last executing test programs: 47.387718759s ago: executing program 1 (id=1328): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xffffffffffffff0c, 0x0, 0x0) 47.365376931s ago: executing program 1 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xb, &(0x7f0000000580)={0x0, 0x4d736, 0x1000, 0x100401, 0x3cc}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r2, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 47.347796822s ago: executing program 1 (id=1330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x14, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x672}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 47.285881067s ago: executing program 1 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 47.285438207s ago: executing program 1 (id=1332): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r0) 47.097861783s ago: executing program 1 (id=1336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xffff}, {0x5}}}, 0x24}}, 0x2404c044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900090400000000000000000a000000000000000002000008001e0001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.097534642s ago: executing program 32 (id=1336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xffff}, {0x5}}}, 0x24}}, 0x2404c044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900090400000000000000000a000000000000000002000008001e0001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.923904847s ago: executing program 3 (id=1348): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) recvmsg$unix(r1, 0x0, 0x40002042) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 45.87574036s ago: executing program 3 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1, 0x0, 0x0, 0x2000000}, 0x40002001) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 45.033491178s ago: executing program 3 (id=1376): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r0, 0xffffffffffffffff, 0x0) 44.980447452s ago: executing program 3 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 44.929868456s ago: executing program 3 (id=1386): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_adjtime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 44.579875304s ago: executing program 3 (id=1397): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 44.579567414s ago: executing program 33 (id=1397): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 26.033350897s ago: executing program 6 (id=1800): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) 25.950908284s ago: executing program 6 (id=1802): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 25.301019446s ago: executing program 6 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 24.731275222s ago: executing program 6 (id=1813): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 24.523946538s ago: executing program 6 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 24.213843572s ago: executing program 6 (id=1826): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 24.213594763s ago: executing program 34 (id=1826): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 2.763216868s ago: executing program 0 (id=2329): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 1.905501597s ago: executing program 0 (id=2348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 1.881864299s ago: executing program 0 (id=2350): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") 1.715725892s ago: executing program 5 (id=2351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 1.642287718s ago: executing program 5 (id=2353): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1.629754539s ago: executing program 0 (id=2354): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) 1.49352499s ago: executing program 7 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.478936981s ago: executing program 7 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x3, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000021075c556690a0b82000008000000f1", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) 1.249188089s ago: executing program 7 (id=2358): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 1.067176984s ago: executing program 4 (id=2362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) close(r2) 785.191277ms ago: executing program 5 (id=2363): memfd_create(0x0, 0x3) r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000240)=""/87, 0x57}, 0x2297}, {{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1}, 0x10001}], 0x2, 0x2004, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 783.228497ms ago: executing program 4 (id=2374): getuid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file2\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x30, 0x7f4, &(0x7f0000000e40)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 509.972529ms ago: executing program 0 (id=2364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 509.731988ms ago: executing program 5 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x140) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 509.551868ms ago: executing program 2 (id=2366): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 509.308559ms ago: executing program 4 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200008008005500001c00ffffff"], 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 449.083674ms ago: executing program 5 (id=2368): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 437.102435ms ago: executing program 0 (id=2369): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) pause() 386.172089ms ago: executing program 7 (id=2370): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) 242.02635ms ago: executing program 7 (id=2371): signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 241.30791ms ago: executing program 2 (id=2383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 119.48648ms ago: executing program 2 (id=2372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000080)='./file0\x00', 0x21488b, &(0x7f0000000100)=ANY=[], 0x1, 0x66e, &(0x7f0000001880)="$eJzs3V1rG9kdx/HfyLIseyGUtiwh5OEk6YJDU0WSNw4ihVYdjezZShoxI7c2FJZ0Yy8hcrZNUmh8E3LTB9i+gb3bm6X0RRR63XfRy8LS3hV6M2WeLNvSWHYiO7vb78es52jmP3P+Z0Y7/4wljQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGTZrWq1Zqnj9jY2TT675XvdY5YnW5vXraRxa0JXXxzqV7Ki/1Qu62Iy6+J3R4vfjX7d0OXk0WWVo0lZe++8+6373ykWsvWPSeh1KJROsM1SmqQxz17sPX4wHG4/nXEiXwEqnCBozem5ged2m2uOcQPPNFZXq3fW24FpuyUFW8HA6RrbdwoDzzfL9i1TazRWjFPZ8jZ6a61mx8lm3vtBvVpdNR8spHv2zgeVwF53Ox23txbHRIujmHvm018kIU6za8zOo+H2yrQko6DaSYLq04Lq1Xq9VqvXa6t3G3fvVavFsRnVIzQWMfMnLb5mZnfyBt5QIar//7CkjsrqaUObMhN/bLXky1M3Z3kqq//v3XGO7fdg/c+q/MXR4kuK6//V5NHVvPqfk4uRiVeYtMTKmf96P8/0Qnt6rAcaaqhtPZ3Ndq/NLsOz/VmTipKrQJ5cddXUmpzFbI5RQ6taVVUfal1tBTJqy1VHjgJtKdBAjrrxMfHlqBm3IsuydUtGNTXU0IqMHFW0JU8b6mlNLTX1nzAMd/Qo3u8rx+SoLKh2kqD6MUF59f+XL5Osp9Z/S9T/b7Ts/HWSGOCtC9Pr/1O6djbZAAAAAACAs2DFf3234tfur0gK1XY7TvVtpwUAAAAAAGYofuX/cjSZj1pXZOVc/4fnnxsAAAAAAJgNK/6MnSVpKX5TvzX6JNRJ3gQwdw4pAgAAAACANxS//n+1JIXxvdeuyTrV9T8AAAAAAPga+MOBe+wXs3vshtnL+gVJQX/B+uu/FuTPW6/6m9+zdpvRkuZuGjP2DoBB+5J1Ib1RbzwpSYof2c5l60oSlN4E08pW/3Jn2r3+Lf9IAqW57M8X0xJYLaaP9KmuJzHXy8n04V5B8ZKkl6W223Eqtte5X1OzeaEwcDYHv3ny6LeSvz/OnUfD7cpHnwwfxrm8ima92o3yeHkoncKhXF5qLJfnSvfFlYkjXlQ76/KPve6SFfdbzcY/p+Zu4WBHJxv/73QjibmxlEyX9pTuiXj85Wj8tUp8yEajj0b12Z9Ho68dHfmkA5GTRTnOQlqPYm4u30wmWX5pFt+fk+qVo8egFD0FR/uifjCL6fvC+vfYvriZxORlEe2LlSiLv0UbGj0TDmWxcrosxo4IALwtO6MqFN/EfPwe+0fr7uuc5aZX9x8f7uX5Z2HygcM5qZi+NnFsL2VFZ/TleNsqKT6xFi/tn2V3r2dn9GpaV8rKOaNX36C6RX39ZfQdSGnaY3Xlv2EY3q/F/f5pv9+kqn4erfB5br9Bpz4XjfDO891fxTfAj3y8/fH2k3p9ZbX6frV6t675eBjphNoDAJhg+nfsTI2w3t+/qn74z/eS1qGK9+39txRU9JE+0VAPdTv7CoFrk7e6dOBtCLfHr1qj2EWl/wpJY9+JHt/OvaqLa2my3Z9vlX6UBMW/55WtcrhSj3JYOctDAADAubvRSBs5dfgk9f92fN0tafnSgevu/Wv2I7X86DcE59Xc2rntAwAA/t84/pfW0uD3lu+7/Q9rjUatOVh3jO/ZPzW+21pzjNsbOL693uytOabvewPP9jqm72vBbTmBCTb6fc8fmLbnm74XuJum7XYck371e+B0m72Bawf9jtMMHGN7vUHTHpiWG9imv/GTjhusO368ctB3bLft2s2B6/VM4G34tlMxJnCcA4Fuy+kN3LYbNXum77vdpr9lfuZ1NrqOaTmB7bv9gZdsMOvL7bU9vxtvtqLw1F90CADAN9GzF3uPHwyH20/zGvEV/ZSYUaM0aYNZX7ziDADAV8N4lc5VPpeEAAAAAAAAAAAAAAAAAAAAAADAmOkf6TtlY37ShwWl/Tm/vnCi7ViadWKnaRRef/W/HxOzuD8n2/0HY14dXSsMw/iezGc4UiWN4uy3vHiaj43OoPHDnWSP5sZECycuWtg/FsXZ/+8QNZ58kbMoDMPw+NUXDu/D0nEDPNwoSnpaeoND8FZORwDO0f8CAAD//y/BQEY=") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xc2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmsg(r0, 0x0, 0x10000) 119.25896ms ago: executing program 4 (id=2375): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b0", 0x424}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 113.130251ms ago: executing program 7 (id=2376): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) write(r2, 0x0, 0x0) 107.519481ms ago: executing program 4 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) 65.722814ms ago: executing program 2 (id=2378): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x11, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="65ef83f7775bcf0ddb"}}}}}}, 0x0) 1.743769ms ago: executing program 2 (id=2379): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(0x0, 0x0) 1.281169ms ago: executing program 5 (id=2380): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) 805.609µs ago: executing program 4 (id=2381): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa}, [@jmp={0x5, 0x0, 0xc, 0x1, 0x2, 0x18, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe54e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637288a8"], 0x16) 0s ago: executing program 2 (id=2392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031120fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): ted: batadv_slave_1 [ 77.184137][ T3539] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.204362][ T3539] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.225347][ T3539] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.246438][ T3539] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.257106][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 77.281814][ T6994] team1: entered promiscuous mode [ 77.286886][ T6994] team1: entered allmulticast mode [ 77.290891][ T7002] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 77.307528][ T7002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.347729][ T7002] bond2: (slave veth7): Enslaving as an active interface with a down link [ 77.366015][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.373490][ T7002] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 77.471050][ T7013] loop5: detected capacity change from 0 to 512 [ 77.482979][ T7013] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.500821][ T7013] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1452: Failed to acquire dquot type 1 [ 77.527205][ T7013] EXT4-fs (loop5): 1 truncate cleaned up [ 77.544257][ T7013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.623637][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.732269][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1463'. [ 77.819432][ T7043] loop2: detected capacity change from 0 to 512 [ 77.836910][ T7043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.862685][ T7043] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.875617][ T7043] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1466: corrupted inode contents [ 77.889764][ T7043] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1466: mark_inode_dirty error [ 77.903054][ T7043] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1466: corrupted inode contents [ 77.927838][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.099844][ T7056] syzkaller1: entered promiscuous mode [ 78.105523][ T7056] syzkaller1: entered allmulticast mode [ 78.110470][ T7054] SELinux: failed to load policy [ 78.147888][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 78.147903][ T29] audit: type=1326 audit(1755343719.273:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.196616][ T29] audit: type=1326 audit(1755343719.273:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.220224][ T29] audit: type=1326 audit(1755343719.273:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.243782][ T29] audit: type=1326 audit(1755343719.273:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.267457][ T29] audit: type=1326 audit(1755343719.273:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.290859][ T29] audit: type=1326 audit(1755343719.273:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.314343][ T29] audit: type=1326 audit(1755343719.273:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.337935][ T29] audit: type=1326 audit(1755343719.303:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.361400][ T29] audit: type=1326 audit(1755343719.313:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.385120][ T29] audit: type=1326 audit(1755343719.313:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cca4ebe9 code=0x7ffc0000 [ 78.579406][ T7086] netlink: 'syz.6.1483': attribute type 1 has an invalid length. [ 78.598018][ T7086] bridge0: port 3(veth3) entered blocking state [ 78.604379][ T7086] bridge0: port 3(veth3) entered disabled state [ 78.612214][ T7086] veth3: entered allmulticast mode [ 78.618039][ T7086] veth3: entered promiscuous mode [ 78.731612][ T7100] loop6: detected capacity change from 0 to 512 [ 78.742184][ T7102] tipc: Started in network mode [ 78.747180][ T7102] tipc: Node identity ac14140f, cluster identity 4711 [ 78.753110][ T7100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.754290][ T7102] tipc: New replicast peer: 255.255.255.255 [ 78.768488][ T7100] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.772868][ T7102] tipc: Enabled bearer , priority 10 [ 78.805072][ T6850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.834824][ T7108] loop6: detected capacity change from 0 to 2048 [ 78.866112][ T7108] Alternate GPT is invalid, using primary GPT. [ 78.872517][ T7108] loop6: p2 p3 p7 [ 78.989855][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1498'. [ 79.425836][ T7132] loop5: detected capacity change from 0 to 512 [ 79.435396][ T7132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.449585][ T7132] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.455419][ T7129] loop6: detected capacity change from 0 to 8192 [ 79.486580][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.536888][ T7140] loop6: detected capacity change from 0 to 512 [ 79.596183][ T7140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.610559][ T7140] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.727982][ T6850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.756522][ T7161] loop6: detected capacity change from 0 to 512 [ 79.772144][ T7161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.785281][ T7161] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.799490][ T7161] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1517: corrupted inode contents [ 79.811797][ T7161] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1517: mark_inode_dirty error [ 79.823673][ T7161] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1517: corrupted inode contents [ 79.850820][ T6850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.899303][ T9] tipc: Node number set to 2886997007 [ 80.303328][ T7187] SELinux: failed to load policy [ 80.328105][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 80.416944][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 80.438041][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.445824][ T7196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.837280][ T7211] loop4: detected capacity change from 0 to 2048 [ 80.839531][ T7217] netlink: 'syz.5.1539': attribute type 1 has an invalid length. [ 80.859298][ T7217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.869874][ T7211] Alternate GPT is invalid, using primary GPT. [ 80.876545][ T7211] loop4: p2 p3 p7 [ 80.937496][ T7217] bond1: (slave veth3): Enslaving as an active interface with a down link [ 80.957929][ T7230] netlink: 'syz.6.1544': attribute type 1 has an invalid length. [ 81.005810][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.024675][ T7217] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 81.106928][ T7240] netlink: '+}[@': attribute type 1 has an invalid length. [ 81.114277][ T7240] netlink: 198116 bytes leftover after parsing attributes in process `+}[@'. [ 81.186194][ T7252] loop6: detected capacity change from 0 to 512 [ 81.204607][ T7252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.214773][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 81.218144][ T7252] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.242816][ T7252] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1556: corrupted inode contents [ 81.268850][ T7252] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1556: mark_inode_dirty error [ 81.280946][ T7252] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1556: corrupted inode contents [ 81.294356][ T7268] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1556: corrupted inode contents [ 81.310597][ T7268] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1556: mark_inode_dirty error [ 81.330658][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 81.339742][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.352747][ T7268] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1556: corrupted inode contents [ 81.368188][ T7274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.381815][ T7276] netlink: 'syz.5.1565': attribute type 1 has an invalid length. [ 81.391794][ T6850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.398933][ T7276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.421269][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.430567][ T7276] bond2: (slave batadv0): making interface the new active one [ 81.439689][ T7276] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 81.458524][ T7274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.543412][ T7274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.582047][ T7286] loop6: detected capacity change from 0 to 2048 [ 81.589000][ T7286] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 81.598682][ T7274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.674511][ T3539] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.687359][ T3492] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701116][ T3492] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.733116][ T3492] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.856337][ T7294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7294 comm=syz.0.1572 [ 82.178583][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1579'. [ 82.192029][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.199497][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.220395][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.227831][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.408655][ T7318] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.484645][ T7318] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.569831][ T7318] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.619014][ T7331] 9pnet_fd: Insufficient options for proto=fd [ 82.626530][ T7318] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.697914][ T3492] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.713065][ T3492] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732260][ T3492] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.754619][ T3492] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.836155][ T7340] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 82.902759][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'. [ 82.931962][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.939466][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.953410][ T7344] loop6: detected capacity change from 0 to 8192 [ 83.057945][ T7356] random: crng reseeded on system resumption [ 83.091669][ T7360] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.159181][ T7360] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.208893][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1604'. [ 83.238658][ T7360] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.290589][ T7368] loop2: detected capacity change from 0 to 512 [ 83.308860][ T7360] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.321195][ T7368] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1606: bg 0: block 248: padding at end of block bitmap is not set [ 83.337054][ T7368] __quota_error: 415 callbacks suppressed [ 83.337068][ T7368] Quota error (device loop2): write_blk: dquota write failed [ 83.350287][ T7368] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 83.360718][ T7368] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1606: Failed to acquire dquot type 1 [ 83.372998][ T7368] EXT4-fs (loop2): 1 truncate cleaned up [ 83.380047][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.392957][ T7368] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.399863][ T3539] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.406098][ T7368] EXT4-fs (loop2): shut down requested (1) [ 83.427952][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.440411][ T3539] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.460814][ T3539] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.477062][ T3539] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.522463][ T7374] netlink: 'syz.2.1608': attribute type 27 has an invalid length. [ 83.534992][ T7374] geneve0: left allmulticast mode [ 83.540896][ T7374] geneve2: left promiscuous mode [ 83.545862][ T7374] geneve2: left allmulticast mode [ 83.552329][ T7374] team1: left promiscuous mode [ 83.557129][ T7374] team1: left allmulticast mode [ 83.587997][ T7376] syzkaller1: entered promiscuous mode [ 83.593503][ T7376] syzkaller1: entered allmulticast mode [ 83.772498][ T7380] loop2: detected capacity change from 0 to 1024 [ 83.779203][ T7380] EXT4-fs: Ignoring removed oldalloc option [ 83.785164][ T7380] EXT4-fs: Ignoring removed orlov option [ 83.798558][ T7380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.840033][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.861348][ T29] audit: type=1326 audit(1755343980.982:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c71feebe9 code=0x7ffc0000 [ 83.884774][ T29] audit: type=1326 audit(1755343980.982:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c71feebe9 code=0x7ffc0000 [ 83.908255][ T29] audit: type=1326 audit(1755343980.982:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6c71feebe9 code=0x7ffc0000 [ 83.997105][ T29] audit: type=1326 audit(1755343980.982:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c71feec23 code=0x7ffc0000 [ 84.020467][ T29] audit: type=1326 audit(1755343980.982:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c71feec23 code=0x7ffc0000 [ 84.043800][ T29] audit: type=1326 audit(1755343980.982:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c71feebe9 code=0x7ffc0000 [ 84.067268][ T29] audit: type=1326 audit(1755343980.982:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c71feebe9 code=0x7ffc0000 [ 84.090741][ T29] audit: type=1326 audit(1755343980.982:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c71feebe9 code=0x7ffc0000 [ 84.373641][ T7393] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1615'. [ 84.425422][ T7397] loop2: detected capacity change from 0 to 512 [ 84.438778][ T7397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.452362][ T7397] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.464540][ T7397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.600381][ T7405] loop5: detected capacity change from 0 to 1024 [ 87.603608][ T7409] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 87.608843][ T7405] EXT4-fs: Ignoring removed orlov option [ 87.640474][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.656701][ T7405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.725935][ T7409] bond1: (slave veth5): Enslaving as an active interface with a down link [ 87.757998][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.770190][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.780327][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.792751][ T7422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.827904][ T7409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.835497][ T7409] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 87.925019][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 87.940571][ T7442] team2: entered promiscuous mode [ 87.945618][ T7442] team2: entered allmulticast mode [ 87.951375][ T7446] netem: change failed [ 88.001028][ T7455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.015413][ T7455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.058313][ T7464] loop5: detected capacity change from 0 to 512 [ 88.067220][ T7464] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 88.086550][ T7464] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1644: invalid indirect mapped block 2683928664 (level 1) [ 88.101232][ T7464] EXT4-fs (loop5): Remounting filesystem read-only [ 88.108591][ T7464] EXT4-fs (loop5): 1 truncate cleaned up [ 88.114827][ T7464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.154452][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.405799][ T7489] netlink: 'syz.5.1655': attribute type 13 has an invalid length. [ 88.465161][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 88.474200][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'. [ 88.497021][ T7489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.503689][ T7495] sctp: [Deprecated]: syz.0.1657 (pid 7495) Use of int in maxseg socket option. [ 88.503689][ T7495] Use struct sctp_assoc_value instead [ 88.585228][ T7502] loop5: detected capacity change from 0 to 512 [ 88.605284][ T7502] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1661: casefold flag without casefold feature [ 88.618632][ T7502] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1661: couldn't read orphan inode 15 (err -117) [ 88.631462][ T7502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.870620][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 88.898598][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.909425][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 88.909441][ T29] audit: type=1400 audit(1755343986.032:2530): avc: denied { firmware_load } for pid=7522 comm="syz.4.1670" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 89.007717][ T7531] pim6reg1: entered promiscuous mode [ 89.013206][ T7531] pim6reg1: entered allmulticast mode [ 89.184565][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'. [ 89.229933][ T7547] netlink: 5448 bytes leftover after parsing attributes in process `syz.0.1680'. [ 89.399592][ T29] audit: type=1326 audit(1755343986.522:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.423139][ T29] audit: type=1326 audit(1755343986.522:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.446803][ T29] audit: type=1326 audit(1755343986.522:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.470735][ T29] audit: type=1326 audit(1755343986.522:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.494193][ T29] audit: type=1326 audit(1755343986.532:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.517867][ T29] audit: type=1326 audit(1755343986.532:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.541363][ T29] audit: type=1326 audit(1755343986.532:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.564846][ T29] audit: type=1326 audit(1755343986.532:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.588417][ T29] audit: type=1326 audit(1755343986.532:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.5.