last executing test programs: 1m35.915596444s ago: executing program 32 (id=88): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1m15.439777055s ago: executing program 3 (id=586): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1m15.247893538s ago: executing program 3 (id=589): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1m15.189866169s ago: executing program 3 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x800000000052c0) 1m15.158489029s ago: executing program 3 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m15.13762129s ago: executing program 3 (id=595): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1m14.936305343s ago: executing program 3 (id=603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 1m14.902654333s ago: executing program 33 (id=603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 33.486454023s ago: executing program 1 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r2}, 0x38) 33.448180333s ago: executing program 1 (id=1875): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0/file0\x00', r0}, 0x18) 33.385886804s ago: executing program 1 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 32.872790782s ago: executing program 1 (id=1892): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 32.853408232s ago: executing program 1 (id=1893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x14, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x485, &(0x7f0000001380)="$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") 32.322189909s ago: executing program 1 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close(r2) 32.321912149s ago: executing program 34 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close(r2) 31.894071075s ago: executing program 6 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 31.802483767s ago: executing program 6 (id=1918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 31.676467588s ago: executing program 6 (id=1919): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 31.527418691s ago: executing program 6 (id=1923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 31.499765541s ago: executing program 0 (id=1924): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0xce}, &(0x7f0000000100), &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000b80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 31.491694741s ago: executing program 6 (id=1926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) close(r1) 31.101529296s ago: executing program 0 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) sendto$inet(r3, 0x0, 0xfffffffffffffeaa, 0x4000080, 0x0, 0x0) 30.978327459s ago: executing program 0 (id=1932): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0/file0\x00', r0}, 0x18) 30.88296565s ago: executing program 6 (id=1935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 30.85811611s ago: executing program 0 (id=1936): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 30.834012881s ago: executing program 35 (id=1935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 30.786435221s ago: executing program 0 (id=1940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendfile(r3, r2, 0x0, 0x17) 30.608249753s ago: executing program 0 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x14, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x485, &(0x7f0000001380)="$eJzs3MtvVNUfAPDvnT6AH/BrxScPtYrGxkehBZWFCzWauNDExA0ua1sIUsDQmgghisbg0pC4Ny5N/Atc6caoG03c6sqNISGGjaibMXfuvfNi7jCUKQPM55MMnDP33p7z7bln5jxmGsDQmkr/SSK2RMSvETGRZVtPmMr+u3zpzMLfl84sJFGtvvFnUjvvr0tnFopTi+s255npSkTl4yR2dih35dTpo/PLy0sn8/ye1WPv7Fk5dfqpI8fmDy8dXjo+d+DA/n2zzz4z93T9mg1XjWa89MgdaV13vH9i1/ZX3jz/2sLB82/98FVSxN8WR59MdTv4aLXa5+IGa2tTOhnt9arK+lSGno1ERNpcY7X+PxEj0Wi8iXj5o4FWDlhX1VzJ4bNV4DaWxKBrAAxG8Uafzn+LR8TGsuHCT7fbjO3iC9kEKI37cv7Ijoxms9OxbG60dZ3Kn4qIg2f/+Tx9xPqsQwAAtPgmHf882T7+i9ra/D1N5/0/3xuazPdStkXEnRFxV0TcHVE7996IuO8ay2/fJLly/FO5sKbAepSO/57L97Zax3/1ke7kSJ7bWsuMJYeOLC/tzX8n0zG2Ic3Pdinj25d++bTsWPP4L32k5RdjwbweF0bbNr4W51fnryfmZhc/jNgx2in+pL4TkETE9ojYscYyjjz+5a6yY+3xV5NuP+n51mzP+0zlql9EPJa1/9loi7+QdN+frI7E8tLePcVdcaUffz73epRMqq7e/i1Grj/iVmn7/6/j/V+PfzJp3q9dufYyzv32SemcZmZN93/jiWLH97351dWTsxHjyatZpZufn2tcW+SL89P4p3d37v/bovGb2BkR6U18f0Q8EBEP5m33UEQ8HBG7u8T//YuPvF127Brbv+/S+Bfb2n+y9ZRG+xd3cHYjnBovEsWtUZIYOfrd160/sZHs7fVvfy01nT+Tv/79vrlLXL3Ua213MwAAANx6KhGxJZLKTD1dqczM1D7DvyF9avnEyuoTh068e3wx+47AZIxVipWubD04Ww+dzaf1RX6uLb8vXzf+LDbWP3S4OOjgYchtLun/qT/6vtoM3HT6sI8G3KJGa9uYXVTLvyEE3Nq8/8Pw6tj/k/a/BALcjjr0/02DqAdw43V6//+gkaxO3MjKADdUW/+37QdDxPofDC/9H4ZXc/+35A9DY2VTXP1L8hISVySiclNUoz+JpHMv+LfapyK2DDrAnhPjRWLQr0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD//1b77XU=") 30.607948844s ago: executing program 36 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x14, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x485, &(0x7f0000001380)="$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") 14.02244737s ago: executing program 4 (id=2350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 13.944124751s ago: executing program 4 (id=2352): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x61be, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x121}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.915353191s ago: executing program 4 (id=2355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) 13.036141154s ago: executing program 4 (id=2381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13.023998994s ago: executing program 4 (id=2382): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x1c43, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x1) 12.864825156s ago: executing program 4 (id=2388): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 8.42636836s ago: executing program 5 (id=2483): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 8.332915911s ago: executing program 5 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r3, {0x9, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x0, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x50b}, "5b1270d345976b42c596d1b30fcf83f0173874ef04d40615b35c87e6d397a70b4fa72a07f22cdd41f64eaeda3f1c175d48c6be36d7aaf019b9ff7175659e23f0eed14e51b3984fa066170af9042693c29debb98cc916335bd9c645e2eb985b91eaba0213f14ae29ca96ab8cbc26a47cbe22ab6991dac88fcfd99adcd573f921f11ee1729d0cd4002ae"}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x8}, {0x57, 0x7, 0x8f0, 0x6, 0x4, 0xff3edf4ea1a108e6}}}, @TCF_EM_CANID={0x0, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x32ce}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0x0, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x101}, [@TCA_EM_IPT_HOOK={0x0, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x0, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "409f8014da1e75bb33262b4470dc2d0f4a38d830db4bd35a357cda7d64ef124d399e39753b8fa9e432ad37237b1ea844acb0330c11f9"}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "61cc4dcb4587f935bb5009b8ee29a6cbf52636649f92847a1f502f3ca98500f30088f09f9cfd71e5aa2979bbc3ca6195b68120e20deb95859d766f2e6dd9dbd22e57002dec61c9e0feb069307c78f7995b2ac826bfc0a5e21193736b83975a553235f1a29836e0c36f6223445d5d6f95f8baa9261d119d9fbd09540044"}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "e3e60126309571f9ba56168b539ead225c001c41cb4e391c32fc5e9919ff1011bd5e5420956db9e4bf426a76a6ef892aee92bb49f4367b1fce681109c4633e9ed20234822ebadb2b3aa75e18120a39ee7492530f545a718ab881caf7df543f601d2782adc834af52e90d9204c051fb971d9ce1c94067686ceada815b1263"}]}}, @TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0x6}, {0x7, 0x0, 0x1, "f801"}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x7}, [@TCA_EM_META_HDR={0x0, 0x1, {{0x4, 0x9, 0x2}, {0x4, 0x4}}}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="35cebc2808b05f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR=':', @TCF_META_TYPE_VAR='1', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e737cee1", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="67d4fd3579aa2aa89655", @TCF_META_TYPE_VAR='J']}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="1a589699"]}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5e0f"]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_VAR="31dabb275c18"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x874f, 0x8, 0x2}, {0x0, 0x3, 0x5}}}, @TCF_EM_IPT={0xfffffe3e, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x40010) 8.241200522s ago: executing program 5 (id=2487): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) unshare(0x26020480) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 8.180161903s ago: executing program 5 (id=2489): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS") 7.735647969s ago: executing program 5 (id=2491): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x38f, 0x0, "a0590469a322d928"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 7.504242973s ago: executing program 5 (id=2492): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 7.502034283s ago: executing program 37 (id=2492): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 1.605756537s ago: executing program 7 (id=2548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5f01360ab373d5026f29", 0xc}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) 1.41620822s ago: executing program 8 (id=2550): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000) 1.37750504s ago: executing program 7 (id=2551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.294997931s ago: executing program 7 (id=2552): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x8, 0x4000, @fd, 0x5, 0x0, 0x0, 0x18, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.043554035s ago: executing program 7 (id=2563): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.013416465s ago: executing program 9 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x14) 1.007284035s ago: executing program 7 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x9, 0x1b, 0x1b7, 0x0}) 986.038545ms ago: executing program 9 (id=2567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 937.292536ms ago: executing program 2 (id=2570): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 936.683046ms ago: executing program 9 (id=2580): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440) 848.092328ms ago: executing program 9 (id=2571): unshare(0x20000400) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 641.351461ms ago: executing program 8 (id=2572): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) 640.471291ms ago: executing program 9 (id=2583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 603.543801ms ago: executing program 2 (id=2573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 595.553611ms ago: executing program 8 (id=2574): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x8, 0x4000, @fd, 0x5, 0x0, 0x0, 0x18, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 594.929431ms ago: executing program 9 (id=2575): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) write$binfmt_aout(r1, &(0x7f0000000600)={{0x0, 0x6, 0xb1, 0x91, 0x91, 0x40, 0x2aa, 0x8}}, 0x20) sendfile(r1, r0, 0x0, 0x7ffff000) 551.207132ms ago: executing program 2 (id=2576): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(0x0, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) madvise(&(0x7f00003ba000/0x3000)=nil, 0x3000, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) write$selinux_validatetrans(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) 403.919904ms ago: executing program 2 (id=2577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 280.659416ms ago: executing program 8 (id=2578): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}}], 0x1, 0x4040) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 243.405546ms ago: executing program 2 (id=2579): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x14) 111.962108ms ago: executing program 8 (id=2581): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 99.789108ms ago: executing program 2 (id=2582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 92.478648ms ago: executing program 7 (id=2584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 0s ago: executing program 8 (id=2585): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") kernel console output (not intermixed with test programs): 000-000000000000. [ 84.882970][ T9] IPVS: starting estimator thread 0... [ 84.891753][ T3396] vhci_hcd: vhci_device speed not set [ 84.961131][ T6866] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.974613][ T6859] IPVS: using max 2400 ests per chain, 120000 per kthread [ 85.020119][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1193'. [ 85.070868][ T6878] loop0: detected capacity change from 0 to 512 [ 85.194751][ T6878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.196378][ T6878] EXT4-fs (loop0): 1 truncate cleaned up [ 85.222949][ T6878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.255620][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.299417][ T6899] loop4: detected capacity change from 0 to 512 [ 85.300325][ T6893] loop5: detected capacity change from 0 to 512 [ 85.310008][ T6897] pim6reg1: entered promiscuous mode [ 85.318532][ T6897] pim6reg1: entered allmulticast mode [ 85.328929][ T6899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.396122][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.396194][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.417190][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.453840][ T6911] loop4: detected capacity change from 0 to 512 [ 85.454270][ T6911] EXT4-fs: Ignoring removed i_version option [ 85.462869][ T6911] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.463133][ T6911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1217: bg 0: block 131: padding at end of block bitmap is not set [ 85.463344][ T6911] EXT4-fs (loop4): Remounting filesystem read-only [ 85.463446][ T6911] EXT4-fs (loop4): 1 truncate cleaned up [ 85.463722][ T6911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.468572][ T6913] vlan2: entered allmulticast mode [ 85.483930][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.931199][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 86.001929][ T6965] syzkaller1: entered promiscuous mode [ 86.007523][ T6965] syzkaller1: entered allmulticast mode [ 86.040469][ T6966] syzkaller1: entered promiscuous mode [ 86.046025][ T6966] syzkaller1: entered allmulticast mode [ 86.107729][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 86.107746][ T29] audit: type=1400 audit(854.137:2974): avc: denied { read } for pid=6977 comm="syz.5.1237" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.136765][ T29] audit: type=1400 audit(854.137:2975): avc: denied { open } for pid=6977 comm="syz.5.1237" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.176419][ T29] audit: type=1400 audit(854.200:2976): avc: denied { create } for pid=6980 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.253147][ T29] audit: type=1400 audit(854.285:2977): avc: denied { read } for pid=6988 comm="syz.4.1243" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.275796][ T29] audit: type=1400 audit(854.285:2978): avc: denied { open } for pid=6988 