326 audit(2000000010.330:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.554565][ T29] audit: type=1326 audit(2000000010.330:3739): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.578446][ T29] audit: type=1326 audit(2000000010.330:3740): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.602282][ T29] audit: type=1326 audit(2000000010.330:3741): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.626158][ T29] audit: type=1326 audit(2000000010.330:3742): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 91.692078][ T7715] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7715 comm=syz.2.1488 [ 91.722380][ T7717] loop9: detected capacity change from 0 to 512 [ 91.729529][ T7717] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 91.738474][ T7717] EXT4-fs (loop9): invalid journal inode [ 91.744809][ T7717] EXT4-fs (loop9): can't get journal size [ 91.751387][ T7717] EXT4-fs (loop9): 1 truncate cleaned up [ 91.758035][ T7717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.813088][ T6357] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.916333][ T7733] loop9: detected capacity change from 0 to 1024 [ 91.923020][ T7733] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.935407][ T7733] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 92.048497][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1503'. [ 92.057468][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1503'. [ 92.070403][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1503'. [ 92.070435][ T3591] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.079331][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1503'. [ 92.097613][ T3591] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.105986][ T3591] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.114391][ T3591] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.319332][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1514'. [ 92.329386][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1514'. [ 92.338946][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1514'. [ 92.492287][ T7788] loop7: detected capacity change from 0 to 764 [ 92.527170][ T7788] iso9660: Unknown parameter './file1' [ 93.728457][ T7883] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 93.728457][ T7883] program syz.3.1564 not setting count and/or reply_len properly [ 93.774998][ T7886] netlink: 'syz.7.1565': attribute type 1 has an invalid length. [ 93.782782][ T7886] netlink: 'syz.7.1565': attribute type 4 has an invalid length. [ 93.823749][ T7890] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 93.831559][ T7890] SELinux: failed to load policy [ 94.056707][ T7907] netlink: 'syz.2.1572': attribute type 10 has an invalid length. [ 94.064934][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.072302][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.083198][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.090306][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.097783][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.104956][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.126240][ T7907] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.145870][ T7908] bridge_slave_1: left allmulticast mode [ 94.151769][ T7908] bridge_slave_1: left promiscuous mode [ 94.157588][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.181804][ T7908] bridge_slave_0: left allmulticast mode [ 94.187617][ T7908] bridge_slave_0: left promiscuous mode [ 94.193360][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.218429][ T7908] bond0: (slave bridge0): Releasing backup interface [ 94.309331][ T7923] gretap0: entered promiscuous mode [ 94.314797][ T7923] macsec1: entered promiscuous mode [ 94.320188][ T7923] macsec1: entered allmulticast mode [ 94.325590][ T7923] gretap0: entered allmulticast mode [ 94.332661][ T7923] gretap0: left allmulticast mode [ 94.337949][ T7923] gretap0: left promiscuous mode [ 94.676641][ T7945] loop9: detected capacity change from 0 to 128 [ 94.683557][ T7945] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.717636][ T7945] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.980343][ T7977] vlan2: entered allmulticast mode [ 94.985585][ T7977] bridge_slave_0: entered allmulticast mode [ 95.105144][ T7987] __nla_validate_parse: 12 callbacks suppressed [ 95.105164][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 95.127732][ T7987] gretap0: entered promiscuous mode [ 95.133076][ T7987] macsec1: entered promiscuous mode [ 95.138976][ T7987] macsec1: entered allmulticast mode [ 95.144445][ T7987] gretap0: entered allmulticast mode [ 95.152176][ T7987] gretap0: left allmulticast mode [ 95.157496][ T7987] gretap0: left promiscuous mode [ 95.192930][ T7992] loop7: detected capacity change from 0 to 512 [ 95.223210][ T7992] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 95.235633][ T7992] System zones: 0-2, 18-18, 34-35 [ 95.256507][ T7992] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #4: comm syz.7.1612: iget: bad i_size value: 5910974510929920 [ 95.273121][ T7992] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.1612: Bad quota inode: 4, type: 1 [ 95.285801][ T7992] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.301007][ T7992] EXT4-fs (loop7): mount failed [ 95.380135][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 95.390814][ T8010] IPVS: Error joining to the multicast group [ 95.402912][ T8012] bond1: entered promiscuous mode [ 95.408104][ T8012] bond1: entered allmulticast mode [ 95.414300][ T8012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.424760][ T8012] bond1 (unregistering): Released all slaves [ 95.771649][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1634'. [ 95.791807][ T8050] IPVS: Error joining to the multicast group [ 95.942711][ T8073] loop9: detected capacity change from 0 to 2048 [ 95.994423][ T8073] loop9: p1 < > p4 [ 95.998958][ T8073] loop9: p4 size 8388608 extends beyond EOD, truncated [ 96.171280][ T8085] loop9: detected capacity change from 0 to 7 [ 96.178552][ T8085] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.187449][ T8085] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.195353][ T8085] loop9: unable to read partition table [ 96.201261][ T8085] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 96.201261][ T8085] ) failed (rc=-5) [ 96.237475][ T8093] loop9: detected capacity change from 0 to 1024 [ 96.264749][ T8093] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.268183][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 96.275840][ T8093] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.296012][ T8093] JBD2: no valid journal superblock found [ 