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61a6debe9 code=0x7ffc0000 [ 89.676989][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 89.733914][ T7584] loop4: detected capacity change from 0 to 1024 [ 89.741197][ T7584] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.752266][ T7584] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.765667][ T7574] netlink: 'syz.0.1691': attribute type 2 has an invalid length. [ 89.787980][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1696'. [ 89.798920][ T7584] JBD2: no valid journal superblock found [ 89.803315][ T7591] cgroup: fork rejected by pids controller in /syz2 [ 89.804723][ T7584] EXT4-fs (loop4): Could not load journal inode [ 89.822236][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 89.883820][ T7598] loop4: detected capacity change from 0 to 512 [ 89.894580][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1703'. [ 89.921501][ T7598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.945623][ T7598] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.146821][ T3539] bridge_slave_1: left allmulticast mode [ 90.152552][ T3539] bridge_slave_1: left promiscuous mode [ 90.158267][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.184776][ T3539] bridge_slave_0: left promiscuous mode [ 90.190618][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.229916][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.318883][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.334871][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.345728][ T3539] bond0 (unregistering): Released all slaves [ 90.354905][ T3539] bond1 (unregistering): (slave veth5): Releasing active interface [ 90.363421][ T3539] bond1 (unregistering): Released all slaves [ 90.405634][ T3539] hsr_slave_0: left promiscuous mode [ 90.423644][ T3539] hsr_slave_1: left promiscuous mode [ 90.488084][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 90.498619][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 90.549120][ T7646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.611921][ T1030] kernel write not supported for file /807/attr/exec (pid: 1030 comm: kworker/1:2) [ 90.633002][ T7646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.701272][ T7646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.731222][ T7614] chnl_net:caif_netlink_parms(): no params data found [ 90.785283][ T7646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.798686][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.805756][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.827223][ T7614] bridge_slave_0: entered allmulticast mode [ 90.841419][ T7614] bridge_slave_0: entered promiscuous mode [ 90.854792][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.861896][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.911925][ T7614] bridge_slave_1: entered allmulticast mode [ 90.921033][ T7614] bridge_slave_1: entered promiscuous mode [ 90.945287][ T3539] IPVS: stop unused estimator thread 0... [ 90.970172][ T3561] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.996482][ T3561] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.006637][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.037485][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.047486][ T3561] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.055768][ T3561] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.091450][ T7614] team0: Port device team_slave_0 added [ 91.114148][ T7614] team0: Port device team_slave_1 added [ 91.157642][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.164618][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.190707][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.208020][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.214979][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.241021][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.348248][ T7614] hsr_slave_0: entered promiscuous mode [ 91.354590][ T7614] hsr_slave_1: entered promiscuous mode [ 91.370110][ T7614] debugfs: 'hsr0' already exists in 'hsr' [ 91.375864][ T7614] Cannot create hsr debugfs directory [ 91.661380][ T7721] veth5: entered promiscuous mode [ 91.726543][ T7614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.739324][ T7725] loop0: detected capacity change from 0 to 512 [ 91.747389][ T7614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.766663][ T7614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.777869][ T7614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.786161][ T7725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.815602][ T7725] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.898013][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.951944][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.976985][ T7743] netlink: 'syz.6.1755': attribute type 15 has an invalid length. [ 91.980007][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.991902][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.027832][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.034976][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.111127][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.237370][ T7614] veth0_vlan: entered promiscuous mode [ 92.253348][ T7614] veth1_vlan: entered promiscuous mode [ 92.274840][ T7767] bond1: entered allmulticast mode [ 92.280309][ T7767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.308834][ T7767] bridge0: port 4(bond1) entered blocking state [ 92.315198][ T7767] bridge0: port 4(bond1) entered disabled state [ 92.346878][ T7767] bond1: entered promiscuous mode [ 92.352831][ T7767] bridge0: port 4(bond1) entered blocking state [ 92.359299][ T7767] bridge0: port 4(bond1) entered forwarding state [ 92.372721][ T7614] veth0_macvtap: entered promiscuous mode [ 92.380151][ T7614] veth1_macvtap: entered promiscuous mode [ 92.388828][ T3497] bridge0: port 4(bond1) entered disabled state [ 92.415315][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.424423][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.443257][ T7778] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.467320][ T3492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.476147][ T3492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.494439][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.511887][ T7778] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.525336][ T3492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.541622][ T3497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.558152][ T7778] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.591334][ T7792] loop2: detected capacity change from 0 to 128 [ 92.638149][ T7778] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.709352][ T7800] cgroup: Unknown subsys name 'cpuset' [ 92.734901][ T7802] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 92.748087][ T7802] team0: Device hsr_slave_0 failed to register rx_handler [ 92.757364][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.757364][ T3561] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 92.774684][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.774684][ T3561] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 92.788819][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.788819][ T3561] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 92.803534][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.803534][ T3561] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 92.819089][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.819089][ T3561] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 92.832801][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.832801][ T3561] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 92.860664][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.860664][ T3561] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 92.874948][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.874948][ T3561] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 92.889405][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.889405][ T3561] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 92.903584][ T3561] kworker/u8:63: attempt to access beyond end of device [ 92.903584][ T3561] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 92.994091][ T7822] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 93.013169][ T7819] __nla_validate_parse: 4 callbacks suppressed [ 93.013183][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 93.171813][ T7841] loop0: detected capacity change from 0 to 1024 [ 93.178598][ T7841] EXT4-fs: Ignoring removed orlov option [ 93.329751][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1794'. [ 93.400933][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 93.410275][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.417738][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.427142][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.434553][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.450539][ T7855] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1799'. [ 93.616966][ T7864] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1803'. [ 94.216248][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 94.216263][ T29] audit: type=1326 audit(1755343991.332:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.219946][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 94.222591][ T29] audit: type=1326 audit(1755343991.332:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.278334][ T29] audit: type=1326 audit(1755343991.332:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.301801][ T29] audit: type=1326 audit(1755343991.332:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.325201][ T29] audit: type=1326 audit(1755343991.332:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.349000][ T29] audit: type=1326 audit(1755343991.332:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.372564][ T29] audit: type=1326 audit(1755343991.342:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.395977][ T29] audit: type=1326 audit(1755343991.342:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.419597][ T29] audit: type=1326 audit(1755343991.342:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.443179][ T29] audit: type=1326 audit(1755343991.342:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 94.607624][ T7879] loop0: detected capacity change from 0 to 2048 [ 94.788858][ T7892] loop6: detected capacity change from 0 to 1024 [ 94.795687][ T7892] EXT4-fs: Ignoring removed oldalloc option [ 94.802869][ T7892] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 94.866653][ T7892] loop6: detected capacity change from 1024 to 64 [ 94.875309][ T7892] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.1813: corrupted xattr entries [ 94.890069][ T7886] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.896739][ T7892] EXT4-fs error (device loop6): get_max_inline_xattr_value_size:74: inode #15: comm syz.6.1813: corrupt xattr in inline inode [ 94.921260][ T7886] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.932419][ T7892] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.1813: corrupted xattr entries [ 94.933775][ T7886] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.933775][ T7886] [ 94.954694][ T7886] EXT4-fs (loop0): Total free blocks count 0 [ 94.960721][ T7886] EXT4-fs (loop0): Free/Dirty block details [ 94.966725][ T7886] EXT4-fs (loop0): free_blocks=2415919104 [ 94.972513][ T7886] EXT4-fs (loop0): dirty_blocks=8208 [ 94.977869][ T7886] EXT4-fs (loop0): Block reservation details [ 94.983891][ T7886] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 94.987143][ T6850] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /70/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 95.033072][ T3521] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 95.045985][ T3521] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.045985][ T3521] [ 95.060437][ T7894] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 95.251610][ T3539] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.261640][ T3539] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.281318][ T3492] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.310516][ T3539] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.332851][ T3539] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355271][ T3492] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.421792][ T3492] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.492528][ T7930] hub 2-0:1.0: USB hub found [ 95.497300][ T7930] hub 2-0:1.0: 8 ports detected [ 95.510140][ T3492] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.611060][ T7943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7943 comm=syz.0.1835 [ 95.613866][ T3492] bond1: left promiscuous mode [ 95.628485][ T3492] bridge0: port 4(bond1) entered disabled state [ 95.648935][ T3492] veth3: left allmulticast mode [ 95.653833][ T3492] veth3: left promiscuous mode [ 95.658891][ T3492] bridge0: port 3(veth3) entered disabled state [ 95.668398][ T3492] bridge_slave_1: left allmulticast mode [ 95.674062][ T3492] bridge_slave_1: left promiscuous mode [ 95.679839][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.694762][ T3492] bridge_slave_0: left allmulticast mode [ 95.700539][ T3492] bridge_slave_0: left promiscuous mode [ 95.706207][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.799623][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.809867][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.819406][ T3492] bond0 (unregistering): Released all slaves [ 95.828094][ T3492] bond1 (unregistering): Released all slaves [ 95.863248][ T7917] chnl_net:caif_netlink_parms(): no params data found [ 95.886776][ T3492] hsr_slave_0: left promiscuous mode [ 95.892364][ T3492] hsr_slave_1: left promiscuous mode [ 95.906643][ T3492] veth1_macvtap: left promiscuous mode [ 95.912127][ T3492] veth0_macvtap: left promiscuous mode [ 95.917773][ T3492] veth1_vlan: left promiscuous mode [ 95.922984][ T3492] veth0_vlan: left promiscuous mode [ 95.986167][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 95.995592][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 96.040861][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.047963][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.055115][ T7917] bridge_slave_0: entered allmulticast mode [ 96.062459][ T7917] bridge_slave_0: entered promiscuous mode [ 96.069026][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.076083][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.083347][ T7917] bridge_slave_1: entered allmulticast mode [ 96.090157][ T7917] bridge_slave_1: entered promiscuous mode [ 96.107171][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.117519][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.136991][ T7917] team0: Port device team_slave_0 added [ 96.143446][ T7917] team0: Port device team_slave_1 added [ 96.158720][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.165718][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.191655][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.202923][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.209980][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.235942][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.262625][ T7917] hsr_slave_0: entered promiscuous mode [ 96.268791][ T7917] hsr_slave_1: entered promiscuous mode [ 96.274683][ T7917] debugfs: 'hsr0' already exists in 'hsr' [ 96.280446][ T7917] Cannot create hsr debugfs directory [ 96.343537][ T7917] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 96.352161][ T7917] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 96.361191][ T7917] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 96.369613][ T7917] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 96.383959][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.391040][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.398413][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.405435][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.433170][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.445487][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.453550][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.465167][ T7917] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.475580][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.482720][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.493015][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.500141][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.561598][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.660805][ T7917] veth0_vlan: entered promiscuous mode [ 96.668622][ T7917] veth1_vlan: entered promiscuous mode [ 96.684324][ T7917] veth0_macvtap: entered promiscuous mode [ 96.691748][ T7917] veth1_macvtap: entered promiscuous mode [ 96.703793][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.715128][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.725724][ T3531] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.734676][ T3531] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.745344][ T3531] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.756650][ T3531] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832501][ T7994] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.878029][ T7994] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.934024][ T8003] hub 2-0:1.0: USB hub found [ 96.939805][ T8003] hub 2-0:1.0: 8 ports detected [ 96.948401][ T7994] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.061679][ T7994] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.412400][ T8072] loop4: detected capacity change from 0 to 1024 [ 97.420423][ T8072] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 97.431755][ T8072] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.440298][ T8072] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.447571][ T8072] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 97.462217][ T8072] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 97.469887][ T8072] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1861: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.483317][ T8072] EXT4-fs (loop4): Remounting filesystem read-only [ 97.491437][ T8072] EXT4-fs (loop4): 1 orphan inode deleted [ 97.516696][ T8082] loop5: detected capacity change from 0 to 2048 [ 97.828569][ T8112] hub 2-0:1.0: USB hub found [ 97.857406][ T8112] hub 2-0:1.0: 8 ports detected [ 98.018282][ T8096] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.034341][ T8096] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 98.047160][ T8096] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.047160][ T8096] [ 98.056996][ T8096] EXT4-fs (loop5): Total free blocks count 0 [ 98.063040][ T8096] EXT4-fs (loop5): Free/Dirty block details [ 98.068955][ T8096] EXT4-fs (loop5): free_blocks=2415919104 [ 98.074667][ T8096] EXT4-fs (loop5): dirty_blocks=8208 [ 98.080016][ T8096] EXT4-fs (loop5): Block reservation details [ 98.086064][ T8096] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 98.145009][ T3514] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 98.157851][ T3514] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.157851][ T3514] [ 98.409968][ T8196] hub 2-0:1.0: USB hub found [ 98.414632][ T8196] hub 2-0:1.0: 8 ports detected [ 98.432834][ T3514] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.454334][ T3514] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.463207][ T3514] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.504602][ T8208] loop2: detected capacity change from 0 to 2048 [ 98.516508][ T3514] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.535059][ T8211] netlink: 'syz.4.1892': attribute type 5 has an invalid length. [ 98.840856][ T8237] hub 2-0:1.0: USB hub found [ 98.851984][ T8223] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.852415][ T8237] hub 2-0:1.0: 8 ports detected [ 98.899810][ T8243] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.912279][ T8223] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 98.924792][ T8223] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.924792][ T8223] [ 98.934568][ T8223] EXT4-fs (loop2): Total free blocks count 0 [ 98.940659][ T8223] EXT4-fs (loop2): Free/Dirty block details [ 98.946753][ T8223] EXT4-fs (loop2): free_blocks=2415919104 [ 98.952614][ T8223] EXT4-fs (loop2): dirty_blocks=8208 [ 98.957940][ T8223] EXT4-fs (loop2): Block reservation details [ 98.963921][ T8223] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 98.999913][ T8243] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.016659][ T3533] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 99.029437][ T3533] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.029437][ T3533] [ 99.068512][ T8243] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.098820][ T7614] EXT4-fs unmount: 12 callbacks suppressed [ 99.161196][ T8254] SELinux: failed to load policy [ 99.172940][ T8243] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.258341][ T3515] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.272892][ T3515] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.291073][ T3515] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.299837][ T3515] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.371608][ T8288] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.409084][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 99.419219][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 99.429787][ T8288] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.451690][ T8301] loop0: detected capacity change from 0 to 1024 [ 99.458368][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 99.476331][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 99.485205][ T8301] EXT4-fs: Ignoring removed orlov option [ 99.492834][ T8288] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.507931][ T8303] usb usb8: usbfs: process 8303 (syz.4.1924) did not claim interface 0 before use [ 99.508802][ T8301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.540392][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 99.540423][ T29] audit: type=1326 audit(1755344252.664:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 99.570120][ T29] audit: type=1326 audit(1755344252.664:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 99.593698][ T29] audit: type=1326 audit(1755344252.664:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 99.627211][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 99.639370][ T8288] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.650173][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 99.687375][ T29] audit: type=1400 audit(1755344252.664:3304): avc: denied { create } for pid=8300 comm="syz.0.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.706842][ T29] audit: type=1326 audit(1755344252.744:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 99.738520][ T3514] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.759509][ T8323] loop2: detected capacity change from 0 to 512 [ 99.773685][ T3514] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.793560][ T29] audit: type=1326 audit(1755344252.904:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450a3cebe9 code=0x7ffc0000 [ 99.796964][ T3514] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.817211][ T29] audit: type=1326 audit(1755344252.904:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450a3cebe9 code=0x7ffc0000 [ 99.848673][ T29] audit: type=1326 audit(1755344252.904:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450a3cebe9 code=0x7ffc0000 [ 99.872216][ T29] audit: type=1326 audit(1755344252.904:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450a3cebe9 code=0x7ffc0000 [ 99.881108][ T3514] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.895635][ T29] audit: type=1326 audit(1755344252.904:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450a3cebe9 code=0x7ffc0000 [ 99.912775][ T8323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.941080][ T8323] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.978988][ T8323] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1940: corrupted inode contents [ 100.015307][ T8323] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1940: mark_inode_dirty error [ 100.032572][ T8323] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1940: corrupted inode contents [ 100.052480][ T8337] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1940: corrupted inode contents [ 100.079447][ T8337] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1940: mark_inode_dirty error [ 100.139899][ T8337] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1940: corrupted inode contents [ 100.245743][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.255238][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.292770][ T8391] loop0: detected capacity change from 0 to 512 [ 100.308639][ T8391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.321502][ T8391] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.335180][ T8391] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1950: corrupted inode contents [ 100.374803][ T8391] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1950: mark_inode_dirty error [ 100.388133][ T8391] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1950: corrupted inode contents [ 100.404653][ T8401] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1950: corrupted inode contents [ 100.416734][ T8401] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1950: mark_inode_dirty error [ 100.428911][ T8401] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1950: corrupted inode contents [ 100.473295][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.574416][ T8416] loop4: detected capacity change from 0 to 