comm="syz.4.1243" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.311494][ T29] audit: type=1400 audit(854.338:2979): avc: denied { create } for pid=6985 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.330502][ T29] audit: type=1400 audit(854.338:2980): avc: denied { ioctl } for pid=6988 comm="syz.4.1243" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.355022][ T29] audit: type=1400 audit(854.338:2981): avc: denied { connect } for pid=6985 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.360043][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.374088][ T29] audit: type=1400 audit(854.338:2982): avc: denied { write } for pid=6985 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.402739][ T6987] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 86.410377][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.462759][ T29] audit: type=1400 audit(854.507:2983): avc: denied { read } for pid=6996 comm="syz.1.1246" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.513389][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 86.577888][ T7010] loop4: detected capacity change from 0 to 512 [ 86.661600][ T7015] syzkaller1: entered promiscuous mode [ 86.667162][ T7015] syzkaller1: entered allmulticast mode [ 86.845850][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.865825][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.987934][ T7046] validate_nla: 3 callbacks suppressed [ 86.987952][ T7046] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 87.001242][ T7046] netlink: 'syz.0.1267': attribute type 2 has an invalid length. [ 87.082240][ T7046] __nla_validate_parse: 1 callbacks suppressed [ 87.082260][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 87.398873][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.416281][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.811404][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1286'. [ 87.820589][ T7091] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1286'. [ 87.863824][ T7093] syzkaller1: entered promiscuous mode [ 87.869482][ T7093] syzkaller1: entered allmulticast mode [ 87.971475][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 87.986543][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 88.044908][ T7107] loop0: detected capacity change from 0 to 512 [ 88.085527][ T7112] loop6: detected capacity change from 0 to 512 [ 88.092173][ T7107] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 88.100732][ T7107] System zones: 0-2, 18-18, 34-35 [ 88.112299][ T7107] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #4: comm syz.0.1294: iget: bad i_size value: 5910974510929920 [ 88.134614][ T7112] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.146119][ T7107] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1294: Bad quota inode: 4, type: 1 [ 88.171070][ T7107] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.196370][ T7107] EXT4-fs (loop0): mount failed [ 88.305229][ T7138] syzkaller1: entered promiscuous mode [ 88.310753][ T7138] syzkaller1: entered allmulticast mode [ 88.324498][ T7140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7140 comm=syz.6.1308 [ 88.374043][ T7146] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 88.405632][ T1039] usb 1-1: enqueue for inactive port 0 [ 88.411262][ T1039] usb 1-1: enqueue for inactive port 0 [ 88.483793][ T7158] loop4: detected capacity change from 0 to 512 [ 88.500162][ T1039] vhci_hcd: vhci_device speed not set [ 88.529563][ T7158] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 88.537894][ T7158] System zones: 0-2, 18-18, 34-35 [ 88.543164][ T7158] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #4: comm syz.4.1315: iget: bad i_size value: 5910974510929920 [ 88.558861][ T7158] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1315: Bad quota inode: 4, type: 1 [ 88.570021][ T7158] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.585156][ T7158] EXT4-fs (loop4): mount failed [ 88.742670][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 88.960041][ T7208] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1338'. [ 89.071001][ T7218] serio: Serial port ptm0 [ 89.206429][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.216571][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.241252][ T7238] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 89.282554][ T7244] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1351'. [ 89.339763][ T7251] syzkaller1: entered promiscuous mode [ 89.345367][ T7251] syzkaller1: entered allmulticast mode [ 89.497423][ T7263] loop5: detected capacity change from 0 to 512 [ 89.504534][ T7263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.524647][ T7263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.538753][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.761332][ T7299] loop4: detected capacity change from 0 to 1024 [ 89.770054][ T7299] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 89.785585][ T7301] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1375'. [ 89.787240][ T7299] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.827937][ T7312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1376'. [ 89.834801][ T7299] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.1374: iget: special inode unallocated [ 89.837838][ T7312] netem: change failed [ 89.850132][ T7299] EXT4-fs (loop4): no journal found [ 89.858958][ T7299] EXT4-fs (loop4): can't get journal size [ 89.866265][ T7296] cgroup: fork rejected by pids controller in /syz1 [ 89.882680][ T7299] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.1374: iget: special inode unallocated [ 89.895503][ T7299] EXT4-fs (loop4): get root inode failed [ 89.901207][ T7299] EXT4-fs (loop4): mount failed [ 90.099104][ T7368] SELinux: failed to load policy [ 90.163606][ T7379] loop4: detected capacity change from 0 to 512 [ 90.171783][ T7379] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.179013][ T7379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1393: bg 0: block 248: padding at end of block bitmap is not set [ 90.193819][ T7379] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1393: Failed to acquire dquot type 1 [ 90.206025][ T7379] EXT4-fs (loop4): 1 truncate cleaned up [ 90.212439][ T7379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.226697][ T7379] syz.4.1393 (7379) used greatest stack depth: 9304 bytes left [ 90.243248][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.932221][ T7473] loop5: detected capacity change from 0 to 512 [ 90.950731][ T7473] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 90.958971][ T7473] System zones: 0-2, 18-18, 34-35 [ 90.964527][ T7473] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #4: comm syz.5.1409: iget: bad i_size value: 5910974510929920 [ 90.979117][ T7473] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1409: Bad quota inode: 4, type: 1 [ 90.990346][ T7473] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.006423][ T7473] EXT4-fs (loop5): mount failed [ 91.639626][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 91.639641][ T29] audit: type=1326 audit(859.973:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.716384][ T29] audit: type=1326 audit(860.016:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.739244][ T29] audit: type=1326 audit(860.016:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.762123][ T29] audit: type=1326 audit(860.016:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.785001][ T29] audit: type=1326 audit(860.016:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.807802][ T29] audit: type=1326 audit(860.016:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.830745][ T29] audit: type=1326 audit(860.016:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.853574][ T29] audit: type=1326 audit(860.016:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.876400][ T29] audit: type=1326 audit(860.016:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.882732][ T7544] loop6: detected capacity change from 0 to 512 [ 91.899245][ T29] audit: type=1326 audit(860.016:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10732ee929 code=0x7ffc0000 [ 91.976691][ T7544] EXT4-fs (loop6): 1 orphan inode deleted [ 91.990480][ T55] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 92.012299][ T7544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.059944][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.181584][ T7606] loop0: detected capacity change from 0 to 512 [ 92.281000][ T7606] EXT4-fs (loop0): 1 orphan inode deleted [ 92.293349][ T7624] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 92.331327][ T7606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.427808][ T7585] SELinux: Context @ is not valid (left unmapped). [ 92.471289][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.874797][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 93.046853][ T7718] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 93.081141][ T7722] netlink: 'syz.6.1468': attribute type 14 has an invalid length. [ 93.253237][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.260778][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.268303][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.277330][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.284740][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.292179][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.299641][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.307086][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.314856][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.322370][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.329827][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.337247][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.344738][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.352357][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.359977][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.367487][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.375075][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.382505][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.389975][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.397468][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.404978][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.412419][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.419831][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.427217][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.434657][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.442207][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.449803][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.457302][ T3396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.469198][ T3396] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 93.787692][ T7791] netlink: 'syz.1.1498': attribute type 1 has an invalid length. [ 93.787703][ T7784] ALSA: seq fatal error: cannot create timer (-19) [ 93.881293][ T7802] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 93.965561][ T7813] lo speed is unknown, defaulting to 1000 [ 93.972127][ T7813] lo speed is unknown, defaulting to 1000 [ 93.978229][ T7813] lo speed is unknown, defaulting to 1000 [ 93.984449][ T7813] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.993033][ T7813] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.004910][ T7813] lo speed is unknown, defaulting to 1000 [ 94.013343][ T7813] lo speed is unknown, defaulting to 1000 [ 94.019926][ T7813] lo speed is unknown, defaulting to 1000 [ 94.029768][ T7813] lo speed is unknown, defaulting to 1000 [ 94.036009][ T7813] lo speed is unknown, defaulting to 1000 [ 94.042143][ T7813] lo speed is unknown, defaulting to 1000 [ 94.330324][ T7840] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1520'. [ 94.339514][ T7840] unsupported nla_type 65024 [ 94.359813][ T7842] loop4: detected capacity change from 0 to 256 [ 94.466271][ T7847] netlink: 'syz.4.1523': attribute type 11 has an invalid length. [ 94.474300][ T7847] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1523'. [ 94.515708][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 94.524706][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 94.533663][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 94.562572][ T7853] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1526'. [ 94.802894][ T7867] tipc: Failed to remove unknown binding: 66,1,1/0:1567022977/1567022979 [ 94.954511][ T7891] 9pnet_fd: Insufficient options for proto=fd [ 95.043728][ T7905] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1550'. [ 95.168193][ T7927] loop0: detected capacity change from 0 to 128 [ 95.204171][ T7927] bio_check_eod: 362 callbacks suppressed [ 95.204197][ T7927] syz.0.1560: attempt to access beyond end of device [ 95.204197][ T7927] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 95.236655][ T1385] kworker/u8:6: attempt to access beyond end of device [ 95.236655][ T1385] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 95.407900][ T7955] loop0: detected capacity change from 0 to 256 [ 95.424350][ T7955] syz.0.1573: attempt to access beyond end of device [ 95.424350][ T7955] loop0: rw=2049, sector=288, nr_sectors = 4 limit=256 [ 95.532728][ T7968] loop6: detected capacity change from 0 to 256 [ 95.546178][ T7968] FAT-fs (loop6): Directory bread(block 64) failed [ 95.553626][ T7968] FAT-fs (loop6): Directory bread(block 65) failed [ 95.560666][ T7968] FAT-fs (loop6): Directory bread(block 66) failed [ 95.567741][ T7968] FAT-fs (loop6): Directory bread(block 67) failed [ 95.574635][ T7968] FAT-fs (loop6): Directory bread(block 68) failed [ 95.581351][ T7968] FAT-fs (loop6): Directory bread(block 69) failed [ 95.589015][ T7968] FAT-fs (loop6): Directory bread(block 70) failed [ 95.595667][ T7968] FAT-fs (loop6): Directory bread(block 71) failed [ 95.602324][ T7968] FAT-fs (loop6): Directory bread(block 72) failed [ 95.609533][ T7968] FAT-fs (loop6): Directory bread(block 73) failed [ 95.723658][ T7988] loop5: detected capacity change from 0 to 1024 [ 95.745404][ T7988] EXT4-fs: Ignoring removed oldalloc option [ 95.752095][ T7988] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 95.773012][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 95.777344][ T7988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.781940][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 95.859604][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.915130][ T8011] lo speed is unknown, defaulting to 1000 [ 96.007950][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.017520][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.130266][ T8047] siw: device registration error -23 [ 96.159214][ T8051] pim6reg: entered allmulticast mode [ 96.168141][ T8051] pim6reg: left allmulticast mode [ 96.524807][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 96.524824][ T29] audit: type=1400 audit(865.140:3370): avc: denied { setcheckreqprot } for pid=8054 comm="syz.5.1619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.629141][ T8065] lo speed is unknown, defaulting to 1000 [ 96.678057][ T29] audit: type=1400 audit(865.299:3371): avc: denied { write } for pid=8072 comm="syz.6.1626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.783942][ T29] audit: type=1400 audit(865.415:3372): avc: denied { setopt } for pid=8085 comm="syz.0.