96.301757][ T8093] EXT4-fs (loop9): Could not load journal inode [ 96.375625][ T8109] loop9: detected capacity change from 0 to 512 [ 96.421566][ T8109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.452484][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 96.452499][ T29] audit: type=1326 audit(2000000015.290:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 96.482384][ T8109] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.492966][ T29] audit: type=1326 audit(2000000015.290:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 96.516475][ T29] audit: type=1326 audit(2000000015.290:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 96.540004][ T29] audit: type=1326 audit(2000000015.290:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 96.548131][ T8109] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.1662: iget: bad i_size value: 2533274857506816 [ 96.563444][ T29] audit: type=1326 audit(2000000015.300:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.2.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc038ceebe9 code=0x7ffc0000 [ 96.722732][ T8136] loop3: detected capacity change from 0 to 512 [ 96.741292][ T8136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 96.759696][ T8136] System zones: 0-2, 18-18, 34-35 [ 96.776178][ T8136] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #4: comm syz.3.1673: iget: bad i_size value: 5910974510929920 [ 96.818962][ T8136] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1673: Bad quota inode: 4, type: 1 [ 96.854932][ T6357] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.868320][ T8136] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.953794][ T8136] EXT4-fs (loop3): mount failed [ 97.001036][ T8162] syzkaller1: entered promiscuous mode [ 97.006913][ T8162] syzkaller1: entered allmulticast mode [ 97.274966][ T29] audit: type=1326 audit(2000000016.110:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.9.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb23e985ba7 code=0x7ffc0000 [ 97.298420][ T29] audit: type=1326 audit(2000000016.110:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.9.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb23e92add9 code=0x7ffc0000 [ 97.321761][ T29] audit: type=1326 audit(2000000016.110:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.9.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e98ebe9 code=0x7ffc0000 [ 97.345292][ T29] audit: type=1326 audit(2000000016.120:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.9.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb23e985ba7 code=0x7ffc0000 [ 97.368708][ T29] audit: type=1326 audit(2000000016.120:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.9.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb23e92add9 code=0x7ffc0000 [ 97.397143][ T8212] loop9: detected capacity change from 0 to 512 [ 97.431750][ T8212] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.440915][ T8212] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 97.479763][ T8212] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 97.489196][ T8212] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 97.497473][ T8212] System zones: 0-2, 18-18, 34-35 [ 97.504951][ T8212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.532955][ T8223] loop3: detected capacity change from 0 to 2048 [ 97.552398][ T6357] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.575302][ T8223] loop3: p1 < > p4 [ 97.580741][ T8223] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.648646][ T8245] loop9: detected capacity change from 0 to 164 [ 97.663446][ T8245] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.945636][ T8282] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.991801][ T8288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8288 comm=syz.0.1741 [ 98.039628][ T8282] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.052450][ T8291] SELinux: failed to load policy [ 98.112964][ T8282] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.130823][ T8303] gtp0: entered promiscuous mode [ 98.141067][ T8305] netlink: 'syz.2.1759': attribute type 1 has an invalid length. [ 98.177096][ T8282] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.261505][ T3598] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.270163][ T3491] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285638][ T3491] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.302775][ T3491] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.356647][ T8321] bridge0: entered promiscuous mode [ 98.362038][ T8321] macsec1: entered promiscuous mode [ 98.368237][ T8321] bridge0: port 3(macsec1) entered blocking state [ 98.374731][ T8321] bridge0: port 3(macsec1) entered disabled state [ 98.381404][ T8321] macsec1: entered allmulticast mode [ 98.386736][ T8321] bridge0: entered allmulticast mode [ 98.392656][ T8321] macsec1: left allmulticast mode [ 98.397738][ T8321] bridge0: left allmulticast mode [ 98.403242][ T8321] bridge0: left promiscuous mode [ 98.546286][ T8325] syzkaller1: entered promiscuous mode [ 98.551801][ T8325] syzkaller1: entered allmulticast mode [ 99.389285][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 99.414810][ T3398] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.015507][ T8379] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.085603][ T8379] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.145572][ T8379] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.226422][ T8379] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.289064][ T8402] sd 0:0:1:0: device reset [ 100.340963][ T3598] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.376409][ T3598] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.412510][ T3598] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.431073][ T3598] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.588254][ T8438] bridge0: entered promiscuous mode [ 100.593513][ T8438] macsec1: entered promiscuous mode [ 100.600344][ T8438] bridge0: left promiscuous mode [ 100.804455][ T8446] sd 0:0:1:0: device reset [ 100.852516][ T8451] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.908500][ T8451] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.956751][ T8451] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.017076][ T8451] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.080385][ T31] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.091253][ T31] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102755][ T31] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.113774][ T31] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342441][ T8463] loop9: detected capacity change from 0 to 1024 [ 101.350967][ T8463] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.361949][ T8463] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.373587][ T8463] JBD2: no valid journal superblock found [ 101.379435][ T8463] EXT4-fs (loop9): Could not load journal inode [ 101.400412][ T8463] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 101.460562][ T8476] sd 0:0:1:0: device reset [ 101.532641][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 101.532657][ T29] audit: type=1400 audit(2000000020.370:4108): avc: denied { read } for pid=8486 comm="syz.9.1835" dev="nsfs" ino=4026533729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.561378][ T29] audit: type=1400 audit(2000000020.370:4109): avc: denied { open } for pid=8486 comm="syz.9.1835" path="net:[4026533729]" dev="nsfs" ino=4026533729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.587779][ T29] audit: type=1400 audit(2000000020.430:4110): avc: denied { create } for pid=8486 comm="syz.9.