2048 [ 100.592001][ T8416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 100.619688][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 100.800973][ T8438] 9pnet_fd: Insufficient options for proto=fd [ 100.882957][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 100.913563][ T8448] netlink: 'syz.0.1971': attribute type 27 has an invalid length. [ 100.937532][ T8448] sit0: left promiscuous mode [ 100.942226][ T8448] sit0: left allmulticast mode [ 100.994475][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.001783][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.052941][ T8460] loop7: detected capacity change from 0 to 2048 [ 101.068928][ T8460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 101.097873][ T7917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 101.107600][ T8448] team1: left promiscuous mode [ 101.112440][ T8448] team1: left allmulticast mode [ 101.133594][ T8448] ip6gre1: left allmulticast mode [ 101.144451][ T8448] team2: left promiscuous mode [ 101.149324][ T8448] team2: left allmulticast mode [ 101.167685][ T3503] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.220547][ T3503] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.237831][ T3503] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.265940][ T3503] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.388352][ T8484] loop5: detected capacity change from 0 to 8192 [ 101.545716][ T3389] hid_parser_main: 18 callbacks suppressed [ 101.545773][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.559224][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.566932][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.574364][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.581864][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.589374][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.596814][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.604244][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.611667][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.619073][ T3389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.628565][ T3389] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.724983][ T8510] netlink: 'syz.0.1979': attribute type 5 has an invalid length. [ 101.779671][ T8516] loop2: detected capacity change from 0 to 2048 [ 101.790041][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1985'. [ 101.800568][ T8516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 101.829306][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 101.878993][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1988'. [ 101.889822][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1988'. [ 101.933881][ T8537] loop0: detected capacity change from 0 to 512 [ 101.945227][ T3389] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.958245][ T8529] usb usb8: usbfs: process 8529 (syz.5.1988) did not claim interface 0 before use [ 101.958823][ T8537] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1991: bg 0: block 248: padding at end of block bitmap is not set [ 101.996685][ T8537] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1991: Failed to acquire dquot type 1 [ 102.012280][ T8537] EXT4-fs (loop0): 1 truncate cleaned up [ 102.018661][ T8537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.031659][ T8537] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.053648][ T8537] EXT4-fs (loop0): shut down requested (1) [ 102.072716][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.253523][ T8563] netlink: 'syz.2.1999': attribute type 5 has an invalid length. [ 102.287426][ T8570] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 102.362581][ T8575] loop0: detected capacity change from 0 to 1024 [ 102.371621][ T8575] EXT4-fs: Ignoring removed oldalloc option [ 102.377856][ T8575] EXT4-fs: Ignoring removed orlov option [ 102.389527][ T8575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.442865][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.482332][ T8579] netlink: 'syz.5.2006': attribute type 27 has an invalid length. [ 102.510067][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.517261][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.577017][ T8579] veth5: left promiscuous mode [ 102.582232][ T353] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.591459][ T353] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.607274][ T353] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.620310][ T353] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.634549][ T8581] loop7: detected capacity change from 0 to 512 [ 102.652512][ T8581] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2007: bg 0: block 248: padding at end of block bitmap is not set [ 102.673552][ T8581] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2007: Failed to acquire dquot type 1 [ 102.687644][ T8581] EXT4-fs (loop7): 1 truncate cleaned up [ 102.693509][ T8591] loop2: detected capacity change from 0 to 1024 [ 102.693928][ T8581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.718013][ T8581] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.730044][ T8591] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 102.747124][ T8591] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 102.755362][ T8591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.764310][ T8581] EXT4-fs (loop7): shut down requested (1) [ 102.770662][ T8591] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 102.785353][ T8591] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 102.805730][ T8591] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2010: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.820548][ T8591] EXT4-fs (loop2): Remounting filesystem read-only [ 102.827222][ T8597] loop0: detected capacity change from 0 to 512 [ 102.828079][ T8591] EXT4-fs (loop2): 1 orphan inode deleted [ 102.840103][ T7917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.840270][ T8591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.857045][ T8597] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 102.880115][ T8597] EXT4-fs (loop0): invalid journal inode [ 102.897508][ T8597] EXT4-fs (loop0): can't get journal size [ 102.924078][ T8597] EXT4-fs (loop0): 1 truncate cleaned up [ 102.931455][ T8597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.976253][ T8606] loop5: detected capacity change from 0 to 1024 [ 102.996659][ T8606] EXT4-fs: Ignoring removed oldalloc option [ 103.002636][ T8606] EXT4-fs: Ignoring removed orlov option [ 103.014191][ T8608] loop4: detected capacity change from 0 to 512 [ 103.032613][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.043734][ T8606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.048157][ T8608] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2028: corrupted inode contents [ 103.068247][ T8608] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2028: mark_inode_dirty error [ 103.080332][ T8608] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2028: corrupted inode contents [ 103.096836][ T8608] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2028: mark_inode_dirty error [ 103.108405][ T8608] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2028: corrupted inode contents [ 103.132111][ T8608] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 103.132661][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.155459][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.164723][ T8608] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2028: corrupted inode contents [ 103.178677][ T8608] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2028: mark_inode_dirty error [ 103.195313][ T8608] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 103.211201][ T8608] EXT4-fs (loop4): 1 truncate cleaned up [ 103.217321][ T8608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.230327][ T353] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 103.243709][ T8608] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.257094][ T8608] ALSA: seq fatal error: cannot create timer (-22) [ 103.274892][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.357978][ T8638] netlink: 'syz.4.2030': attribute type 27 has an invalid length. [ 103.394405][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.401836][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.412857][ T8638] team_slave_0: left promiscuous mode [ 103.418685][ T8638] team_slave_1: left promiscuous mode [ 103.479932][ T353] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.489094][ T353] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.497977][ T353] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.507395][ T353] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.588920][ T8647] loop4: detected capacity change from 0 to 512 [ 103.599088][ T8647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.612861][ T8647] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.624186][ T8647] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.913410][ T8661] loop7: detected capacity change from 0 to 128 [ 104.175788][ T8677] netlink: 'syz.7.2046': attribute type 27 has an invalid length. [ 104.204436][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.211650][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.247936][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.258088][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.285022][ T3492] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.293496][ T3539] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.302161][ T3539] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.310817][ T3539] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.348668][ T8680] loop7: detected capacity change from 0 to 2048 [ 104.358861][ T8680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.396162][ T8681] loop0: detected capacity change from 0 to 8192 [ 104.520545][ T8695] loop2: detected capacity change from 0 to 512 [ 104.537190][ T8695] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 104.550436][ T8695] EXT4-fs (loop2): invalid journal inode [ 104.556163][ T8695] EXT4-fs (loop2): can't get journal size [ 104.562639][ T8695] EXT4-fs (loop2): 1 truncate cleaned up [ 104.569279][ T8695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.663977][ T8686] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.679228][ T8686] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 104.691709][ T8686] EXT4-fs (loop7): This should not happen!! Data will be lost [ 104.691709][ T8686] [ 104.701383][ T8686] EXT4-fs (loop7): Total free blocks count 0 [ 104.707518][ T8686] EXT4-fs (loop7): Free/Dirty block details [ 104.713422][ T8686] EXT4-fs (loop7): free_blocks=2415919104 [ 104.719170][ T8686] EXT4-fs (loop7): dirty_blocks=8208 [ 104.724673][ T8686] EXT4-fs (loop7): Block reservation details [ 104.730871][ T8686] EXT4-fs (loop7): i_reserved_data_blocks=513 [ 104.741472][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.814401][ T8707] __nla_validate_parse: 4 callbacks suppressed [ 104.814416][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'. [ 104.859063][ T8707] team1: entered promiscuous mode [ 104.864168][ T8707] team1: entered allmulticast mode [ 104.882420][ T353] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 105.135885][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2067'. [ 105.144824][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 105.348175][ T8741] sctp: [Deprecated]: syz.4.2072 (pid 8741) Use of int in maxseg socket option. [ 105.348175][ T8741] Use struct sctp_assoc_value instead [ 105.409583][ T8744] loop4: detected capacity change from 0 to 512 [ 105.448391][ T8744] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2073: casefold flag without casefold feature [ 105.488824][ T8751] loop0: detected capacity change from 0 to 512 [ 105.495688][ T8744] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2073: couldn't read orphan inode 15 (err -117) [ 105.516214][ T8744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.534234][ T8751] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 105.542927][ T8751] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2076: invalid indirect mapped block 2683928664 (level 1) [ 105.557727][ T8751] EXT4-fs (loop0): Remounting filesystem read-only [ 105.564382][ T8751] EXT4-fs (loop0): 1 truncate cleaned up [ 105.571685][ T8751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.600977][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.613019][ T8755] netlink: 'syz.7.2077': attribute type 13 has an invalid length. [ 105.635969][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.671003][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.673167][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2079'. [ 105.688507][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.698503][ T8755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.743696][ T8759] netlink: 5448 bytes leftover after parsing attributes in process `syz.4.2079'. [ 106.031022][ T8775] sctp: [Deprecated]: syz.2.2085 (pid 8775) Use of int in maxseg socket option. [ 106.031022][ T8775] Use struct sctp_assoc_value instead [ 106.081813][ T8784] loop7: detected capacity change from 0 to 512 [ 106.098396][ T8784] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2087: corrupted inode contents [ 106.111268][ T8784] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.2087: mark_inode_dirty error [ 106.122947][ T8784] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2087: corrupted inode contents [ 106.135220][ T8784] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2087: mark_inode_dirty error [ 106.153747][ T8784] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2087: corrupted inode contents [ 106.165962][ T8784] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 106.175501][ T8784] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2087: corrupted inode contents [ 106.188380][ T8784] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.2087: mark_inode_dirty error [ 106.199739][ T8784] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 106.220660][ T8784] EXT4-fs (loop7): 1 truncate cleaned up [ 106.230684][ T8784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.244006][ T8784] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.254610][ T353] __quota_error: 202 callbacks suppressed [ 106.254622][ T353] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.270210][ T353] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 106.287365][ T8784] ALSA: seq fatal error: cannot create timer (-22) [ 106.306216][ T7917] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.356260][ T29] audit: type=1326 audit(1755344259.474:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.389543][ T29] audit: type=1326 audit(1755344259.484:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.413060][ T29] audit: type=1326 audit(1755344259.484:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.436731][ T29] audit: type=1326 audit(1755344259.484:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.460153][ T29] audit: type=1326 audit(1755344259.484:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.483697][ T29] audit: type=1326 audit(1755344259.484:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.507342][ T29] audit: type=1326 audit(1755344259.484:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.607209][ T29] audit: type=1326 audit(1755344259.524:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.7.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4a44ebe9 code=0x7ffc0000 [ 106.630735][ T29] audit: type=1326 audit(1755344259.634:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93287ebe9 code=0x7ffc0000 [ 106.753046][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2103'. [ 106.783655][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2104'. [ 106.859203][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2107'. [ 106.941618][ T8827] netlink: 5448 bytes leftover after parsing attributes in process `syz.7.2107'. [ 106.975723][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 106.993579][ T8835] loop2: detected capacity change from 0 to 512 [ 107.003400][ T8835] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2109: casefold flag without casefold feature [ 107.042144][ T8835] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2109: couldn't read orphan inode 15 (err -117) [ 107.073769][ T8835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.174974][ T8847] loop0: detected capacity change from 0 to 1024 [ 107.182606][ T8847] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.193592][ T8847] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.217895][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.235750][ T8847] JBD2: no valid journal superblock found [ 107.241566][ T8847] EXT4-fs (loop0): Could not load journal inode [ 107.342887][ T8869] loop5: detected capacity change from 0 to 2048 [ 107.357679][ T8872] loop2: detected capacity change from 0 to 512 [ 107.365749][ T8872] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 107.407697][ T8872] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2127: invalid indirect mapped block 2683928664 (level 1) [ 107.443849][ T8869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.456963][ T8872] EXT4-fs (loop2): Remounting filesystem read-only [ 107.473907][ T8872] EXT4-fs (loop2): 1 truncate cleaned up [ 107.480572][ T8872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.540601][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.594898][ T8882] loop4: detected capacity change from 0 to 512 [ 107.602275][ T8884] loop2: detected capacity change from 0 to 512 [ 107.613113][ T8882] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 107.629084][ T8884] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2129: corrupted inode contents [ 107.644423][ T8882] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2140: invalid indirect mapped block 2683928664 (level 1) [ 107.659525][ T8882] EXT4-fs (loop4): Remounting filesystem read-only [ 107.666263][ T8884] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2129: mark_inode_dirty error [ 107.666398][ T8882] EXT4-fs (loop4): 1 truncate cleaned up [ 107.684271][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.706154][ T8884] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2129: corrupted inode contents [ 107.733472][ T8884] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2129: mark_inode_dirty error [ 107.745784][ T8884] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2129: corrupted inode contents [ 107.747045][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.766804][ T8884] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 107.776746][ T8884] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2129: corrupted inode contents [ 107.807868][ T8884] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2129: mark_inode_dirty error [ 107.855060][ T8884] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 107.886441][ T8878] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.889486][ T8884] EXT4-fs (loop2): 1 truncate cleaned up [ 107.901378][ T8878] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.907368][ T3534] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1 [ 107.919302][ T8878] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.919302][ T8878] [ 107.919316][ T8878] EXT4-fs (loop5): Total free blocks count 0 [ 107.919330][ T8878] EXT4-fs (loop5): Free/Dirty block details [ 107.952424][ T8878] EXT4-fs (loop5): free_blocks=2415919104 [ 107.952863][ T8884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.958172][ T8878] EXT4-fs (loop5): dirty_blocks=8208 [ 107.958188][ T8878] EXT4-fs (loop5): Block reservation details [ 107.958201][ T8878] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 107.988429][ T8884] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.017853][ T8884] ALSA: seq fatal error: cannot create timer (-22) [ 108.058138][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.112900][ T3534] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 108.181344][ T3382] hid_parser_main: 76 callbacks suppressed [ 108.181390][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.194847][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.202277][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.209729][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.217234][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.224647][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.232145][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.239587][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.247016][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.254482][ T3382] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 108.262842][ T3382] hid-generic 0008:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 108.293755][ T8911] loop5: detected capacity change from 0 to 1024 [ 108.300736][ T8911] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.311757][ T8911] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 108.322474][ T8911] JBD2: no valid journal superblock found [ 108.328297][ T8911] EXT4-fs (loop5): Could not load journal inode [ 108.469894][ T8917] netlink: 'syz.2.2142': attribute type 13 has an invalid length. [ 108.531696][ T8917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.558274][ T8922] cgroup: fork rejected by pids controller in /syz7 [ 108.651556][ T8929] loop5: detected capacity change from 0 to 512 [ 108.672390][ T8929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2147: corrupted inode contents [ 108.693895][ T8929] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2147: mark_inode_dirty error [ 108.709346][ T8929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2147: corrupted inode contents [ 108.741871][ T8929] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2147: mark_inode_dirty error [ 108.754549][ T8929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2147: corrupted inode contents [ 108.767812][ T8929] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 108.786314][ T8929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2147: corrupted inode contents [ 108.799063][ T8929] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2147: mark_inode_dirty error [ 108.818408][ T8929] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 108.832937][ T8929] EXT4-fs (loop5): 1 truncate cleaned up [ 108.847432][ T353] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 108.847704][ T8929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.880513][ T8929] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.901996][ T8929] ALSA: seq fatal error: cannot create timer (-22) [ 108.922264][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.986150][ T3539] bridge_slave_1: left allmulticast mode [ 108.991910][ T3539] bridge_slave_1: left promiscuous mode [ 108.997684][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.008088][ T8956] loop4: detected capacity change from 0 to 128 [ 109.018028][ T3539] bridge_slave_0: left allmulticast mode [ 109.023678][ T3539] bridge_slave_0: left promiscuous mode [ 109.029543][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.109566][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.119169][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.128700][ T3539] bond0 (unregistering): Released all slaves [ 109.177166][ T3534] bio_check_eod: 103 callbacks suppressed [ 109.177182][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.177182][ T3534] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 109.203966][ T8960] loop5: detected capacity change from 0 to 512 [ 109.207371][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 109.210572][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.210572][ T3534] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 109.231498][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.231498][ T3534] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 109.245017][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.245017][ T3534] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 109.248492][ T8960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.258585][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.258585][ T3534] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 109.272080][ T8960] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.285516][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.285516][ T3534] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 109.309144][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.309144][ T3534] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 109.322678][ T3539] hsr_slave_0: left promiscuous mode [ 109.322687][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.322687][ T3534] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 109.342224][ T3539] hsr_slave_1: left promiscuous mode [ 109.342227][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.342227][ T3534] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 109.350223][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.360985][ T3534] kworker/u8:43: attempt to access beyond end of device [ 109.360985][ T3534] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 109.382165][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.437933][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 109.450471][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 109.503640][ T8976] cgroup: fork rejected by pids controller in /syz4 [ 109.517227][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.524350][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.532864][ T8944] bridge_slave_0: entered allmulticast mode [ 109.541811][ T8944] bridge_slave_0: entered promiscuous mode [ 109.548969][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.556051][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.563343][ T8944] bridge_slave_1: entered allmulticast mode [ 109.569931][ T8944] bridge_slave_1: entered promiscuous mode [ 109.594147][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.608251][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.620671][ T6660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.639885][ T8944] team0: Port device team_slave_0 added [ 109.653894][ T8944] team0: Port device team_slave_1 added [ 109.677699][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.684736][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.710692][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.724190][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.731249][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.757180][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.822132][ T8944] hsr_slave_0: entered promiscuous mode [ 109.828372][ T8944] hsr_slave_1: entered promiscuous mode [ 109.834233][ T8944] debugfs: 'hsr0' already exists in 'hsr' [ 109.840099][ T8944] Cannot create hsr debugfs directory [ 109.924863][ T9001] loop0: detected capacity change from 0 to 512 [ 109.940370][ T9001] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2167: corrupted inode contents [ 109.952368][ T9001] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2167: mark_inode_dirty error [ 109.964163][ T9001] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2167: corrupted inode contents [ 109.976303][ T9001] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2167: mark_inode_dirty error [ 109.988276][ T9001] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2167: corrupted inode contents [ 110.000757][ T9001] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 110.009870][ T9001] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2167: corrupted inode contents [ 110.021903][ T9001] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2167: mark_inode_dirty error [ 110.033185][ T9001] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 110.042597][ T9001] EXT4-fs (loop0): 1 truncate cleaned up [ 110.048789][ T9001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.061440][ T9001] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.061497][ T3503] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 110.088613][ T9001] ALSA: seq fatal error: cannot create timer (-22) [ 110.111583][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.126306][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 110.162269][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.169432][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.176585][ T9004] bridge_slave_0: entered allmulticast mode [ 110.183031][ T9004] bridge_slave_0: entered promiscuous mode [ 110.190161][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.197270][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.204431][ T9004] bridge_slave_1: entered allmulticast mode [ 110.211152][ T9004] bridge_slave_1: entered promiscuous mode [ 110.229888][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.240510][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.264890][ T9004] team0: Port device team_slave_0 added [ 110.271579][ T9004] team0: Port device team_slave_1 added [ 110.291550][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.298672][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.324593][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.337097][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.344045][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.370037][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.386063][ T8944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.395413][ T8944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.404909][ T8944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.423988][ T8944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 110.437075][ T9004] hsr_slave_0: entered promiscuous mode [ 110.443200][ T9004] hsr_slave_1: entered promiscuous mode [ 110.449358][ T9004] debugfs: 'hsr0' already exists in 'hsr' [ 110.455086][ T9004] Cannot create hsr debugfs directory [ 110.507591][ T353] bridge_slave_1: left allmulticast mode [ 110.513276][ T353] bridge_slave_1: left promiscuous mode [ 110.519158][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.527580][ T353] bridge_slave_0: left allmulticast mode [ 110.533217][ T353] bridge_slave_0: left promiscuous mode [ 110.538902][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.768464][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.777869][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.786976][ T353] bond0 (unregistering): Released all slaves [ 110.795282][ T353] bond1 (unregistering): (slave veth5): Releasing active interface [ 110.803646][ T353] bond1 (unregistering): Released all slaves [ 110.843283][ T353] hsr_slave_0: left promiscuous mode [ 110.848989][ T353] hsr_slave_1: left promiscuous mode [ 110.886200][ T353] team0 (unregistering): Port device team_slave_1 removed [ 110.896503][ T353] team0 (unregistering): Port device team_slave_0 removed [ 110.929366][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.945035][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.954432][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.961523][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.972506][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.979644][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.039561][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.135515][ T8944] veth0_vlan: entered promiscuous mode [ 111.145664][ T8944] veth1_vlan: entered promiscuous mode [ 111.160251][ T8944] veth0_macvtap: entered promiscuous mode [ 111.168153][ T8944] veth1_macvtap: entered promiscuous mode [ 111.178577][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.188795][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.199822][ T3562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.208712][ T3562] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.218326][ T3562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.227616][ T3562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.261825][ T9004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.272488][ T9004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.284825][ T9004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.293937][ T9004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.329396][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.340859][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.350194][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.357412][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.370128][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.377189][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.437203][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.538510][ T9004] veth0_vlan: entered promiscuous mode [ 111.546308][ T9004] veth1_vlan: entered promiscuous mode [ 111.561966][ T9004] veth0_macvtap: entered promiscuous mode [ 111.569507][ T9004] veth1_macvtap: entered promiscuous mode [ 111.580299][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.591309][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.602491][ T3539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.612037][ T3539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.622756][ T3539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.633357][ T3539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.667646][ T9071] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 111.690859][ T9077] loop2: detected capacity change from 0 to 512 [ 111.708397][ T9077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.721095][ T9077] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.974720][ T7614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.136918][ T9084] loop7: detected capacity change from 0 to 512 [ 112.144729][ T9084] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 112.152940][ T9084] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2169: invalid indirect mapped block 2683928664 (level 1) [ 112.167904][ T9084] EXT4-fs (loop7): Remounting filesystem read-only [ 112.174697][ T9084] EXT4-fs (loop7): 1 truncate cleaned up [ 112.181432][ T9084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.183704][ T9082] SELinux: failed to load policy [ 112.207511][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 112.207593][ T29] audit: type=1326 audit(1755344265.334:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.237515][ T29] audit: type=1326 audit(1755344265.354:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.237734][ T8944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.261005][ T29] audit: type=1326 audit(1755344265.354:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.261041][ T29] audit: type=1326 audit(1755344265.354:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.317173][ T9091] bond3: entered allmulticast mode [ 112.322436][ T9091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.333134][ T9091] bridge0: port 3(bond3) entered blocking state [ 112.339746][ T9091] bridge0: port 3(bond3) entered disabled state [ 112.347426][ T9091] bond3: entered promiscuous mode [ 112.374410][ T29] audit: type=1326 audit(1755344265.484:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.397906][ T29] audit: type=1326 audit(1755344265.484:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.421391][ T29] audit: type=1326 audit(1755344265.494:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.444860][ T29] audit: type=1326 audit(1755344265.494:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.468398][ T29] audit: type=1326 audit(1755344265.494:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.491859][ T29] audit: type=1326 audit(1755344265.494:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.2.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0286b5ebe9 code=0x7ffc0000 [ 112.564167][ T9105] cgroup: Unknown subsys name 'cpuset' [ 112.604020][ T9108] __nla_validate_parse: 6 callbacks suppressed [ 112.604037][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2186'. [ 112.671154][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2194'. [ 112.698181][ T9121] bridge0: entered promiscuous mode [ 112.712386][ T9121] bridge0: port 4(macvlan2) entered blocking state [ 112.719304][ T9121] bridge0: port 4(macvlan2) entered disabled state [ 112.728515][ T9121] macvlan2: entered allmulticast mode [ 112.733940][ T9121] bridge0: entered allmulticast mode [ 112.742222][ T9121] macvlan2: left allmulticast mode [ 112.747579][ T9121] bridge0: left allmulticast mode [ 112.756252][ T9121] bridge0: left promiscuous mode [ 112.795213][ T9129] $H: renamed from bond0 (while UP) [ 112.803125][ T9129] $H: entered promiscuous mode [ 112.808316][ T9129] bond_slave_0: entered promiscuous mode [ 112.814215][ T9129] bond_slave_1: entered promiscuous mode [ 112.910647][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2205'. [ 113.208946][ T9168] loop0: detected capacity change from 0 to 512 [ 113.218688][ T9168] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 113.236661][ T9168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 113.244912][ T9168] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2213: corrupted inode contents [ 113.261242][ T9168] EXT4-fs (loop0): Remounting filesystem read-only [ 113.268314][ T9168] EXT4-fs (loop0): 1 truncate cleaned up [ 113.274296][ T3539] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.284964][ T3539] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.296684][ T3539] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 113.308494][ T9168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.325443][ T9168] tipc: New replicast peer: 255.255.255.83 [ 113.331478][ T9168] tipc: Enabled bearer , priority 10 [ 113.351001][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.480013][ T9181] loop4: detected capacity change from 0 to 512 [ 113.489399][ T9181] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 113.497837][ T9181] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2218: invalid indirect mapped block 2683928664 (level 1) [ 113.512272][ T9181] EXT4-fs (loop4): Remounting filesystem read-only [ 113.519112][ T9181] EXT4-fs (loop4): 1 truncate cleaned up [ 113.525297][ T9181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.552554][ T9004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.653991][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2224'. [ 113.669581][ T9196] bridge0: entered promiscuous mode [ 113.676194][ T9196] bridge0: port 3(macvlan2) entered blocking state [ 113.683019][ T9196] bridge0: port 3(macvlan2) entered disabled state [ 113.689769][ T9196] macvlan2: entered allmulticast mode [ 113.695166][ T9196] bridge0: entered allmulticast mode [ 113.702360][ T9196] macvlan2: left allmulticast mode [ 113.707556][ T9196] bridge0: left allmulticast mode [ 113.713229][ T9196] bridge0: left promiscuous mode [ 114.198662][ T9239] bond1: entered allmulticast mode [ 114.204129][ T9239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.212406][ T9239] bridge0: port 3(bond1) entered blocking state [ 114.218748][ T9239] bridge0: port 3(bond1) entered disabled state [ 114.226330][ T9239] bond1: entered promiscuous mode [ 114.231613][ T9239] bridge0: port 3(bond1) entered blocking state [ 114.237927][ T9239] bridge0: port 3(bond1) entered forwarding state [ 114.345796][ T9254] loop0: detected capacity change from 0 to 512 [ 114.362204][ T9254] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.372102][ T9254] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2248: bg 0: block 248: padding at end of block bitmap is not set [ 114.410755][ T9254] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2248: Failed to acquire dquot type 1 [ 114.435945][ T9254] EXT4-fs (loop0): 1 truncate cleaned up [ 114.453232][ T9254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.499529][ T9272] loop7: detected capacity change from 0 to 1024 [ 114.526743][ T9278] netlink: 'syz.5.2261': attribute type 3 has an invalid length. [ 114.534953][ T9272] EXT4-fs: Ignoring removed bh option [ 