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.836126][ T8078] lo speed is unknown, defaulting to 1000 [ 96.995041][ T29] audit: type=1400 audit(865.637:3373): avc: denied { connect } for pid=8108 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.024301][ T29] audit: type=1400 audit(865.658:3374): avc: denied { write } for pid=8108 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.046276][ T8113] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.086259][ T29] audit: type=1400 audit(865.732:3375): avc: denied { setopt } for pid=8120 comm="syz.5.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.093350][ T8124] gretap0: entered promiscuous mode [ 97.107809][ T29] audit: type=1400 audit(865.764:3376): avc: denied { read } for pid=8120 comm="syz.5.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.156260][ T8124] 0ªî{X¹¦: renamed from gretap0 [ 97.171809][ T8124] 0ªî{X¹¦: left promiscuous mode [ 97.177067][ T8124] 0ªî{X¹¦: entered allmulticast mode [ 97.189473][ T8124] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.222404][ T29] audit: type=1400 audit(865.869:3377): avc: denied { read } for pid=8128 comm="syz.5.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.329336][ T8133] lo speed is unknown, defaulting to 1000 [ 97.440720][ T8145] loop5: detected capacity change from 0 to 1024 [ 97.481193][ T8145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.512058][ T8145] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 97.524529][ T8145] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.524529][ T8145] [ 97.534307][ T8145] EXT4-fs (loop5): Total free blocks count 0 [ 97.540404][ T8145] EXT4-fs (loop5): Free/Dirty block details [ 97.546341][ T8145] EXT4-fs (loop5): free_blocks=0 [ 97.551288][ T8145] EXT4-fs (loop5): dirty_blocks=0 [ 97.556364][ T8145] EXT4-fs (loop5): Block reservation details [ 97.562370][ T8145] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 97.579343][ T29] audit: type=1400 audit(866.250:3378): avc: denied { execute } for pid=8155 comm="syz.4.1662" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 97.632138][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.668069][ T8162] loop5: detected capacity change from 0 to 512 [ 97.684304][ T8162] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 97.694546][ T8162] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.716515][ T8162] EXT4-fs (loop5): mount failed [ 97.743092][ T8172] __nla_validate_parse: 4 callbacks suppressed [ 97.743122][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1677'. [ 97.913439][ T8183] lo speed is unknown, defaulting to 1000 [ 97.976121][ T8187] loop4: detected capacity change from 0 to 512 [ 97.992974][ T8187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.012076][ T8193] loop6: detected capacity change from 0 to 1024 [ 98.030063][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.041794][ T8193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.096112][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.117347][ T8202] loop6: detected capacity change from 0 to 164 [ 98.127722][ T8202] syz.6.1679: attempt to access beyond end of device [ 98.127722][ T8202] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 98.141926][ T8202] syz.6.1679: attempt to access beyond end of device [ 98.141926][ T8202] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 98.185613][ T8206] loop4: detected capacity change from 0 to 128 [ 98.213801][ T8206] syz.4.1680: attempt to access beyond end of device [ 98.213801][ T8206] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 98.239994][ T1385] kworker/u8:6: attempt to access beyond end of device [ 98.239994][ T1385] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 98.278210][ T8212] loop4: detected capacity change from 0 to 512 [ 98.296543][ T8212] EXT4-fs (loop4): 1 orphan inode deleted [ 98.304974][ T8212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.317880][ T1385] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 98.345559][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.433909][ T8228] lo speed is unknown, defaulting to 1000 [ 98.805839][ T8259] 9pnet: p9_errstr2errno: server reported unknown error [ 98.878145][ T8264] lo speed is unknown, defaulting to 1000 [ 98.895010][ T8268] loop4: detected capacity change from 0 to 512 [ 98.924371][ T8268] EXT4-fs (loop4): 1 orphan inode deleted [ 98.937793][ T7576] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 98.954719][ T8268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.067536][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.228965][ T8289] loop4: detected capacity change from 0 to 512 [ 99.262034][ T8289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.285913][ T8289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.302111][ T8289] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.333591][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 99.406964][ T8300] loop4: detected capacity change from 0 to 1024 [ 99.422143][ T8300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.451604][ T8300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1717: bg 0: block 393: padding at end of block bitmap is not set [ 99.469403][ T8300] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 117 [ 99.470159][ T8302] lo speed is unknown, defaulting to 1000 [ 99.481816][ T8300] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.481816][ T8300] [ 99.511059][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.542595][ T8312] loop0: detected capacity change from 0 to 256 [ 99.820280][ T8334] batadv_slave_0: entered promiscuous mode [ 99.828732][ T8335] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.836360][ T8334] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1735'. [ 99.856412][ T8334] batadv_slave_0 (unregistering): left promiscuous mode [ 99.978580][ T8347] loop6: detected capacity change from 0 to 512 [ 100.028357][ T8347] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 100.047634][ T8347] System zones: 0-2, 18-18, 34-34 [ 100.058290][ T8347] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1740: bg 0: block 248: padding at end of block bitmap is not set [ 100.075329][ T8354] loop5: detected capacity change from 0 to 512 [ 100.079106][ T8351] lo speed is unknown, defaulting to 1000 [ 100.088483][ T8347] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1740: Failed to acquire dquot type 1 [ 100.118485][ T8347] EXT4-fs (loop6): 1 truncate cleaned up [ 100.124718][ T8347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.139871][ T8354] EXT4-fs (loop5): 1 orphan inode deleted [ 100.146183][ T8354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.158992][ T7614] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 1 [ 100.175566][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.195089][ T7575] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 100.269714][ T8366] tipc: Failed to remove unknown binding: 66,1,1/0:598075726/598075728 [ 100.278086][ T8366] tipc: Failed to remove unknown binding: 66,1,1/0:598075726/598075728 [ 100.329029][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.447822][ T8377] loop0: detected capacity change from 0 to 512 [ 100.473776][ T8377] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.1752: corrupted in-inode xattr: invalid ea_ino [ 100.481737][ T8383] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.499799][ T8383] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 100.518414][ T8377] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1752: couldn't read orphan inode 15 (err -117) [ 100.541481][ T8385] loop5: detected capacity change from 0 to 512 [ 100.550612][ T8377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.592720][ T8385] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.608634][ T8385] EXT4-fs (loop5): mount failed [ 100.617454][ T8391] loop4: detected capacity change from 0 to 164 [ 100.621319][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.645076][ T8391] syz.4.1757: attempt to access beyond end of device [ 100.645076][ T8391] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 100.661512][ T8393] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.671105][ T8393] smc: net device bond0 erased user defined pnetid SYZ0 [ 100.679134][ T8391] syz.4.1757: attempt to access beyond end of device [ 100.679134][ T8391] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 100.728562][ T8402] loop5: detected capacity change from 0 to 128 [ 100.822298][ T8413] block device autoloading is deprecated and will be removed. [ 100.830035][ T3327] block device autoloading is deprecated and will be removed. [ 100.967266][ T8413] loop0: detected capacity change from 0 to 512 [ 100.974394][ T8413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.050893][ T8413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.077084][ T8413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.389465][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 101.389481][ T29] audit: type=1326 audit(870.273:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c2be758e7 code=0x7ffc0000 [ 101.455042][ T29] audit: type=1326 audit(870.305:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c2be1ab19 code=0x7ffc0000 [ 101.477878][ T29] audit: type=1326 audit(870.305:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c2be758e7 code=0x7ffc0000 [ 101.500676][ T29] audit: type=1326 audit(870.305:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c2be1ab19 code=0x7ffc0000 [ 101.523506][ T29] audit: type=1326 audit(870.316:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2be7e929 code=0x7ffc0000 [ 101.546528][ T29] audit: type=1326 audit(870.316:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2be7e929 code=0x7ffc0000 [ 101.569393][ T29] audit: type=1326 audit(870.316:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2be7d290 code=0x7ffc0000 [ 101.592278][ T29] audit: type=1326 audit(870.316:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4c2be80157 code=0x7ffc0000 [ 101.615241][ T29] audit: type=1326 audit(870.316:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c2be7e929 code=0x7ffc0000 [ 101.638055][ T29] audit: type=1400 audit(870.316:3460): avc: denied { create } for pid=8450 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.839563][ T8458] xt_hashlimit: max too large, truncated to 1048576 [ 102.118294][ T8439] syz.0.1784 (8439) used greatest stack depth: 6952 bytes left [ 102.146491][ T8475] futex_wake_op: syz.5.1791 tries to shift op by -1; fix this program [ 102.229170][ T8481] loop1: detected capacity change from 0 to 512 [ 102.259425][ T8481] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.268613][ T8481] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 102.280732][ T8481] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 102.290314][ T8481] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 102.298372][ T8481] System zones: 0-2, 18-18, 34-35 [ 102.304399][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.317080][ T8493] syzkaller1: entered promiscuous mode [ 102.322601][ T8493] syzkaller1: entered allmulticast mode [ 102.339038][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.640039][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1824'. [ 102.736633][ T3166] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 102.765235][ T3166] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.003649][ T8567] lo speed is unknown, defaulting to 1000 [ 103.123036][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1838'. [ 103.150658][ T8575] bridge0: port 3(macvlan2) entered blocking state [ 103.157509][ T8575] bridge0: port 3(macvlan2) entered disabled state [ 103.184020][ T8575] macvlan2: entered allmulticast mode [ 103.189659][ T8575] bridge0: entered allmulticast mode [ 103.198641][ T8575] macvlan2: left allmulticast mode [ 103.203824][ T8575] bridge0: left allmulticast mode [ 103.426664][ T8587] loop0: detected capacity change from 0 to 1024 [ 103.443204][ T8587] EXT4-fs: Ignoring removed bh option [ 103.452005][ T8589] loop6: detected capacity change from 0 to 512 [ 103.459017][ T8587] EXT4-fs: inline encryption not supported [ 103.464907][ T8587] EXT4-fs: Ignoring removed i_version option [ 103.470956][ T8589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.487791][ T8587] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.499438][ T8589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.515149][ T8589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.529291][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.1845: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.544222][ T8587] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1845: Failed to acquire dquot type 0 [ 103.558088][ T8587] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1845: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.572351][ T8587] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1845: Invalid inode bitmap blk 0 in block_group 0 [ 103.585665][ T8587] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 103.594338][ T7526] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.596424][ T8587] EXT4-fs (loop0): 1 orphan inode deleted [ 103.614741][ T8587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.619332][ T7526] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 103.640653][ T8587] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.696766][ T8600] tipc: Started in network mode [ 103.701851][ T8600] tipc: Node identity ac1414aa, cluster identity 4711 [ 103.715153][ T8605] loop6: detected capacity change from 0 to 512 [ 103.723590][ T8600] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.730602][ T8600] tipc: Enabled bearer , priority 10 [ 103.779842][ T8611] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.787322][ T8611] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.792733][ T8597] lo speed is unknown, defaulting to 1000 [ 103.817624][ T8605] EXT4-fs (loop6): 1 orphan inode deleted [ 103.823824][ T8605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.836570][ T7610] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 1 [ 103.852849][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.928641][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.948946][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1860'. [ 103.985663][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.997518][ T8636] loop6: detected capacity change from 0 to 512 [ 104.029248][ T8636] EXT4-fs: Ignoring removed nobh option [ 104.075143][ T8636] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.1861: corrupted inode contents [ 104.095620][ T8627] loop1: detected capacity change from 0 to 512 [ 104.105746][ T8636] EXT4-fs (loop6): Remounting filesystem read-only [ 104.112370][ T8627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.120851][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.122093][ T8636] EXT4-fs (loop6): 1 truncate cleaned up [ 104.152349][ T7526] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 104.154841][ T8636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.162967][ T7526] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 104.187524][ T7526] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 104.199638][ T8627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.228205][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.240886][ T8627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.250895][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.379008][ T8679] loop6: detected capacity change from 0 to 512 [ 104.385367][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.407739][ T8671] lo speed is unknown, defaulting to 1000 [ 104.446181][ T8679] EXT4-fs (loop6): 1 orphan inode deleted [ 104.455961][ T8679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.468762][ T7617] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 1 [ 104.516197][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.648844][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.707592][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.715183][ T8735] smc: net device bond0 applied user defined pnetid SYZ2 [ 104.747615][ T8735] smc: net device bond0 erased user defined pnetid SYZ2 [ 104.781504][ T3166] tipc: Node number set to 2886997162 [ 104.861916][ T8759] loop5: detected capacity change from 0 to 512 [ 104.879386][ T8759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.901887][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.913619][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 105.068171][ T8787] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.117196][ T8793] macvlan1: entered promiscuous mode [ 105.125605][ T8793] ipvlan0: entered promiscuous mode [ 105.131667][ T8793] ipvlan0: left promiscuous mode [ 105.138141][ T8793] macvlan1: left promiscuous mode [ 105.169384][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 105.216503][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1898'. [ 105.267232][ T7592] smc: removing ib device syz1 [ 105.280527][ T8810] loop5: detected capacity change from 0 to 4096 [ 105.290969][ T8810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.318743][ T8810] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.1899: corrupted inode contents [ 105.331861][ T8810] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #15: comm syz.5.1899: mark_inode_dirty error [ 105.343493][ T8810] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.1899: corrupted inode contents [ 105.355734][ T8810] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.1899: mark_inode_dirty error [ 105.369668][ T8810] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.1899: corrupted inode contents [ 105.384055][ T8810] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.1899: mark_inode_dirty error [ 105.396357][ T8810] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.1899: corrupted inode contents [ 105.412134][ T8810] EXT4-fs error (device loop5): ext4_truncate:4597: inode #15: comm syz.5.1899: mark_inode_dirty error [ 105.430948][ T8810] EXT4-fs error (device loop5) in ext4_setattr:5986: Corrupt filesystem [ 105.442783][ T8820] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #15: comm syz.5.1899: corrupted inode contents [ 105.496594][ T3678] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 105.509726][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.602861][ T7526] bridge_slave_1: left allmulticast mode [ 105.608630][ T7526] bridge_slave_1: left promiscuous mode [ 105.614346][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.644137][ T7526] bridge_slave_0: left promiscuous mode [ 105.650233][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.825697][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.843405][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.856088][ T7526] bond0 (unregistering): Released all slaves [ 105.914206][ T7526] tipc: Disabling bearer [ 105.919354][ T7526] tipc: Left network mode [ 105.946018][ T7526] IPVS: stopping backup sync thread 4792 ... [ 105.966322][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 105.975416][ T7526] hsr_slave_0: left promiscuous mode [ 105.981083][ T7526] hsr_slave_1: left promiscuous mode [ 105.986831][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.994731][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.048452][ T7526] team0 (unregistering): Port device team_slave_1 removed [ 106.062110][ T7526] team0 (unregistering): Port device team_slave_0 removed [ 106.124522][ T8837] lo speed is unknown, defaulting to 1000 [ 106.152215][ T8888] loop0: detected capacity change from 0 to 1024 [ 106.166483][ T8888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.198820][ T8888] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1920: Allocating blocks 449-513 which overlap fs metadata [ 106.221104][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 106.221137][ T29] audit: type=1400 audit(875.372:3672): avc: denied { write } for pid=8894 comm="syz.4.1922" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.240840][ T8887] EXT4-fs (loop0): pa ffff888106eff5b0: logic 48, phys. 177, len 21 [ 106.250239][ T29] audit: type=1400 audit(875.372:3673): avc: denied { open } for pid=8894 comm="syz.4.1922" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.258162][ T8887] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 106.326779][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 106.352052][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.365436][ T8903] smc: net device bond0 applied user defined pnetid SYZ2 [ 106.379216][ T8903] smc: net device bond0 erased user defined pnetid SYZ2 [ 106.400668][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.407823][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.426026][ T8837] bridge_slave_0: entered allmulticast mode [ 106.438154][ T8837] bridge_slave_0: entered promiscuous mode [ 106.478540][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.485763][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.516072][ T8837] bridge_slave_1: entered allmulticast mode [ 106.534252][ T8837] bridge_slave_1: entered promiscuous mode [ 106.550998][ T29] audit: type=1400 audit(875.720:3674): avc: denied { create } for pid=8909 comm="syz.5.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.593429][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.611771][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.624863][ T29] audit: type=1400 audit(875.752:3675): avc: denied { mounton } for pid=8905 comm="syz.0.1924" path="/413/file1" dev="tmpfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.647022][ T29] audit: type=1400 audit(875.752:3676): avc: denied { write } for pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20247 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.671124][ T29] audit: type=1400 audit(875.752:3677): avc: denied { write } for pid=8909 comm="syz.5.1928" path="socket:[21400]" dev="sockfs" ino=21400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.728006][ T29] audit: type=1400 audit(875.910:3678): avc: denied { write } for pid=8912 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.749645][ T9] IPVS: starting estimator thread 0... [ 106.763149][ T8915] tipc: Enabled bearer , priority 10 [ 106.772905][ T8837] team0: Port device team_slave_0 added [ 106.788918][ T8918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8918 comm=syz.5.1931 [ 106.791098][ T8837] team0: Port device team_slave_1 added [ 106.801513][ T8918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8918 comm=syz.5.1931 [ 106.846430][ T8916] IPVS: using max 2400 ests per chain, 120000 per kthread [ 106.854444][ T29] audit: type=1400 audit(876.048:3679): avc: denied { setopt } for pid=8921 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.875659][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.882670][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.908791][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.923852][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.930873][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.956977][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.000632][ T8837] hsr_slave_0: entered promiscuous mode [ 107.011797][ T8837] hsr_slave_1: entered promiscuous mode [ 107.018677][ T8837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.026263][ T8837] Cannot create hsr debugfs directory [ 107.062657][ T29] audit: type=1400 audit(876.269:3680): avc: denied { create } for pid=8928 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.092853][ T29] audit: type=1400 audit(876.290:3681): avc: denied { connect } for pid=8928 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.236419][ T8954] smc: net device bond0 applied user defined pnetid SYZ2 [ 107.262231][ T8934] lo speed is unknown, defaulting to 1000 [ 107.271992][ T8954] smc: net device bond0 erased user defined pnetid SYZ2 [ 107.286351][ T8837] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.301880][ T8837] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.319197][ T8837] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 107.348318][ T8837] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 107.418823][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.430902][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.443984][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.451085][ T7611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.453798][ T8974] loop5: detected capacity change from 0 to 1024 [ 107.471015][ T8974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.473049][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.490582][ T7610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.506395][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 107.517929][ T8961] lo speed is unknown, defaulting to 1000 [ 107.621277][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.628567][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.635944][ T8934] bridge_slave_0: entered allmulticast mode [ 107.642480][ T8934] bridge_slave_0: entered promiscuous mode [ 107.649736][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.657045][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.673963][ T8934] bridge_slave_1: entered allmulticast mode [ 107.680600][ T8934] bridge_slave_1: entered promiscuous mode [ 107.725750][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.757539][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.770382][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.800932][ T8961] chnl_net:caif_netlink_parms(): no params data found [ 107.828514][ T8934] team0: Port device team_slave_0 added [ 107.836206][ T8934] team0: Port device team_slave_1 added [ 107.853683][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.860765][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.886835][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.898750][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.905756][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.931824][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.979503][ T8934] hsr_slave_0: entered promiscuous mode [ 107.985841][ T8934] hsr_slave_1: entered promiscuous mode [ 107.991945][ T8934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.006320][ T8934] Cannot create hsr debugfs directory [ 108.095490][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.102698][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.110994][ T8961] bridge_slave_0: entered allmulticast mode [ 108.118131][ T8961] bridge_slave_0: entered promiscuous mode [ 108.137015][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.144257][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.151734][ T8961] bridge_slave_1: entered allmulticast mode [ 108.158364][ T8961] bridge_slave_1: entered promiscuous mode [ 108.208446][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.222031][ T8934] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 108.239969][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.249659][ T8934] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 108.269990][ T8934] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 108.295641][ T8934] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 108.341400][ T7526] IPVS: stop unused estimator thread 0... [ 108.354313][ T8961] team0: Port device team_slave_0 added [ 108.360964][ T8961] team0: Port device team_slave_1 added [ 108.373963][ T8837] veth0_vlan: entered promiscuous mode [ 108.389019][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.403032][ T8837] veth1_vlan: entered promiscuous mode [ 108.417083][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.424160][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.450195][ T8961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.461740][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.468754][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.494740][ T8961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.538238][ T8961] hsr_slave_0: entered promiscuous mode [ 108.544668][ T8961] hsr_slave_1: entered promiscuous mode [ 108.550499][ T8961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.558448][ T8961] Cannot create hsr debugfs directory [ 108.585411][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.595594][ T8837] veth0_macvtap: entered promiscuous mode [ 108.625160][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1958'. [ 108.625685][ T8837] veth1_macvtap: entered promiscuous mode [ 108.639946][ C0] net_ratelimit: 7 callbacks suppressed [ 108.639960][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 108.662127][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.681134][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.693511][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.700634][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.703292][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 108.710144][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.723943][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.787287][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.837157][ T8837] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.846028][ T8837] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.854722][ T8837] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.863547][ T8837] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.919416][ T8961] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 108.945557][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.967616][ T8961] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 108.994548][ T8961] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 109.011101][ T9051] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.1901'. [ 109.012432][ T8961] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 109.030328][ T9044] syzkaller1: entered promiscuous mode [ 109.036024][ T9044] syzkaller1: entered allmulticast mode [ 109.083310][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 109.125149][ T7526] bridge_slave_1: left allmulticast mode [ 109.131054][ T7526] bridge_slave_1: left promiscuous mode [ 109.136786][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.148052][ T7526] bridge_slave_0: left promiscuous mode [ 109.154091][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.180327][ T7526] bridge_slave_1: left allmulticast mode [ 109.186008][ T7526] bridge_slave_1: left promiscuous mode [ 109.191758][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.205572][ T9064] loop5: detected capacity change from 0 to 1024 [ 109.213265][ T9064] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.224307][ T9064] EXT4-fs (loop5): group descriptors corrupted! [ 109.224409][ T9068] loop4: detected capacity change from 0 to 1024 [ 109.240201][ T7526] bridge_slave_0: left promiscuous mode [ 109.246064][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.247408][ T9064] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 109.266738][ T9068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.295619][ T9068] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 109.308109][ T9068] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.308109][ T9068] [ 109.317942][ T9068] EXT4-fs (loop4): Total free blocks count 0 [ 109.324002][ T9068] EXT4-fs (loop4): Free/Dirty block details [ 109.329944][ T9068] EXT4-fs (loop4): free_blocks=0 [ 109.334910][ T9068] EXT4-fs (loop4): dirty_blocks=0 [ 109.340006][ T9068] EXT4-fs (loop4): Block reservation details [ 109.346063][ T9068] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 109.352618][ T9078] sd 0:0:1:0: device reset [ 109.360720][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.370824][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.381612][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.381660][ T7526] bond0 (unregistering): (slave team0): Releasing backup interface [ 109.404420][ T7526] bond0 (unregistering): Released all slaves [ 109.485505][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.506452][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.522226][ T7526] bond0 (unregistering): Released all slaves [ 109.600895][ T8961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.613652][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 109.624147][ T7526] hsr_slave_0: left promiscuous mode [ 109.630005][ T7526] hsr_slave_1: left promiscuous mode [ 109.640645][ T7526] hsr_slave_0: left promiscuous mode [ 109.649993][ T7526] hsr_slave_1: left promiscuous mode [ 109.658469][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.669208][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.711127][ T7526] team0 (unregistering): Port device team_slave_1 removed [ 109.721614][ T7526] team0 (unregistering): Port device team_slave_0 removed [ 109.778730][ T7526] team0 (unregistering): Port device team_slave_1 removed [ 109.788496][ T7526] team0 (unregistering): Port device team_slave_0 removed [ 109.837537][ T8961] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.852054][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.859138][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.867945][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.875114][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.891694][ T8934] veth0_vlan: entered promiscuous mode [ 109.925923][ T8934] veth1_vlan: entered promiscuous mode [ 109.928525][ T9118] loop7: detected capacity change from 0 to 1024 [ 109.961832][ T8934] veth0_macvtap: entered promiscuous mode [ 109.974881][ T9118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.989967][ T8934] veth1_macvtap: entered promiscuous mode [ 110.009153][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.021008][ T9118] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 110.033501][ T9118] EXT4-fs (loop7): This should not happen!! Data will be lost [ 110.033501][ T9118] [ 110.043351][ T9118] EXT4-fs (loop7): Total free blocks count 0 [ 110.049344][ T9118] EXT4-fs (loop7): Free/Dirty block details [ 110.055307][ T9118] EXT4-fs (loop7): free_blocks=0 [ 110.060343][ T9118] EXT4-fs (loop7): dirty_blocks=0 [ 110.065377][ T9118] EXT4-fs (loop7): Block reservation details [ 110.071437][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 110.078518][ T9118] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 110.087101][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 110.104774][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.135125][ T8934] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.143947][ T8934] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.152809][ T8934] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.161668][ T8934] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.177580][ T9137] loop4: detected capacity change from 0 to 512 [ 110.191302][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.199095][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.204545][ T9137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.228861][ T9137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.259182][ T9144] loop7: detected capacity change from 0 to 128 [ 110.340570][ T9154] sd 0:0:1:0: device reset [ 110.463583][ T8961] veth0_vlan: entered promiscuous mode [ 110.488661][ T8961] veth1_vlan: entered promiscuous mode [ 110.546766][ T8961] veth0_macvtap: entered promiscuous mode [ 110.572334][ T8961] veth1_macvtap: entered promiscuous mode [ 110.599239][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 110.600861][ T8961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.625311][ T8961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.646709][ T8961] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.655552][ T8961] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.664323][ T8961] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.673108][ T8961] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.796104][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2014'. [ 110.926110][ T9224] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2025'. [ 110.936377][ T9224] 0ªî{X¹¦: renamed from gretap0 [ 110.944860][ T9224] 0ªî{X¹¦: entered allmulticast mode [ 110.951621][ T9224] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 110.988711][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 110.988745][ T29] audit: type=1400 audit(880.416:3793): avc: denied { mount } for pid=9227 comm="syz.9.2026" name="/" dev="configfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.018382][ T29] audit: type=1400 audit(880.416:3794): avc: denied { search } for pid=9227 comm="syz.9.2026" name="/" dev="configfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.039970][ T29] audit: type=1400 audit(880.416:3795): avc: denied { search } for pid=9227 comm="syz.9.2026" name="/" dev="configfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.061609][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 111.068664][ T29] audit: type=1400 audit(880.416:3796): avc: denied { read open } for pid=9227 comm="syz.9.2026" path="/" dev="configfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.107326][ T9231] loop9: detected capacity change from 0 to 512 [ 111.117020][ T9231] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2027: bg 0: block 5: invalid block bitmap [ 111.129937][ T9231] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 111.152986][ T9231] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2027: invalid indirect mapped block 3 (level 2) [ 111.167381][ T9231] EXT4-fs (loop9): 2 truncates cleaned up [ 111.173794][ T9231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.192909][ T29] audit: type=1400 audit(880.627:3797): avc: denied { link } for pid=9230 comm="syz.9.2027" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.243541][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.253460][ T9238] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 111.253460][ T9238] program syz.8.2030 not setting count and/or reply_len properly [ 111.367067][ T29] audit: type=1400 audit(880.806:3798): avc: denied { ioctl } for pid=9251 comm="syz.9.2035" path="socket:[23566]" dev="sockfs" ino=23566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.429480][ T9258] loop9: detected capacity change from 0 to 512 [ 111.446003][ T9258] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 111.454162][ T9258] System zones: 0-2, 18-18, 34-34 [ 111.460640][ T9258] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2039: bg 0: block 248: padding at end of block bitmap is not set [ 111.476614][ T9258] Quota error (device loop9): write_blk: dquota write failed [ 111.484172][ T9258] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 111.495162][ T9258] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2039: Failed to acquire dquot type 1 [ 111.507746][ T9258] EXT4-fs (loop9): 1 truncate cleaned up [ 111.514534][ T9258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.543045][ T29] audit: type=1400 audit(880.996:3799): avc: denied { setattr } for pid=9257 comm="syz.9.2039" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.579750][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.588833][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 111.603184][ T51] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 111.612210][ T51] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 111.643169][ T9268] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 111.685994][ T9278] tipc: Failed to remove unknown binding: 66,1,1/0:2729420407/2729420409 [ 111.694705][ T9278] tipc: Failed to remove unknown binding: 66,1,1/0:2729420407/2729420409 [ 111.706229][ T9279] loop8: detected capacity change from 0 to 1024 [ 111.720262][ T9279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.797973][ T9286] loop9: detected capacity change from 0 to 512 [ 111.825289][ T9286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.953071][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.034188][ T9303] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 112.040393][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 112.142690][ T9313] loop9: detected capacity change from 0 to 128 [ 112.570959][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 112.682541][ T9332] loop9: detected capacity change from 0 to 128 [ 112.698808][ T8934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.082949][ T9364] loop4: detected capacity change from 0 to 1024 [ 113.122930][ T9365] netlink: 'syz.8.2093': attribute type 3 has an invalid length. [ 113.131345][ T9364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.423741][ T9372] loop8: detected capacity change from 0 to 512 [ 113.444794][ T9372] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.2086: corrupted in-inode xattr: invalid ea_ino [ 113.497156][ T9372] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2086: couldn't read orphan inode 15 (err -117) [ 113.530231][ T9372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.557367][ C0] net_ratelimit: 1 callbacks suppressed [ 113.557386][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 113.717182][ T8934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.848455][ T9403] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.949531][ T9403] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.002142][ T9403] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.012563][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.074992][ T9403] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.214259][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.231674][ T9414] loop9: detected capacity change from 0 to 512 [ 114.247800][ T9403] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.258042][ T9414] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.2107: corrupted in-inode xattr: invalid ea_ino [ 114.297548][ T9419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.307489][ T9414] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.2107: couldn't read orphan inode 15 (err -117) [ 114.328753][ T9403] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.345324][ T9419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.353769][ T9414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.370085][ T9403] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.404940][ T9403] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.473957][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.499939][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2110'. [ 114.508871][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2110'. [ 114.543191][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.589795][ T9431] loop7: detected capacity change from 0 to 512 [ 114.618659][ T9431] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.2122: corrupted in-inode xattr: invalid ea_ino [ 114.632163][ T9432] loop5: detected capacity change from 0 to 512 [ 114.639997][ T9432] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.647010][ T9436] netlink: 'syz.8.2114': attribute type 13 has an invalid length. [ 114.649066][ T9432] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 114.665892][ T9431] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2122: couldn't read orphan inode 15 (err -117) [ 114.678932][ T9431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.691329][ T9432] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 114.775333][ T9432] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 114.818982][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.834931][ T9445] loop9: detected capacity change from 0 to 1024 [ 114.841353][ T9432] System zones: 0-2, 18-18, 34-35 [ 114.841952][ T9432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.882092][ T9445] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.942517][ T9453] loop7: detected capacity change from 0 to 128 [ 114.986760][ T9453] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.998520][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 115.098649][ T8837] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.144689][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.356071][ T9470] vlan2: entered allmulticast mode [ 115.361320][ T9470] bridge_slave_0: entered allmulticast mode [ 115.529037][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 115.672877][ T9490] SELinux: failed to load policy [ 115.802195][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.845428][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 115.845444][ T29] audit: type=1400 audit(885.532:3926): avc: denied { create } for pid=9497 comm="syz.9.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.886807][ T29] audit: type=1400 audit(885.563:3927): avc: denied { write } for pid=9497 comm="syz.9.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.911353][ T29] audit: type=1400 audit(885.606:3928): avc: denied { mount } for pid=9499 comm="syz.9.2141" name="/" dev="ramfs" ino=24969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 115.984176][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.028206][ T29] audit: type=1400 audit(885.722:3929): avc: denied { listen } for pid=9511 comm="syz.7.