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.642497][ T8489] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.652400][ T8489] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.677593][ T29] audit: type=1400 audit(2000000020.520:4111): avc: denied { name_bind } for pid=8491 comm="syz.2.1837" src=24098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 101.699522][ T29] audit: type=1400 audit(2000000020.520:4112): avc: denied { node_bind } for pid=8491 comm="syz.2.1837" src=24098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 101.742742][ T8493] syz.7.1836: attempt to access beyond end of device [ 101.742742][ T8493] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 101.758372][ T8489] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.760825][ T8493] FAT-fs (loop15): unable to read boot sector [ 101.768235][ T8489] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.784075][ T29] audit: type=1400 audit(2000000020.580:4113): avc: denied { create } for pid=8490 comm="syz.7.1836" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.804829][ T29] audit: type=1400 audit(2000000020.580:4114): avc: denied { mounton } for pid=8490 comm="syz.7.1836" path="/174/file0" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.850524][ T29] audit: type=1400 audit(2000000020.690:4115): avc: denied { unlink } for pid=6219 comm="syz-executor" name="file0" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.879192][ T8489] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.889062][ T8489] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.902185][ T8499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1838'. [ 101.911592][ T8499] unsupported nlmsg_type 40 [ 101.913804][ T29] audit: type=1400 audit(2000000020.720:4116): avc: denied { create } for pid=8494 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.936401][ T29] audit: type=1400 audit(2000000020.740:4117): avc: denied { write } for pid=8494 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.005814][ T8489] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.015698][ T8489] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.035666][ T8505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8505 comm=syz.7.1842 [ 102.092427][ T3536] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.100729][ T3536] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.109510][ T3536] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.117756][ T3536] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.127988][ T3536] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.136397][ T3536] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.146452][ T3536] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.154776][ T3536] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.183708][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.192435][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.289693][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1850'. [ 102.384132][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1850'. [ 102.737095][ T8542] loop9: detected capacity change from 0 to 512 [ 102.753085][ T8542] EXT4-fs: Ignoring removed oldalloc option [ 102.759161][ T8542] ext4: Unknown parameter 'smackfsfloor' [ 103.118222][ T8588] loop9: detected capacity change from 0 to 512 [ 103.136101][ T8588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.155537][ T8588] ext4 filesystem being mounted at /204/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.188078][ T8599] openvswitch: netlink: Message has 6 unknown bytes. [ 103.248554][ T8608] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 103.261481][ T6357] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.271121][ T8609] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1889'. [ 103.283329][ T8615] IPv6: Can't replace route, no match found [ 103.427939][ T8640] IPVS: stopping master sync thread 8642 ... [ 103.434605][ T8642] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 103.458841][ T8643] loop7: detected capacity change from 0 to 2048 [ 103.495122][ T8643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.589954][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.698236][ T8666] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1912'. [ 103.778540][ T8675] loop7: detected capacity change from 0 to 1024 [ 103.807268][ T8675] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.858512][ T8675] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1916: Allocating blocks 497-513 which overlap fs metadata [ 104.000590][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.482032][ T8718] sd 0:0:1:0: device reset [ 104.722542][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 104.851495][ T8747] ref_ctr_offset mismatch. inode: 0x419 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 105.259512][ T8787] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1967'. [ 105.292149][ T8714] 9pnet_fd: p9_fd_create_tcp (8714): problem connecting socket to 127.0.0.1 [ 105.364341][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1973'. [ 105.373344][ T8803] netlink: 'syz.0.1973': attribute type 7 has an invalid length. [ 105.381361][ T8803] netlink: 'syz.0.1973': attribute type 8 has an invalid length. [ 105.389480][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 105.518329][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 105.910420][ T8864] loop3: detected capacity change from 0 to 764 [ 105.933459][ T8864] iso9660: Unknown parameter './file1' [ 106.148848][ T3589] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.158722][ T3589] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.222157][ T3589] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.232041][ T3589] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.288052][ T3589] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.297866][ T3589] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.357860][ T3589] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.367832][ T3589] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.387988][ T8881] rdma_op ffff88812255d980 conn xmit_rdma 0000000000000000 [ 106.496084][ T8889] ALSA: seq fatal error: cannot create timer (-22) [ 106.530390][ T3589] bridge_slave_1: left allmulticast mode [ 106.536156][ T3589] bridge_slave_1: left promiscuous mode [ 106.541883][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.566564][ T3589] bridge_slave_0: left allmulticast mode [ 106.572253][ T3589] bridge_slave_0: left promiscuous mode [ 106.578021][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.717554][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.727680][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.745850][ T3589] bond0 (unregistering): Released all slaves [ 106.796113][ T3589] hsr_slave_0: left promiscuous mode [ 106.812500][ T3589] hsr_slave_1: left promiscuous mode [ 106.820676][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.828172][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.837278][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.844778][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.855014][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 106.855028][ T29] audit: type=1400 audit(2000000025.700:4293): avc: denied { create } for pid=8916 comm="syz.7.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.881292][ T3589] veth1_macvtap: left promiscuous mode [ 106.882073][ T29] audit: type=1400 audit(2000000025.700:4294): avc: denied { connect } for pid=8916 comm="syz.7.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.906600][ T3589] veth0_macvtap: left promiscuous mode [ 106.912155][ T3589] veth1_vlan: left promiscuous mode [ 106.917656][ T3589] veth0_vlan: left promiscuous mode [ 106.999107][ T3589] team0 (unregistering): Port device team_slave_1 removed [ 107.011008][ T3589] team0 (unregistering): Port device team_slave_0 removed [ 107.108122][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 107.180843][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.187998][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.195840][ T8871] bridge_slave_0: entered allmulticast mode [ 107.201419][ T29] audit: type=1400 audit(2000000026.040:4295): avc: denied { create } for pid=8938 comm="syz.7.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.202460][ T8871] bridge_slave_0: entered promiscuous mode [ 107.228066][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.235422][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.242737][ T8871] bridge_slave_1: entered allmulticast mode [ 107.249589][ T8871] bridge_slave_1: entered promiscuous mode [ 107.256182][ T29] audit: type=1400 audit(2000000026.100:4296): avc: denied { ioctl } for pid=8938 comm="syz.7.2028" path="socket:[26644]" dev="sockfs" ino=26644 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.302501][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.314434][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.346862][ T8947] loop7: detected capacity change from 0 to 512 [ 107.355240][ T8871] team0: Port device team_slave_0 added [ 107.361780][ T8950] __nla_validate_parse: 1 callbacks suppressed [ 107.361793][ T8950] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2032'. [ 107.384892][ T8871] team0: Port device team_slave_1 added [ 107.419015][ T8947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.432678][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.439894][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.465922][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.477192][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.484189][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.495793][ T8947] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.510160][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.592866][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.608466][ T8871] hsr_slave_0: entered promiscuous mode [ 107.622880][ T8871] hsr_slave_1: entered promiscuous mode [ 107.632817][ T8871] debugfs: 'hsr0' already exists in 'hsr' [ 107.638600][ T8871] Cannot create hsr debugfs directory [ 107.842930][ T8955] chnl_net:caif_netlink_parms(): no params data found [ 107.880575][ T29] audit: type=1400 audit(2000000026.720:4297): avc: denied { create } for pid=8978 comm="syz.7.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.910518][ T29] audit: type=1400 audit(2000000026.750:4298): avc: denied { connect } for pid=8978 comm="syz.7.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.930476][ T29] audit: type=1400 audit(2000000026.750:4299): avc: denied { read } for pid=8978 comm="syz.7.2042" path="socket:[25789]" dev="sockfs" ino=25789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.960488][ T29] audit: type=1400 audit(2000000026.800:4300): avc: denied { write } for pid=8978 comm="syz.7.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.001254][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.008456][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.016050][ T8955] bridge_slave_0: entered allmulticast mode [ 108.022626][ T8955] bridge_slave_0: entered promiscuous mode [ 108.030019][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.037134][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.044573][ T8955] bridge_slave_1: entered allmulticast mode [ 108.052728][ T8955] bridge_slave_1: entered promiscuous mode [ 108.067462][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2043'. [ 108.082625][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.155291][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.165453][ T8871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.195099][ T8871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.214672][ T8871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.239023][ T8955] team0: Port device team_slave_0 added [ 108.245747][ T8955] team0: Port device team_slave_1 added [ 108.251526][ T8871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.291883][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.298883][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.324851][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.337730][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.344722][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.371079][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.476001][ T29] audit: type=1400 audit(2000000027.320:4301): avc: denied { bind } for pid=9007 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.481186][ T8955] hsr_slave_0: entered promiscuous mode [ 108.502073][ T8955] hsr_slave_1: entered promiscuous mode [ 108.508287][ T8955] debugfs: 'hsr0' already exists in 'hsr' [ 108.514069][ T8955] Cannot create hsr debugfs directory [ 108.570019][ T29] audit: type=1400 audit(2000000027.400:4302): avc: denied { connect } for pid=9011 comm="+}[@" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.609842][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.630659][ T8980] chnl_net:caif_netlink_parms(): no params data found [ 108.679358][ T8871] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.731643][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.738759][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.751535][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.758820][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.766099][ T8980] bridge_slave_0: entered allmulticast mode [ 108.772604][ T8980] bridge_slave_0: entered promiscuous mode [ 108.779741][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.786901][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.794256][ T8980] bridge_slave_1: entered allmulticast mode [ 108.800782][ T8980] bridge_slave_1: entered promiscuous mode [ 108.816590][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.823812][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.867109][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.886008][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.912756][ T9044] netlink: 'syz.7.2059': attribute type 83 has an invalid length. [ 108.922366][ T8955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.941947][ T8955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.951833][ T8980] team0: Port device team_slave_0 added [ 108.957808][ T8955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.967000][ T8955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.984221][ T8980] team0: Port device team_slave_1 added [ 109.016524][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.023574][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.049548][ T8980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.068413][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.075523][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.101514][ T8980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.119945][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.178348][ T8980] hsr_slave_0: entered promiscuous mode [ 109.184733][ T8980] hsr_slave_1: entered promiscuous mode [ 109.190762][ T8980] debugfs: 'hsr0' already exists in 'hsr' [ 109.196522][ T8980] Cannot create hsr debugfs directory [ 109.208980][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.243829][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.269435][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.276567][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.303390][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.310542][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.333175][ T8871] veth0_vlan: entered promiscuous mode [ 109.357597][ T8871] veth1_vlan: entered promiscuous mode [ 109.389167][ T8871] veth0_macvtap: entered promiscuous mode [ 109.403451][ T8871] veth1_macvtap: entered promiscuous mode [ 109.419861][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.430973][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.442334][ T3595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.453193][ T3595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.466138][ T3595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.480631][ T3595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.494935][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.597244][ T8980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.611024][ T8980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.622709][ T8980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.633753][ T8980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.700130][ T8955] veth0_vlan: entered promiscuous mode [ 109.716349][ T8955] veth1_vlan: entered promiscuous mode [ 109.729497][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.742282][ T8980] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.759029][ T8955] veth0_macvtap: entered promiscuous mode [ 109.774996][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.782143][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.795080][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.802189][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.816852][ T8955] veth1_macvtap: entered promiscuous mode [ 109.845247][ T8980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.859173][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.873591][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.884879][ T3536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.919285][ T9131] serio: Serial port ptm0 [ 109.928087][ T3536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.947375][ T3536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961720][ T3536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.981893][ T8980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.997773][ T9141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9141 comm=syz.4.2030 [ 110.118375][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 110.137129][ T9162] bridge0: port 3(macvlan2) entered blocking state [ 110.143772][ T9162] bridge0: port 3(macvlan2) entered disabled state [ 110.154932][ T9162] macvlan2: entered allmulticast mode [ 110.160343][ T9162] bridge0: entered allmulticast mode [ 110.168530][ T9162] macvlan2: left allmulticast mode [ 110.168548][ T9162] bridge0: left allmulticast mode [ 110.252800][ T8980] veth0_vlan: entered promiscuous mode [ 110.267374][ T8980] veth1_vlan: entered promiscuous mode [ 110.287773][ T8980] veth0_macvtap: entered promiscuous mode [ 110.297050][ T8980] veth1_macvtap: entered promiscuous mode [ 110.308414][ T8980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.318948][ T8980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.348142][ T3546] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.366748][ T3551] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.386123][ T3551] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.398685][ T3551] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.543190][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 110.552258][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 111.117630][ T9270] bond1: entered promiscuous mode [ 111.122731][ T9270] bond1: entered allmulticast mode [ 111.130690][ T9270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.142122][ T9270] bond1 (unregistering): Released all slaves [ 111.240608][ T9277] loop4: detected capacity change from 0 to 1024 [ 111.253489][ T9277] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.269414][ T9277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.340677][ T8955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.383078][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 111.392085][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 111.407595][ T3551] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.417782][ T3551] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.426504][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 111.431681][ T3551] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.435405][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 111.464713][ T3551] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.662696][ T9322] vlan2: entered allmulticast mode [ 111.718112][ T9328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.781934][ T9334] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.938413][ T9347] loop1: detected capacity change from 0 to 1024 [ 111.945979][ T9347] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.956919][ T9347] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.969378][ T9347] JBD2: no valid journal superblock found [ 111.975185][ T9347] EXT4-fs (loop1): Could not load journal inode [ 111.990400][ T9347] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 112.156552][ T9355] vlan2: entered allmulticast mode [ 112.300912][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 112.300930][ T29] audit: type=1326 audit(2000000031.140:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ede49ebe9 code=0x7ffc0000 [ 112.303291][ T9368] sd 0:0:1:0: device reset [ 112.307703][ T29] audit: type=1326 audit(2000000031.140:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ede49d550 code=0x7ffc0000 [ 112.358887][ T29] audit: type=1326 audit(2000000031.140:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ede49ebe9 code=0x7ffc0000 [ 112.382489][ T29] audit: type=1326 audit(2000000031.140:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ede49ebe9 code=0x7ffc0000 [ 112.406001][ T29] audit: type=1326 audit(2000000031.140:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ede49ebe9 code=0x7ffc0000 [ 112.430419][ T29] audit: type=1326 audit(2000000031.200:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ede49ebe9 code=0x7ffc0000 [ 112.454049][ T29] audit: type=1326 audit(2000000031.200:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ede49ebe9 code=0x7ffc0000 [ 112.480925][ T3536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.491316][ T3536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.563165][ T3536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.573598][ T3536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.586631][ T9377] loop6: detected capacity change from 0 to 256 [ 112.594352][ T9377] msdos: Unknown parameter '0x0000000000000000BJ [ 112.594352][ T9377] #yB͐`H' [ 112.642291][ T3536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.652705][ T3536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.722232][ T3536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.732600][ T3536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.756574][ T9387] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2176'. [ 112.769572][ T9387] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2176'. [ 112.982453][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.001367][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.012754][ T3536] bond0 (unregistering): Released all slaves [ 113.034165][ T9401] bond1: entered promiscuous mode [ 113.039268][ T9401] bond1: entered allmulticast mode [ 113.046539][ T9401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.061018][ T9401] bond1 (unregistering): Released all slaves [ 113.098125][ T3536] hsr_slave_0: left promiscuous mode [ 113.103607][ T29] audit: type=1326 audit(2000000031.940:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37f265ba7 code=0x7ffc0000 [ 113.127088][ T29] audit: type=1326 audit(2000000031.940:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37f20add9 code=0x7ffc0000 [ 113.150596][ T29] audit: type=1326 audit(2000000031.940:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.1.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37f265ba7 code=0x7ffc0000 [ 113.203953][ T3536] hsr_slave_1: left promiscuous mode [ 113.209994][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.217626][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.244614][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.252042][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.274403][ T3536] veth1_macvtap: left promiscuous mode [ 113.277169][ T9420] loop4: detected capacity change from 0 to 2048 [ 113.280157][ T3536] veth0_macvtap: left promiscuous mode [ 113.302221][ T3536] veth1_vlan: left promiscuous mode [ 113.307529][ T3536] veth0_vlan: left promiscuous mode [ 113.350231][ T9420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 113.416468][ T9420] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.474423][ T9420] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 113.486873][ T9420] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.486873][ T9420] [ 113.496629][ T9420] EXT4-fs (loop4): Total free blocks count 0 [ 113.502627][ T9420] EXT4-fs (loop4): Free/Dirty block details [ 113.508559][ T9420] EXT4-fs (loop4): free_blocks=2415919104 [ 113.514410][ T9420] EXT4-fs (loop4): dirty_blocks=32 [ 113.519535][ T9420] EXT4-fs (loop4): Block reservation details [ 113.525671][ T9420] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 113.536330][ T9428] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2184'. [ 113.577117][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 113.588093][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 113.618821][ T8955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 114.070653][ T9451] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 114.087340][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.094603][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.119046][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.126197][ T9451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.133543][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.140691][ T9451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.144302][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2194'. [ 