114.540676][ T9272] EXT4-fs: inline encryption not supported [ 114.548083][ T9272] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.592498][ T9272] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2259: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.608035][ T9272] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2259: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.622626][ T9272] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2259: Failed to acquire dquot type 0 [ 114.635453][ T9272] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.645212][ T9272] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2259: mark_inode_dirty error [ 114.657940][ T9272] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 114.678930][ T9272] EXT4-fs (loop7): 1 orphan inode deleted [ 114.697336][ T3534] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.720028][ T3534] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 0 [ 114.735324][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'. [ 114.748737][ T9272] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz.7.2259: Invalid inode table block 1 in block_group 0 [ 114.761946][ T9272] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.774170][ T9272] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz.7.2259: mark_inode_dirty error [ 114.810280][ T9302] netlink: 'syz.0.2271': attribute type 39 has an invalid length. [ 114.862814][ T9312] loop4: detected capacity change from 0 to 512 [ 114.877654][ T9312] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.885862][ T9312] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.893965][ T9312] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2276: corrupted inode contents [ 114.906294][ T9312] EXT4-fs (loop4): Remounting filesystem read-only [ 114.912920][ T9312] EXT4-fs (loop4): 1 truncate cleaned up [ 114.918789][ T3539] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.929415][ T3539] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.941520][ T3539] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 114.957238][ T9312] tipc: Started in network mode [ 114.962170][ T9312] tipc: Node identity ac14140f, cluster identity 4711 [ 114.969410][ T9312] tipc: New replicast peer: 255.255.255.83 [ 114.975400][ T9312] tipc: Enabled bearer , priority 10 [ 115.087293][ T353] bridge0: port 3(bond1) entered disabled state [ 115.095662][ T9324] IPVS: Error connecting to the multicast addr [ 115.209961][ T9330] $H: renamed from bond0 [ 115.216524][ T9330] $H: entered promiscuous mode [ 115.221605][ T9330] bond_slave_0: entered promiscuous mode [ 115.227389][ T9330] bond_slave_1: entered promiscuous mode [ 115.712645][ T9380] loop7: detected capacity change from 0 to 164 [ 115.727956][ T9380] rock: directory entry would overflow storage [ 115.734155][ T9380] rock: sig=0x66, size=4, remaining=3 [ 115.747428][ T9380] rock: directory entry would overflow storage [ 115.753622][ T9380] rock: sig=0x66, size=4, remaining=3 [ 115.767338][ T9380] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.775220][ T9380] rock: directory entry would overflow storage [ 115.781473][ T9380] rock: sig=0x66, size=4, remaining=3 [ 115.796431][ T9380] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.032959][ T9394] loop4: detected capacity change from 0 to 512 [ 116.052536][ T9394] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.069281][ T9394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2311: bg 0: block 248: padding at end of block bitmap is not set [ 116.084260][ T9400] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 33554432, id = 0 [ 116.086425][ T8458] tipc: Node number set to 2886997007 [ 116.109036][ T9394] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2311: Failed to acquire dquot type 1 [ 116.148484][ T9394] EXT4-fs (loop4): 1 truncate cleaned up [ 116.530260][ T9416] netlink: 'syz.2.2320': attribute type 39 has an invalid length. [ 116.629698][ T9420] $H: renamed from bond0 (while UP) [ 116.641251][ T9420] $H: entered promiscuous mode [ 116.646403][ T9420] bond_slave_0: entered promiscuous mode [ 116.652245][ T9420] bond_slave_1: entered promiscuous mode [ 116.837513][ T9444] netlink: 'syz.4.2334': attribute type 39 has an invalid length. [ 116.858713][ T9446] loop2: detected capacity change from 0 to 1024 [ 116.865369][ T9446] EXT4-fs: Ignoring removed bh option [ 116.871161][ T9446] EXT4-fs: inline encryption not supported [ 116.877465][ T9446] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.890788][ T9446] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2342: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.905342][ T9446] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2342: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.921177][ T9446] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2342: Failed to acquire dquot type 0 [ 116.934194][ T9446] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 116.944011][ T9446] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2342: mark_inode_dirty error [ 116.955461][ T9446] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 116.965806][ T9446] EXT4-fs (loop2): 1 orphan inode deleted [ 116.972699][ T3492] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.988507][ T3492] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 117.005192][ T9446] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.2342: Invalid inode table block 1 in block_group 0 [ 117.007405][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.020015][ T9446] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.027576][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.036239][ T9446] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.2342: mark_inode_dirty error [ 117.050388][ T9452] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 117.628003][ T9481] netlink: 'syz.7.2349': attribute type 39 has an invalid length. [ 117.641855][ T9483] loop0: detected capacity change from 0 to 1024 [ 117.648648][ T9483] EXT4-fs: Ignoring removed bh option [ 117.654244][ T9483] EXT4-fs: inline encryption not supported [ 117.660599][ T9483] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.673040][ T9483] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2350: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.687526][ T9483] __quota_error: 140 callbacks suppressed [ 117.687541][ T9483] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 117.701550][ T9483] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2350: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.715893][ T9483] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 117.724758][ T9483] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2350: Failed to acquire dquot type 0 [ 117.736212][ T9483] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.745758][ T9483] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2350: mark_inode_dirty error [ 117.757287][ T9483] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.767597][ T9483] EXT4-fs (loop0): 1 orphan inode deleted [ 117.774835][ T3492] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.790661][ T3492] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 117.799220][ T3492] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 117.817407][ T9483] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.2350: Invalid inode table block 1 in block_group 0 [ 117.830351][ T9483] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.840914][ T9483] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.2350: mark_inode_dirty error [ 117.881556][ T29] audit: type=1400 audit(1755344271.004:3706): avc: denied { read } for pid=9490 comm="syz.5.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.008896][ T9499] netlink: 'syz.7.2356': attribute type 3 has an invalid length. [ 118.074588][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2357'. [ 118.084351][ T9501] bond1: left promiscuous mode [ 118.089434][ T9501] bridge0: port 3(bond1) entered disabled state [ 118.097882][ T9501] bridge_slave_1: left allmulticast mode [ 118.103614][ T9501] bridge_slave_1: left promiscuous mode [ 118.109493][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.119588][ T9501] bridge_slave_0: left allmulticast mode [ 118.125312][ T9501] bridge_slave_0: left promiscuous mode [ 118.131090][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.268880][ T9505] loop4: detected capacity change from 0 to 164 [ 118.277189][ T9505] rock: directory entry would overflow storage [ 118.283382][ T9505] rock: sig=0x66, size=4, remaining=3 [ 118.291011][ T9505] rock: directory entry would overflow storage [ 118.297280][ T9505] rock: sig=0x66, size=4, remaining=3 [ 118.303672][ T9505] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.312712][ T9505] rock: directory entry would overflow storage [ 118.319012][ T9505] rock: sig=0x66, size=4, remaining=3 [ 118.329652][ T9505] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.738261][ T9515] loop4: detected capacity change from 0 to 764 [ 118.742650][ T9516] netlink: 'syz.5.2363': attribute type 39 has an invalid length. [ 118.752956][ T9515] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 118.762569][ T29] audit: type=1400 audit(1755344271.894:3707): avc: denied { name_bind } for pid=9517 comm="syz.2.2373" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 118.787692][ T9515] Symlink component flag not implemented [ 118.793900][ T9515] Symlink component flag not implemented (7) [ 119.020598][ T29] audit: type=1400 audit(1755344272.144:3708): avc: denied { ioctl } for pid=9523 comm="syz.4.2367" path="socket:[29685]" dev="sockfs" ino=29685 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.076818][ T29] audit: type=1326 audit(1755344272.204:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93287ebe9 code=0x7ffc0000 [ 119.102467][ T9530] loop0: detected capacity change from 0 to 512 [ 119.109681][ T9530] journal_path: Non-blockdev passed as './bus' [ 119.115942][ T9530] EXT4-fs: error: could not find journal device path [ 119.126069][ T29] audit: type=1326 audit(1755344272.204:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff93287ebe9 code=0x7ffc0000 [ 119.149637][ T29] audit: type=1326 audit(1755344272.204:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff93287ec23 code=0x7ffc0000 [ 119.174118][ T29] audit: type=1326 audit(1755344272.204:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff93287d69f code=0x7ffc0000 [ 119.273268][ T9536] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 119.287463][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.303497][ T9536] bond0: (slave veth3): Enslaving as an active interface with a down link [ 119.317918][ T9536] bond0: (slave dummy0): making interface the new active one [ 119.326946][ T9536] dummy0: entered promiscuous mode [ 119.332201][ T9536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.366075][ T9543] loop2: detected capacity change from 0 to 164 [ 119.374672][ T9543] rock: directory entry would overflow storage [ 119.380925][ T9543] rock: sig=0x66, size=4, remaining=3 [ 119.389525][ T9543] rock: directory entry would overflow storage [ 119.396054][ T9543] rock: sig=0x66, size=4, remaining=3 [ 119.402158][ T9543] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.411064][ T9543] rock: directory entry would overflow storage [ 119.417267][ T9543] rock: sig=0x66, size=4, remaining=3 [ 119.423241][ T9543] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.725806][ T9561] ================================================================== [ 119.733918][ T9561] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 119.740890][ T9561] [ 119.743210][ T9561] read-write to 0xffff88811baaadec of 4 bytes by task 9554 on cpu 1: [ 119.751265][ T9561] fifo_open+0x86/0x5d0 [ 119.755446][ T9561] do_dentry_open+0x646/0xa20 [ 119.760133][ T9561] vfs_open+0x37/0x1e0 [ 119.764233][ T9561] path_openat+0x1c5e/0x2170 [ 119.768841][ T9561] do_filp_open+0x109/0x230 [ 119.773354][ T9561] do_sys_openat2+0xa6/0x110 [ 119.777959][ T9561] __x64_sys_openat+0xf2/0x120 [ 119.782728][ T9561] x64_sys_call+0x2e9c/0x2ff0 [ 119.787424][ T9561] do_syscall_64+0xd2/0x200 [ 119.791930][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.797823][ T9561] [ 119.800145][ T9561] read to 0xffff88811baaadec of 4 bytes by task 9561 on cpu 0: [ 119.807684][ T9561] wait_for_partner+0xb5/0x1c0 [ 119.812451][ T9561] fifo_open+0x4b1/0x5d0 [ 119.816760][ T9561] do_dentry_open+0x646/0xa20 [ 119.821450][ T9561] vfs_open+0x37/0x1e0 [ 119.825535][ T9561] path_openat+0x1c5e/0x2170 [ 119.830120][ T9561] do_filp_open+0x109/0x230 [ 119.834698][ T9561] do_sys_openat2+0xa6/0x110 [ 119.839317][ T9561] __se_sys_openat2+0x194/0x1f0 [ 119.844173][ T9561] __x64_sys_openat2+0x55/0x70 [ 119.848945][ T9561] x64_sys_call+0x1121/0x2ff0 [ 119.853710][ T9561] do_syscall_64+0xd2/0x200 [ 119.858226][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.864117][ T9561] [ 119.866436][ T9561] value changed: 0x00000001 -> 0x00000002 [ 119.872151][ T9561] [ 119.874468][ T9561] Reported by Kernel Concurrency Sanitizer on: [ 119.880639][ T9561] CPU: 0 UID: 0 PID: 9561 Comm: syz.5.2380 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 119.894289][ T9561] Tainted: [W]=WARN [ 119.898099][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.908154][ T9561] ==================================================================