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.047255][ T29] audit: type=1400 audit(885.722:3930): avc: denied { accept } for pid=9511 comm="syz.7.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.271334][ T9518] netlink: 'syz.5.2148': attribute type 29 has an invalid length. [ 116.324194][ T29] audit: type=1400 audit(886.038:3931): avc: denied { write } for pid=9519 comm="syz.4.2149" name="protocols" dev="proc" ino=4026532597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.356513][ T9522] loop5: detected capacity change from 0 to 512 [ 116.372087][ T9522] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 116.372132][ T9522] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.372385][ T9522] EXT4-fs (loop5): mount failed [ 116.515161][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.970327][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.982580][ T29] audit: type=1400 audit(886.723:3932): avc: denied { append } for pid=9549 comm="syz.4.2162" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.005717][ T9550] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.013188][ T9550] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.282716][ T29] audit: type=1400 audit(887.040:3933): avc: denied { shutdown } for pid=9562 comm="syz.5.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.361053][ T9565] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2169'. [ 117.370222][ T29] audit: type=1400 audit(887.082:3934): avc: denied { read } for pid=9562 comm="syz.5.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.403832][ T9569] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2170'. [ 117.486243][ T9580] netlink: 'syz.7.2176': attribute type 21 has an invalid length. [ 117.494133][ T9580] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2176'. [ 117.501982][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 117.539973][ T9580] netlink: 'syz.7.2176': attribute type 4 has an invalid length. [ 117.547885][ T9580] netlink: 'syz.7.2176': attribute type 5 has an invalid length. [ 117.555660][ T9580] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2176'. [ 117.681183][ T9586] loop5: detected capacity change from 0 to 2048 [ 117.831072][ T9586] loop5: p1 < > p4 [ 117.836452][ T9586] loop5: p4 size 8388608 extends beyond EOD, truncated [ 117.907546][ T9571] Set syz1 is full, maxelem 65536 reached [ 117.922524][ T9599] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 117.934306][ T9602] loop7: detected capacity change from 0 to 512 [ 117.958956][ T9602] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.976602][ T9602] EXT4-fs (loop7): mount failed [ 118.165855][ T9626] loop5: detected capacity change from 0 to 2048 [ 118.242241][ T9626] loop5: p1 < > p4 [ 118.246670][ T9626] loop5: p4 size 8388608 extends beyond EOD, truncated [ 118.254769][ T9632] can0: slcan on ttyS3. [ 118.317311][ T9629] can0 (unregistered): slcan off ttyS3. [ 118.487723][ C0] net_ratelimit: 1 callbacks suppressed [ 118.487745][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 118.565203][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 118.943780][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 118.997119][ T9678] ipvlan2: entered promiscuous mode [ 119.004332][ T9678] bridge0: port 3(ipvlan2) entered blocking state [ 119.010845][ T9678] bridge0: port 3(ipvlan2) entered disabled state [ 119.033301][ T9678] ipvlan2: entered allmulticast mode [ 119.038676][ T9678] bridge0: entered allmulticast mode [ 119.047517][ T9678] ipvlan2: left allmulticast mode [ 119.052627][ T9678] bridge0: left allmulticast mode [ 119.147182][ T9650] Set syz1 is full, maxelem 65536 reached [ 119.208081][ T9689] loop4: detected capacity change from 0 to 1024 [ 119.215846][ T9689] EXT4-fs: Ignoring removed nobh option [ 119.221476][ T9689] EXT4-fs: Ignoring removed bh option [ 119.270726][ T9689] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2211: Allocating blocks 385-513 which overlap fs metadata [ 119.304799][ T9689] EXT4-fs (loop4): pa ffff888106eff5b0: logic 16, phys. 129, len 24 [ 119.312882][ T9689] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 119.325341][ T9689] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 119.337661][ T9689] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.337661][ T9689] [ 119.347475][ T9689] EXT4-fs (loop4): Total free blocks count 0 [ 119.353560][ T9689] EXT4-fs (loop4): Free/Dirty block details [ 119.359479][ T9689] EXT4-fs (loop4): free_blocks=128 [ 119.364746][ T9689] EXT4-fs (loop4): dirty_blocks=0 [ 119.369781][ T9689] EXT4-fs (loop4): Block reservation details [ 119.375874][ T9689] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 119.474109][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.878946][ T9760] loop5: detected capacity change from 0 to 1024 [ 119.890413][ T9760] EXT4-fs: test_dummy_encryption option not supported [ 119.929503][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 120.004424][ T9782] loop5: detected capacity change from 0 to 1024 [ 120.272604][ T9776] serio: Serial port ptm0 [ 120.318775][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2242'. [ 120.376934][ T9842] loop7: detected capacity change from 0 to 1024 [ 120.393576][ T9842] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.404690][ T9842] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.420451][ T9842] JBD2: no valid journal superblock found [ 120.426275][ T9842] EXT4-fs (loop7): Could not load journal inode [ 120.436861][ T9842] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 120.460640][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 120.488619][ T9859] loop9: detected capacity change from 0 to 512 [ 120.506571][ T9857] loop7: detected capacity change from 0 to 1024 [ 120.523404][ T9864] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.681398][ T9872] netlink: 'syz.9.2250': attribute type 3 has an invalid length. [ 120.691845][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 120.691861][ T29] audit: type=1326 audit(890.646:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.720853][ T29] audit: type=1326 audit(890.646:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.743753][ T29] audit: type=1326 audit(890.646:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.766575][ T29] audit: type=1326 audit(890.646:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.789314][ T29] audit: type=1326 audit(890.646:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.812116][ T29] audit: type=1326 audit(890.646:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.834855][ T29] audit: type=1326 audit(890.646:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.857664][ T29] audit: type=1326 audit(890.646:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.880441][ T29] audit: type=1326 audit(890.646:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.903255][ T29] audit: type=1326 audit(890.646:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706e16e929 code=0x7ffc0000 [ 120.926135][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 121.084897][ T9885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9885 comm=syz.4.2257 [ 121.097440][ T9885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9885 comm=syz.4.2257 [ 121.336239][ T9913] pim6reg1: entered promiscuous mode [ 121.341579][ T9913] pim6reg1: entered allmulticast mode [ 121.347121][ T9910] loop4: detected capacity change from 0 to 1024 [ 121.377219][ T9910] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.388293][ T9910] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.418528][ T9910] JBD2: no valid journal superblock found [ 121.424348][ T9910] EXT4-fs (loop4): Could not load journal inode [ 121.447556][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 121.494748][ T9910] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 121.716867][ T9952] loop4: detected capacity change from 0 to 512 [ 121.724866][ T9952] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.734268][ T9952] EXT4-fs (loop4): 1 orphan inode deleted [ 121.740232][ T7617] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 1 [ 121.772898][ T9961] loop8: detected capacity change from 0 to 512 [ 121.779752][ T9961] ext4: Unknown parameter 'euid<00000000000000000000' [ 121.902462][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 122.140755][T10018] loop7: detected capacity change from 0 to 1024 [ 122.167931][T10018] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2297: bg 0: block 393: padding at end of block bitmap is not set [ 122.203987][T10018] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 117 [ 122.216498][T10018] EXT4-fs (loop7): This should not happen!! Data will be lost [ 122.216498][T10018] [ 122.271975][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 122.384212][T10047] vhci_hcd: invalid port number 96 [ 122.389546][T10047] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 122.434400][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 122.889479][T10110] netlink: 'syz.4.2319': attribute type 11 has an invalid length. [ 122.907961][T10110] netlink: 448 bytes leftover after parsing attributes in process `syz.4.2319'. [ 123.219493][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2327'. [ 123.420357][ C0] net_ratelimit: 1 callbacks suppressed [ 123.420375][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.570498][T10182] loop9: detected capacity change from 0 to 1024 [ 123.608826][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2341'. [ 123.621719][T10187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.692033][T10194] netlink: 271 bytes leftover after parsing attributes in process `syz.7.2344'. [ 123.875801][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.090487][T10229] loop8: detected capacity change from 0 to 512 [ 124.106318][T10229] EXT4-fs (loop8): orphan cleanup on readonly fs [ 124.116852][T10229] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.2359: bad orphan inode 13 [ 124.133239][T10229] ext4_test_bit(bit=12, block=18) = 1 [ 124.138682][T10229] is_bad_inode(inode)=0 [ 124.142924][T10229] NEXT_ORPHAN(inode)=2130706432 [ 124.147790][T10229] max_ino=32 [ 124.151007][T10229] i_nlink=1 [ 124.166076][T10229] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 124.190221][T10229] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2359: bg 0: block 248: padding at end of block bitmap is not set [ 124.215266][T10229] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2359: Failed to acquire dquot type 1 [ 124.233040][T10229] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.295164][ T1039] hid-generic FFFC:0003:0000.0006: unknown main item tag 0x0 [ 124.302626][ T1039] hid-generic FFFC:0003:0000.0006: unknown main item tag 0x0 [ 124.310208][ T1039] hid-generic FFFC:0003:0000.0006: unknown main item tag 0x0 [ 124.317683][ T1039] hid-generic FFFC:0003:0000.0006: unknown main item tag 0x0 [ 124.325115][ T1039] hid-generic FFFC:0003:0000.0006: unknown main item tag 0x0 [ 124.332731][ T1039] hid-generic FFFC:0003:0000.0006: unknown main item tag 0x0 [ 124.384927][ T1039] hid-generic FFFC:0003:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.407134][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.465055][T10255] loop8: detected capacity change from 0 to 512 [ 124.474160][T10255] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.496312][T10255] EXT4-fs (loop8): 1 truncate cleaned up [ 124.762515][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 124.771576][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 124.801920][T10281] loop4: detected capacity change from 0 to 512 [ 124.808697][T10281] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.823676][T10281] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 124.857468][T10281] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2382: attempt to clear invalid blocks 2 len 1 [ 124.862656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.882208][T10281] EXT4-fs (loop4): Remounting filesystem read-only [ 124.899617][T10281] EXT4-fs (loop4): 1 truncate cleaned up [ 125.019942][T10296] loop9: detected capacity change from 0 to 1024 [ 125.037688][T10298] atomic_op ffff8881135d5128 conn xmit_atomic 0000000000000000 [ 125.394002][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 125.599376][T10348] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2413'. [ 125.619409][T10348] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 125.634461][T10348] 0ªî{X¹¦: entered allmulticast mode [ 125.649012][T10348] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 125.685713][T10350] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 125.710180][T10350] SELinux: failed to load policy [ 125.849331][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 126.086276][T10377] loop7: detected capacity change from 0 to 2048 [ 126.149563][T10390] smc: net device bond0 applied user defined pnetid SYZ2 [ 126.169280][T10390] smc: net device bond0 erased user defined pnetid SYZ2 [ 126.245737][T10394] loop5: detected capacity change from 0 to 512 [ 126.280237][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 126.280254][ T29] audit: type=1326 audit(896.538:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.309433][ T29] audit: type=1326 audit(896.538:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.344123][T10394] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.352216][ T29] audit: type=1326 audit(896.538:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.370272][T10394] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2430: bad orphan inode 13 [ 126.375151][ T29] audit: type=1326 audit(896.538:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.385164][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 126.415089][ T29] audit: type=1326 audit(896.538:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.438085][ T29] audit: type=1326 audit(896.538:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.444718][T10401] loop8: detected capacity change from 0 to 512 [ 126.461000][ T29] audit: type=1326 audit(896.538:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.461035][ T29] audit: type=1326 audit(896.538:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.486594][T10394] ext4_test_bit(bit=12, block=18) = 1 [ 126.490170][ T29] audit: type=1326 audit(896.590:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.513011][T10394] is_bad_inode(inode)=0 [ 126.513021][T10394] NEXT_ORPHAN(inode)=2130706432 [ 126.518426][ T29] audit: type=1326 audit(896.590:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.9.