114.172122][ T9451] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.205765][ T9453] bridge_slave_1: left allmulticast mode [ 114.211561][ T9453] bridge_slave_1: left promiscuous mode [ 114.217246][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.266282][ T9453] bridge_slave_0: left promiscuous mode [ 114.272081][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.285513][ T9453] bond0: (slave bridge0): Releasing backup interface [ 114.343997][ T9456] bond1: entered promiscuous mode [ 114.349076][ T9456] bond1: entered allmulticast mode [ 114.354473][ T9456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.365261][ T9456] bond1 (unregistering): Released all slaves [ 114.481948][ T9463] loop6: detected capacity change from 0 to 2048 [ 114.544420][ T9463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 114.625768][ T9463] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.657673][ T9463] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 114.670039][ T9463] EXT4-fs (loop6): This should not happen!! Data will be lost [ 114.670039][ T9463] [ 114.679736][ T9463] EXT4-fs (loop6): Total free blocks count 0 [ 114.685771][ T9463] EXT4-fs (loop6): Free/Dirty block details [ 114.691727][ T9463] EXT4-fs (loop6): free_blocks=2415919104 [ 114.697492][ T9463] EXT4-fs (loop6): dirty_blocks=32 [ 114.702613][ T9463] EXT4-fs (loop6): Block reservation details [ 114.708688][ T9463] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 114.835773][ T9493] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2206'. [ 114.861860][ T8980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 115.726504][ T9545] netlink: 'syz.6.2230': attribute type 6 has an invalid length. [ 115.993678][ T9564] loop6: detected capacity change from 0 to 8192 [ 116.010493][ T9564] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.116051][ T9568] binfmt_misc: register: failed to install interpreter file ./file0 [ 116.577308][ T9578] loop1: detected capacity change from 0 to 2048 [ 116.615851][ T9578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 116.659317][ T9590] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 116.671159][ T9578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.686469][ T9578] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 116.698858][ T9578] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.698858][ T9578] [ 116.708664][ T9578] EXT4-fs (loop1): Total free blocks count 0 [ 116.714722][ T9578] EXT4-fs (loop1): Free/Dirty block details [ 116.720713][ T9578] EXT4-fs (loop1): free_blocks=2415919104 [ 116.726501][ T9578] EXT4-fs (loop1): dirty_blocks=32 [ 116.731661][ T9578] EXT4-fs (loop1): Block reservation details [ 116.737703][ T9578] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 116.832844][ T8871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 117.032145][ T9623] loop6: detected capacity change from 0 to 2048 [ 117.046951][ T9623] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.062747][ T9623] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2265: bg 0: block 120: padding at end of block bitmap is not set [ 117.089974][ T8980] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 117.230763][ T6234] kernel write not supported for file bpf-prog (pid: 6234 comm: kworker/0:6) [ 117.623806][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 117.623824][ T29] audit: type=1400 audit(2000000036.460:4536): avc: denied { connect } for pid=9637 comm="syz.4.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.624911][ T9639] loop7: detected capacity change from 0 to 2048 [ 117.666297][ T9639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 117.698921][ T9639] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.717781][ T9645] loop1: detected capacity change from 0 to 512 [ 117.723219][ T9647] can0: slcan on ttyS3. [ 117.724273][ T9639] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 117.740563][ T9639] EXT4-fs (loop7): This should not happen!! Data will be lost [ 117.740563][ T9639] [ 117.744691][ T9645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.750367][ T9639] EXT4-fs (loop7): Total free blocks count 0 [ 117.768322][ T9639] EXT4-fs (loop7): Free/Dirty block details [ 117.774332][ T9639] EXT4-fs (loop7): free_blocks=2415919104 [ 117.780071][ T9639] EXT4-fs (loop7): dirty_blocks=32 [ 117.785223][ T9639] EXT4-fs (loop7): Block reservation details [ 117.791219][ T9639] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 117.797512][ T9649] capability: warning: `syz.4.2274' uses 32-bit capabilities (legacy support in use) [ 117.820479][ T8871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.834049][ T9647] can0 (unregistered): slcan off ttyS3. [ 117.846482][ T9651] loop1: detected capacity change from 0 to 512 [ 117.853596][ T9651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.863109][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 117.875460][ T9651] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2275: invalid block [ 117.890708][ T9651] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2275: invalid indirect mapped block 4294967295 (level 1) [ 117.906564][ T9651] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2275: invalid indirect mapped block 4294967295 (level 1) [ 117.921733][ T9651] EXT4-fs (loop1): 2 truncates cleaned up [ 117.928155][ T9651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.969615][ T9658] loop7: detected capacity change from 0 to 1024 [ 118.009977][ T29] audit: type=1400 audit(2000000036.850:4537): avc: denied { read } for pid=9663 comm="syz.7.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.010939][ T8871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.105702][ T29] audit: type=1326 audit(2000000036.950:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.129229][ T29] audit: type=1326 audit(2000000036.950:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.195118][ T29] audit: type=1326 audit(2000000037.000:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.218868][ T29] audit: type=1326 audit(2000000037.000:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.242289][ T29] audit: type=1326 audit(2000000037.000:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.265936][ T29] audit: type=1326 audit(2000000037.000:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.289485][ T29] audit: type=1326 audit(2000000037.000:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.312979][ T29] audit: type=1326 audit(2000000037.000:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37f26ebe9 code=0x7ffc0000 [ 118.336845][ T9687] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2291'. [ 