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 126.541366][T10394] max_ino=32 [ 126.576587][T10394] i_nlink=1 [ 126.617067][T10394] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 126.627582][T10401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 126.635636][T10401] System zones: 0-2, 18-18, 34-34 [ 126.653998][T10401] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2435: bg 0: block 248: padding at end of block bitmap is not set [ 126.672303][T10394] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2430: bg 0: block 248: padding at end of block bitmap is not set [ 126.674457][T10401] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2435: Failed to acquire dquot type 1 [ 126.706568][T10394] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2430: Failed to acquire dquot type 1 [ 126.720640][T10401] EXT4-fs (loop8): 1 truncate cleaned up [ 126.728342][T10394] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.836509][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 126.879982][T10423] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 126.903256][T10423] SELinux: failed to load policy [ 127.093290][T10437] netlink: 'syz.9.2451': attribute type 3 has an invalid length. [ 127.232160][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2456'. [ 127.305515][T10460] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2458'. [ 127.406056][T10442] chnl_net:caif_netlink_parms(): no params data found [ 127.487117][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.494376][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.543704][T10442] bridge_slave_0: entered allmulticast mode [ 127.570914][T10442] bridge_slave_0: entered promiscuous mode [ 127.596967][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.604067][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.660541][T10442] bridge_slave_1: entered allmulticast mode [ 127.691114][T10442] bridge_slave_1: entered promiscuous mode [ 127.732534][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.756011][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.800505][T10442] team0: Port device team_slave_0 added [ 127.816206][T10442] team0: Port device team_slave_1 added [ 127.863895][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.870940][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.896954][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.918072][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.925183][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.951321][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.997951][T10483] loop7: detected capacity change from 0 to 512 [ 128.016558][T10483] EXT4-fs: Ignoring removed nobh option [ 128.026445][T10442] hsr_slave_0: entered promiscuous mode [ 128.032984][T10442] hsr_slave_1: entered promiscuous mode [ 128.033255][T10483] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 128.047177][T10483] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2467: attempt to clear invalid blocks 2 len 1 [ 128.089130][T10483] EXT4-fs (loop7): Remounting filesystem read-only [ 128.120621][T10483] EXT4-fs (loop7): 1 truncate cleaned up [ 128.126730][T10483] EXT4-fs mount: 25 callbacks suppressed [ 128.126745][T10483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.181806][T10497] loop5: detected capacity change from 0 to 1024 [ 128.189455][T10442] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.203211][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.222346][T10497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.240580][T10501] loop7: detected capacity change from 0 to 512 [ 128.254593][T10442] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.269094][T10501] EXT4-fs (loop7): orphan cleanup on readonly fs [ 128.301025][T10442] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.301586][T10501] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2473: bad orphan inode 13 [ 128.326397][T10501] ext4_test_bit(bit=12, block=18) = 1 [ 128.331872][T10501] is_bad_inode(inode)=0 [ 128.336106][T10501] NEXT_ORPHAN(inode)=2130706432 [ 128.341042][T10501] max_ino=32 [ 128.344265][T10501] i_nlink=1 [ 128.347811][T10501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.360303][ C0] net_ratelimit: 4 callbacks suppressed [ 128.360320][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 128.380863][T10501] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 128.399804][T10442] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.422364][T10501] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2473: bg 0: block 248: padding at end of block bitmap is not set [ 128.449140][T10501] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2473: Failed to acquire dquot type 1 [ 128.484591][T10501] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.506770][T10442] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 128.535736][T10442] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 128.543603][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.558906][T10442] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 128.568756][T10442] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 128.707019][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.720450][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.756206][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.763443][ T7610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.775851][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.783017][ T7610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.810197][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 129.033478][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.154314][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.316064][T10442] veth0_vlan: entered promiscuous mode [ 129.334832][T10442] veth1_vlan: entered promiscuous mode [ 129.341641][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 129.373952][T10442] veth0_macvtap: entered promiscuous mode [ 129.383774][T10442] veth1_macvtap: entered promiscuous mode [ 129.401122][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.413407][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.425038][T10442] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.433890][T10442] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.442657][T10442] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.451440][T10442] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.495472][T10550] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2485'. [ 129.532532][T10553] loop7: detected capacity change from 0 to 1024 [ 129.543531][T10553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.617805][T10560] loop8: detected capacity change from 0 to 1024 [ 129.650759][T10560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.663457][T10564] loop5: detected capacity change from 0 to 512 [ 129.764378][T10566] loop9: detected capacity change from 0 to 2048 [ 129.780334][T10564] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 129.797266][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 129.830336][T10566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.842812][T10564] System zones: 0-2, 18-18, 34-34 [ 129.878178][T10564] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2489: bg 0: block 248: padding at end of block bitmap is not set [ 129.932214][T10564] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2489: Failed to acquire dquot type 1 [ 129.964923][T10564] EXT4-fs (loop5): 1 truncate cleaned up [ 129.978779][T10564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.084426][ T3678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.328887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 130.369443][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.579322][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.605936][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.623911][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.643683][ T7592] bond0 (unregistering): Released all slaves [ 130.669095][ T7592] bond1 (unregistering): Released all slaves [ 130.690998][ T7592] tipc: Disabling bearer [ 130.696308][ T7592] tipc: Disabling bearer [ 130.701325][ T7592] tipc: Left network mode [ 130.722994][T10442] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.740710][ T7592] hsr_slave_0: left promiscuous mode [ 130.764776][ T7592] hsr_slave_1: left promiscuous mode [ 130.806330][T10593] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 130.812783][T10593] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 130.833396][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 130.849244][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 130.929026][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2502'. [ 131.037668][T10576] chnl_net:caif_netlink_parms(): no params data found [ 131.083404][T10610] loop8: detected capacity change from 0 to 2048 [ 131.100587][T10610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.127104][ T7592] IPVS: stop unused estimator thread 0... [ 131.146712][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.153894][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.176384][T10576] bridge_slave_0: entered allmulticast mode [ 131.191382][T10576] bridge_slave_0: entered promiscuous mode [ 131.206572][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.213812][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.231133][T10576] bridge_slave_1: entered allmulticast mode [ 131.245483][T10576] bridge_slave_1: entered promiscuous mode [ 131.282420][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.294798][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.325674][T10576] team0: Port device team_slave_0 added [ 131.359969][T10576] team0: Port device team_slave_1 added [ 131.396826][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.403913][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.430012][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.447726][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.454743][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.480787][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.494063][T10442] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.515061][T10576] hsr_slave_0: entered promiscuous mode [ 131.526827][T10576] hsr_slave_1: entered promiscuous mode [ 131.532750][T10576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.540403][T10576] Cannot create hsr debugfs directory [ 131.798276][T10576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.808996][T10576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.818113][T10576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.829509][T10576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.881729][T10576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.910110][T10576] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.920320][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.927438][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.943830][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.950941][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.977806][T10576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.988213][T10576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.050037][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.124630][T10576] veth0_vlan: entered promiscuous mode [ 132.132409][T10576] veth1_vlan: entered promiscuous mode [ 132.150479][T10576] veth0_macvtap: entered promiscuous mode [ 132.160058][T10576] veth1_macvtap: entered promiscuous mode [ 132.173146][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.184952][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.196247][T10576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.205102][T10576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.213901][T10576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.222681][T10576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.295253][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 132.295267][ T29] audit: type=1400 audit(902.870:4138): avc: denied { read } for pid=10632 comm="syz.7.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.325085][ T3392] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 132.334501][ T3392] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.609171][T10646] loop2: detected capacity change from 0 to 1024 [ 132.639785][T10646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.508886][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.526130][T10655] netlink: 'syz.7.2510': attribute type 29 has an invalid length. [ 133.553356][T10654] pimreg: entered allmulticast mode [ 133.567372][T10654] pimreg: left allmulticast mode [ 133.581795][T10662] netlink: 'syz.7.2512': attribute type 13 has an invalid length. [ 133.616233][T10664] loop2: detected capacity change from 0 to 128 [ 133.634436][T10664] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.647699][T10666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.693844][T10576] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.711342][T10666] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.760232][T10666] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.801493][T10666] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.837385][T10683] smc: net device bond0 applied user defined pnetid SYZ2 [ 133.841834][T10682] syzkaller1: entered promiscuous mode [ 133.849936][T10682] syzkaller1: entered allmulticast mode [ 133.851123][T10683] smc: net device bond0 erased user defined pnetid SYZ2 [ 133.892775][T10666] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.937134][T10666] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.972065][T10666] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.003788][T10666] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.037725][T10695] netlink: 'syz.2.2533': attribute type 13 has an invalid length. [ 134.041831][T10693] loop7: detected capacity change from 0 to 512 [ 134.071458][T10693] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 134.095857][T10693] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.113789][T10693] EXT4-fs (loop7): mount failed [ 134.143626][T10703] netem: change failed [ 134.244797][T10713] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2541'. [ 134.262288][T10715] syzkaller1: entered promiscuous mode [ 134.267793][T10715] syzkaller1: entered allmulticast mode [ 134.373595][T10724] loop9: detected capacity change from 0 to 512 [ 134.399329][T10724] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 134.409545][T10724] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.424457][T10724] EXT4-fs (loop9): mount failed [ 135.805995][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2558'. [ 135.819731][ T29] audit: type=1326 audit(906.588:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 135.825077][T10732] loop2: detected capacity change from 0 to 2048 [ 135.842756][ T29] audit: type=1326 audit(906.588:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 135.873748][ T29] audit: type=1326 audit(906.620:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfddd3d290 code=0x7ffc0000 [ 135.896950][ T29] audit: type=1326 audit(906.620:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfddd40157 code=0x7ffc0000 [ 135.919929][ T29] audit: type=1326 audit(906.620:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfddd3e929 code=0x7ffc0000 [ 135.942816][ T29] audit: type=1326 audit(906.620:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfddd40157 code=0x7ffc0000 [ 135.965763][ T29] audit: type=1326 audit(906.620:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.9.