118.383525][ T9699] netlink: 'syz.7.2297': attribute type 1 has an invalid length. [ 118.546508][ T9727] loop6: detected capacity change from 0 to 2048 [ 118.556697][ T9730] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2312'. [ 118.587789][ T9727] loop6: p1 < > p4 [ 118.592536][ T9727] loop6: p4 size 8388608 extends beyond EOD, truncated [ 118.668833][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 118.684086][ T9753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9753 comm=syz.4.2323 [ 118.752226][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2324'. [ 118.761246][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2324'. [ 118.770227][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2324'. [ 118.784111][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2324'. [ 119.099289][ T9803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.126294][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'. [ 119.168634][ T9803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.227501][ T9803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.269765][ T9803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.350048][ T3596] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.375047][ T3596] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.383295][ T3596] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.410224][ T3596] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.583495][ T9822] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2354'. [ 119.734780][ T9827] netlink: 'syz.7.2356': attribute type 1 has an invalid length. [ 119.775369][ T9827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.097721][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'. [ 120.106829][ T9855] netlink: 'syz.7.2366': attribute type 14 has an invalid length. [ 120.126172][ T9855] netlink: 'syz.7.2366': attribute type 14 has an invalid length. [ 120.126736][ T3579] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.148082][ T3579] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.157366][ T3579] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.170793][ T3579] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.329685][ T9882] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 120.356683][ T9882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.429192][ T9888] syz_tun: entered allmulticast mode [ 120.447068][ T9888] syz_tun: left allmulticast mode [ 120.662697][ T9903] netlink: 'syz.1.2384': attribute type 14 has an invalid length. [ 120.678541][ T3565] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.690230][ T9903] netlink: 'syz.1.2384': attribute type 14 has an invalid length. [ 120.699863][ T3565] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.711940][ T3565] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.737711][ T3565] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.833424][ T3377] hid-generic 0000:0D17:0000.0006: item fetching failed at offset 0/2 [ 120.843637][ T3377] hid-generic 0000:0D17:0000.0006: probe with driver hid-generic failed with error -22 [ 121.131391][ T9936] : renamed from bond0 (while UP) [ 121.231435][ T9950] bridge0: port 3(macvlan2) entered blocking state [ 121.238061][ T9950] bridge0: port 3(macvlan2) entered disabled state [ 121.246929][ T9950] macvlan2: entered allmulticast mode [ 121.252577][ T9950] bridge0: entered allmulticast mode [ 121.265324][ T9950] macvlan2: left allmulticast mode [ 121.270490][ T9950] bridge0: left allmulticast mode [ 121.655850][T10004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.667821][T10007] syz_tun: entered allmulticast mode [ 121.675161][T10007] syz_tun: left allmulticast mode [ 121.728025][T10004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.801804][T10004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.846960][T10004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.960148][ T3579] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.971972][ T3579] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.983158][ T3579] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.995612][ T3596] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.066418][T10045] Invalid ELF header magic: != ELF [ 122.113797][T10053] vlan2: entered allmulticast mode [ 122.203975][T10059] ================================================================== [ 122.212107][T10059] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 122.221192][T10059] [ 122.223522][T10059] read to 0xffff8881043b4820 of 4 bytes by task 10062 on cpu 0: [ 122.231158][T10059] selinux_inode_permission+0x334/0x740 [ 122.236727][T10059] security_inode_permission+0x6d/0xb0 [ 122.242227][T10059] inode_permission+0x106/0x310 [ 122.247094][T10059] link_path_walk+0x162/0x900 [ 122.251791][T10059] path_openat+0x1de/0x2170 [ 122.256307][T10059] do_filp_open+0x109/0x230 [ 122.260815][T10059] io_openat2+0x272/0x390 [ 122.265160][T10059] io_openat+0x1b/0x30 [ 122.269245][T10059] __io_issue_sqe+0xfb/0x2e0 [ 122.273841][T10059] io_issue_sqe+0x53/0x970 [ 122.278275][T10059] io_wq_submit_work+0x3f7/0x5f0 [ 122.283217][T10059] io_worker_handle_work+0x44e/0x9b0 [ 122.288508][T10059] io_wq_worker+0x22e/0x870 [ 122.293018][T10059] ret_from_fork+0xda/0x150 [ 122.297528][T10059] ret_from_fork_asm+0x1a/0x30 [ 122.302298][T10059] [ 122.304658][T10059] write to 0xffff8881043b4820 of 4 bytes by task 10059 on cpu 1: [ 122.312385][T10059] selinux_inode_permission+0x3ac/0x740 [ 122.317944][T10059] security_inode_permission+0x6d/0xb0 [ 122.323417][T10059] inode_permission+0x106/0x310 [ 122.328283][T10059] link_path_walk+0x162/0x900 [ 122.332971][T10059] path_openat+0x1de/0x2170 [ 122.337476][T10059] do_filp_open+0x109/0x230 [ 122.341986][T10059] io_openat2+0x272/0x390 [ 122.346324][T10059] io_openat+0x1b/0x30 [ 122.350423][T10059] __io_issue_sqe+0xfb/0x2e0 [ 122.355016][T10059] io_issue_sqe+0x53/0x970 [ 122.359439][T10059] io_submit_sqes+0x664/0x1050 [ 122.364298][T10059] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 122.369852][T10059] __x64_sys_io_uring_enter+0x78/0x90 [ 122.375229][T10059] x64_sys_call+0x2de1/0x2ff0 [ 122.379931][T10059] do_syscall_64+0xd2/0x200 [ 122.384869][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.390820][T10059] [ 122.393162][T10059] value changed: 0x00000000 -> 0x00000001 [ 122.398879][T10059] [ 122.401199][T10059] Reported by Kernel Concurrency Sanitizer on: [ 122.407375][T10059] CPU: 1 UID: 0 PID: 10059 Comm: syz.7.2456 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 122.418143][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.428205][T10059] ==================================================================