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfddd3d58a code=0x7ffc0000 [ 135.977396][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 135.996001][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.003440][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.022576][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.030146][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.037650][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.045068][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.052464][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.059941][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.067393][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.074869][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.082279][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.089689][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.097244][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.124199][T10732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.124489][T10739] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.182817][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.190312][ T3392] hid-generic 0006:0000:0000.0008: unknown main item tag 0x0 [ 136.232682][ T3392] hid-generic 0006:0000:0000.0008: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 136.300571][T10739] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.379736][T10739] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.445178][T10739] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.487997][T10739] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.531568][T10739] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.557529][T10739] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.580237][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.593874][T10739] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.729617][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2561'. [ 136.906880][T10783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.951624][T10783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.997617][T10783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.044555][T10783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.086025][T10783] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.090034][T10783] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.106502][T10783] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.110276][T10783] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.196457][T10789] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 137.252348][T10795] loop9: detected capacity change from 0 to 1024 [ 137.286881][T10795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.692088][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 137.692105][ T29] audit: type=1107 audit(908.558:4186): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 137.758789][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 137.804904][T10813] loop8: detected capacity change from 0 to 1024 [ 137.822968][T10813] EXT4-fs: Ignoring removed nobh option [ 137.828576][T10813] EXT4-fs: Ignoring removed nobh option [ 137.844333][T10813] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 137.864208][T10813] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: comm syz.8.2585: inode #4294967295: comm syz.8.2585: iget: illegal inode # [ 137.892755][T10813] EXT4-fs (loop8): no journal found [ 137.898109][T10813] EXT4-fs (loop8): can't get journal size [ 137.912675][T10813] EXT4-fs (loop8): failed to initialize system zone (-22) [ 137.927155][T10813] EXT4-fs (loop8): mount failed [ 138.123976][T10795] ================================================================== [ 138.132109][T10795] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 138.140391][T10795] [ 138.142813][T10795] write to 0xffff88811949254c of 4 bytes by task 10799 on cpu 1: [ 138.150543][T10795] xas_set_mark+0x12b/0x140 [ 138.155080][T10795] __folio_start_writeback+0x1dd/0x440 [ 138.160576][T10795] ext4_bio_write_folio+0x5ad/0x9f0 [ 138.165832][T10795] mpage_submit_folio+0xe4/0x170 [ 138.170811][T10795] mpage_process_page_bufs+0x39b/0x4a0 [ 138.176312][T10795] mpage_prepare_extent_to_map+0x741/0xaa0 [ 138.182141][T10795] ext4_do_writepages+0xa1a/0x21c0 [ 138.187278][T10795] ext4_writepages+0x176/0x300 [ 138.192051][T10795] do_writepages+0x1c3/0x310 [ 138.196736][T10795] file_write_and_wait_range+0x156/0x2c0 [ 138.202383][T10795] generic_buffers_fsync_noflush+0x45/0x120 [ 138.208297][T10795] ext4_sync_file+0x1ab/0x690 [ 138.212989][T10795] vfs_fsync_range+0x10d/0x130 [ 138.217752][T10795] ext4_buffered_write_iter+0x34f/0x3c0 [ 138.223310][T10795] ext4_file_write_iter+0xdbf/0xf00 [ 138.228519][T10795] iter_file_splice_write+0x5f2/0x970 [ 138.233909][T10795] direct_splice_actor+0x156/0x2a0 [ 138.239041][T10795] splice_direct_to_actor+0x312/0x680 [ 138.244430][T10795] do_splice_direct+0xda/0x150 [ 138.249216][T10795] do_sendfile+0x380/0x650 [ 138.253642][T10795] __x64_sys_sendfile64+0x105/0x150 [ 138.258855][T10795] x64_sys_call+0xb39/0x2fb0 [ 138.263462][T10795] do_syscall_64+0xd2/0x200 [ 138.267979][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.273874][T10795] [ 138.276200][T10795] read to 0xffff88811949254c of 4 bytes by task 10795 on cpu 0: [ 138.283824][T10795] filemap_write_and_wait_range+0xfc/0x340 [ 138.289642][T10795] filemap_invalidate_pages+0xa4/0x1a0 [ 138.295100][T10795] kiocb_invalidate_pages+0x6e/0x80 [ 138.300302][T10795] __iomap_dio_rw+0x5d4/0x1250 [ 138.305086][T10795] iomap_dio_rw+0x40/0x90 [ 138.309435][T10795] ext4_file_write_iter+0xad9/0xf00 [ 138.314671][T10795] iter_file_splice_write+0x5f2/0x970 [ 138.320064][T10795] direct_splice_actor+0x156/0x2a0 [ 138.325204][T10795] splice_direct_to_actor+0x312/0x680 [ 138.330596][T10795] do_splice_direct+0xda/0x150 [ 138.335375][T10795] do_sendfile+0x380/0x650 [ 138.339799][T10795] __x64_sys_sendfile64+0x105/0x150 [ 138.345005][T10795] x64_sys_call+0xb39/0x2fb0 [ 138.349606][T10795] do_syscall_64+0xd2/0x200 [ 138.354121][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.360017][T10795] [ 138.362337][T10795] value changed: 0x0a000021 -> 0x04000021 [ 138.368053][T10795] [ 138.370379][T10795] Reported by Kernel Concurrency Sanitizer on: [ 138.376536][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.9.2575 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 138.388778][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.398837][T10795] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.407568][ T29] audit: type=1400 audit(909.074:4187): avc: denied { write } for pid=3307 comm="syz-executor" path="pipe:[2438]" dev="pipefs" ino=2438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 138.514360][ T8961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.729859][ T7592] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.737321][ T7160] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.827948][ T7592] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.865978][ T7592] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.922549][ T7592] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.972972][ T7592] bridge_slave_1: left allmulticast mode [ 138.978666][ T7592] bridge_slave_1: left promiscuous mode [ 138.984288][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.992074][ T7592] bridge_slave_0: left allmulticast mode [ 138.997813][ T7592] bridge_slave_0: left promiscuous mode [ 139.003530][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.075660][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.085649][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.095179][ T7592] bond0 (unregistering): Released all slaves [ 139.142707][ T7592] hsr_slave_0: left promiscuous mode [ 139.148451][ T7592] hsr_slave_1: left promiscuous mode [ 139.154122][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.161567][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.169205][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.176579][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.186880][ T7592] veth1_macvtap: left promiscuous mode [ 139.192504][ T7592] veth0_macvtap: left promiscuous mode [ 139.198092][ T7592] veth1_vlan: left promiscuous mode [ 139.203329][ T7592] veth0_vlan: left promiscuous mode [ 139.261202][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 139.270696][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 139.579188][ T7592] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.644293][ T7592] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.710672][ T7592] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.767786][ T7592] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.856349][ T7592] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.882008][ T7592] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.938811][ T7592] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.986094][ T7592] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.064575][ T7592] bridge_slave_1: left allmulticast mode [ 140.070336][ T7592] bridge_slave_1: left promiscuous mode [ 140.076063][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.083932][ T7592] bridge_slave_0: left promiscuous mode [ 140.089595][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.097993][ T7592] bridge_slave_1: left allmulticast mode [ 140.103681][ T7592] bridge_slave_1: left promiscuous mode [ 140.109369][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.117158][ T7592] bridge_slave_0: left allmulticast mode [ 140.122847][ T7592] bridge_slave_0: left promiscuous mode [ 140.128619][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.209695][ T7592] bond1 (unregistering): (slave gretap1): Releasing active interface [ 140.219525][ T7592] bond2 (unregistering): (slave gretap2): Releasing active interface [ 140.233403][ T7592] team0: Port device geneve1 removed [ 140.272407][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.282370][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.291851][ T7592] bond0 (unregistering): Released all slaves [ 140.300605][ T7592] bond1 (unregistering): Released all slaves [ 140.309109][ T7592] bond2 (unregistering): Released all slaves [ 140.349044][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.360157][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.369923][ T7592] bond0 (unregistering): Released all slaves [ 140.428562][ T7592] hsr_slave_0: left promiscuous mode [ 140.434447][ T7592] hsr_slave_1: left promiscuous mode [ 140.439981][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.447407][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.454977][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.462471][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.471791][ T7592] hsr_slave_0: left promiscuous mode [ 140.477369][ T7592] hsr_slave_1: left promiscuous mode [ 140.482925][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.490448][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.498013][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.505414][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.518318][ T7592] veth1_macvtap: left promiscuous mode [ 140.523812][ T7592] veth0_macvtap: left promiscuous mode [ 140.529361][ T7592] veth1_vlan: left promiscuous mode [ 140.534623][ T7592] veth0_vlan: left promiscuous mode [ 140.540523][ T7592] veth1_macvtap: left promiscuous mode [ 140.546029][ T7592] veth0_macvtap: left promiscuous mode [ 140.551545][ T7592] veth1_vlan: left promiscuous mode [ 140.556831][ T7592] veth0_vlan: left promiscuous mode [ 140.651385][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 140.661162][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 140.713428][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 140.723026][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 141.161190][ T7592] IPVS: stop unused estimator thread 0... [ 141.211768][ T7592] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.287101][ T7592] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.334783][ T7592] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.382060][ T7592] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.451247][ T7592] bridge_slave_1: left allmulticast mode [ 141.456997][ T7592] bridge_slave_1: left promiscuous mode [ 141.462739][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.470614][ T7592] bridge_slave_0: left allmulticast mode [ 141.476325][ T7592] bridge_slave_0: left promiscuous mode [ 141.482022][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.554696][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.564683][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.574202][ T7592] bond0 (unregistering): Released all slaves [ 141.640144][ T7592] hsr_slave_0: left promiscuous mode [ 141.645701][ T7592] hsr_slave_1: left promiscuous mode [ 141.651236][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.658676][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.666501][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.673908][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.683742][ T7592] veth1_macvtap: left promiscuous mode [ 141.689383][ T7592] veth0_macvtap: left promiscuous mode [ 141.694949][ T7592] veth1_vlan: left promiscuous mode [ 141.700156][ T7592] veth0_vlan: left promiscuous mode [ 141.758204][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 141.767585][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 142.028572][ T7592] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.075541][ T7592] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.113813][ T7592] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.199048][ T7592] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.258990][ T7592] bridge_slave_1: left allmulticast mode [ 142.264729][ T7592] bridge_slave_1: left promiscuous mode [ 142.270492][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.278358][ T7592] bridge_slave_0: left allmulticast mode [ 142.284097][ T7592] bridge_slave_0: left promiscuous mode [ 142.289693][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.370340][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.380009][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.389499][ T7592] bond0 (unregistering): Released all slaves [ 142.428341][ T7592] hsr_slave_0: left promiscuous mode [ 142.433932][ T7592] hsr_slave_1: left promiscuous mode [ 142.439562][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.446974][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.454466][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.461916][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.471511][ T7592] veth1_macvtap: left promiscuous mode [ 142.477175][ T7592] veth0_macvtap: left promiscuous mode [ 142.482743][ T7592] veth1_vlan: left promiscuous mode [ 142.488346][ T7592] veth0_vlan: left promiscuous mode [ 142.546883][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 142.556598][ T7592] team0 (unregistering): Port device team_slave_0 removed