last executing test programs: 20.769951053s ago: executing program 2 (id=898): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x0, 0x16c}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) 20.543449007s ago: executing program 2 (id=906): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 20.412955019s ago: executing program 2 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20.32487018s ago: executing program 2 (id=912): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 20.070467155s ago: executing program 2 (id=925): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x84}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 19.961058826s ago: executing program 2 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x2201, 0x800}}, 0x20}}, 0x40040) 19.960800776s ago: executing program 32 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x2201, 0x800}}, 0x20}}, 0x40040) 3.223835816s ago: executing program 5 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.367577791s ago: executing program 1 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) close(r4) 2.310284431s ago: executing program 1 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000700)=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2.309826642s ago: executing program 1 (id=1268): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.309383971s ago: executing program 1 (id=1269): socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 1.82263918s ago: executing program 3 (id=1277): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)) 1.409030626s ago: executing program 4 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xa, 0xfff0}, {}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4040014) 1.302141448s ago: executing program 4 (id=1288): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 1.035647513s ago: executing program 5 (id=1289): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x0, 0x6, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 968.259924ms ago: executing program 3 (id=1290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x228, 0x0, 0x0) 964.005914ms ago: executing program 5 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x3c, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 950.535474ms ago: executing program 3 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x401}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) 943.487644ms ago: executing program 5 (id=1293): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x722, &(0x7f0000002640)="$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") 880.410945ms ago: executing program 3 (id=1294): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0) socket$inet(0x2, 0x3, 0x2) 783.576487ms ago: executing program 3 (id=1295): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 768.207187ms ago: executing program 3 (id=1296): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 605.31884ms ago: executing program 4 (id=1297): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) 484.806722ms ago: executing program 4 (id=1299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 465.352912ms ago: executing program 4 (id=1300): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x1) 464.537623ms ago: executing program 0 (id=1301): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 387.702933ms ago: executing program 1 (id=1302): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) close(r0) 387.206733ms ago: executing program 1 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) unshare(0x60400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 383.138104ms ago: executing program 0 (id=1304): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x44000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x32}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x80090) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x9, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 377.365224ms ago: executing program 4 (id=1305): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 358.050424ms ago: executing program 0 (id=1306): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 196.940647ms ago: executing program 0 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x2201, 0x800}}, 0x20}}, 0x40040) 90.276679ms ago: executing program 5 (id=1308): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x20000, 0xfffffffd, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xd, 0xffffad55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x7b2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffefe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x10001, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x5, 0x0, 0x0, 0xb4d}}}]}}]}, 0x468}}, 0x0) 78.699819ms ago: executing program 0 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 51.88878ms ago: executing program 0 (id=1310): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) kernel console output (not intermixed with test programs): im netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.055679][ T4488] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 45.064566][ T4488] team0: Port device dummy0 added [ 45.072803][ T4488] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 45.081111][ T4488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.090685][ T4488] team0: Failed to send options change via netlink (err -105) [ 45.098349][ T4488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.107348][ T4488] team0: Port device dummy0 removed [ 45.114941][ T4488] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.164554][ T4495] loop1: detected capacity change from 0 to 512 [ 45.171805][ T4495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.204547][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.241167][ T4495] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.360413][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.406505][ T4514] netlink: 'syz.2.332': attribute type 13 has an invalid length. [ 45.417672][ T4517] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 45.442715][ T4517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.459488][ T4524] loop1: detected capacity change from 0 to 512 [ 45.460190][ T4517] vlan2: entered allmulticast mode [ 45.471011][ T4517] bond1: entered allmulticast mode [ 45.487627][ T4524] EXT4-fs (loop1): 1 orphan inode deleted [ 45.494228][ T4524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.507328][ T4524] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.507712][ T3708] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 45.578661][ T4530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.588816][ T4530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.623505][ T4530] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 45.641527][ T4530] bond0 (unregistering): Released all slaves [ 45.642922][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.026797][ T4568] loop3: detected capacity change from 0 to 512 [ 46.033674][ T4568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.046555][ T4568] EXT4-fs (loop3): 1 truncate cleaned up [ 46.054188][ T4568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.112711][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.323518][ T4596] loop0: detected capacity change from 0 to 512 [ 46.330526][ T4596] EXT4-fs: Ignoring removed nobh option [ 46.337479][ T4596] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 46.346639][ T4596] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.363: attempt to clear invalid blocks 2 len 1 [ 46.359780][ T4596] EXT4-fs (loop0): Remounting filesystem read-only [ 46.366622][ T4596] EXT4-fs (loop0): 1 truncate cleaned up [ 46.372622][ T4596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.397540][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.790401][ T4612] loop1: detected capacity change from 0 to 512 [ 46.805300][ T4612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.817935][ T4612] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.832722][ T4612] EXT4-fs (loop1): shut down requested (0) [ 46.832724][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 46.832740][ T29] audit: type=1400 audit(2000000014.060:774): avc: denied { ioctl } for pid=4611 comm="syz.1.370" path="/89/file0/blkio.bfq.io_queued" dev="loop1" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.875031][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 46.895162][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.922295][ T4620] loop4: detected capacity change from 0 to 128 [ 46.929216][ T4620] EXT4-fs: Ignoring removed nobh option [ 46.936536][ T4620] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.949127][ T4620] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.992190][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.248140][ T4636] loop1: detected capacity change from 0 to 512 [ 47.257564][ T4636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.276582][ T4636] EXT4-fs (loop1): 1 truncate cleaned up [ 47.289466][ T4636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.423371][ T4651] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.380: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 47.473883][ T4651] EXT4-fs (loop1): Remounting filesystem read-only [ 47.596081][ T4660] loop3: detected capacity change from 0 to 512 [ 47.609201][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.620795][ T4660] EXT4-fs: Ignoring removed nobh option [ 47.639991][ T4660] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 47.656081][ T4666] serio: Serial port ptm0 [ 47.689001][ T4660] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.387: attempt to clear invalid blocks 2 len 1 [ 47.705212][ T4660] EXT4-fs (loop3): Remounting filesystem read-only [ 47.713784][ T4660] EXT4-fs (loop3): 1 truncate cleaned up [ 47.719917][ T4660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.779639][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.881472][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.893665][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.903635][ T4687] bond0 (unregistering): Released all slaves [ 48.007349][ T4694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.060361][ T4694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.153710][ T4694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.165852][ T4701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4701 comm=syz.4.403 [ 48.196794][ T4694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.210878][ T4703] loop1: detected capacity change from 0 to 8192 [ 48.264102][ T4694] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.275748][ T4694] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.289311][ T4694] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.302881][ T4694] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.564284][ T4713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4713 comm=syz.3.410 [ 48.576711][ T4713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4713 comm=syz.3.410 [ 48.596482][ T4715] loop0: detected capacity change from 0 to 1024 [ 48.628270][ T4715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.640861][ T4717] wg2: entered promiscuous mode [ 48.645845][ T4717] wg2: entered allmulticast mode [ 48.661738][ T4715] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 48.685218][ T4724] __nla_validate_parse: 7 callbacks suppressed [ 48.685235][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 48.704076][ T4723] netlink: '+}[@': attribute type 13 has an invalid length. [ 48.723902][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.752389][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.759697][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.800801][ T4723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.812169][ T4723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.846401][ T4723] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.854917][ T4723] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.863314][ T4723] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.871886][ T4723] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.941575][ T29] audit: type=1326 audit(2000000016.170:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 48.964915][ T29] audit: type=1326 audit(2000000016.170:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 48.992520][ T29] audit: type=1326 audit(2000000016.220:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 49.015892][ T29] audit: type=1326 audit(2000000016.220:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 49.039261][ T29] audit: type=1326 audit(2000000016.220:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 49.068394][ T4739] loop3: detected capacity change from 0 to 512 [ 49.077138][ T4739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.086574][ T29] audit: type=1326 audit(2000000016.300:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 49.109867][ T29] audit: type=1326 audit(2000000016.300:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87560ae963 code=0x7ffc0000 [ 49.133004][ T29] audit: type=1326 audit(2000000016.300:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87560ad3df code=0x7ffc0000 [ 49.156076][ T29] audit: type=1326 audit(2000000016.300:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f87560ae9b7 code=0x7ffc0000 [ 49.185364][ T4742] loop4: detected capacity change from 0 to 512 [ 49.203098][ T4743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.224419][ T4739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 49.225680][ T4742] EXT4-fs (loop4): 1 orphan inode deleted [ 49.232454][ T4739] System zones: 0-2, 18-18, 34-34 [ 49.243989][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 49.246744][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.268848][ T4745] loop2: detected capacity change from 0 to 8192 [ 49.276341][ T4739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.296824][ T4739] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.307332][ T4742] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.330858][ T4743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.374953][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.416579][ T4743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.456647][ T4743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.543968][ T4743] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.574433][ T4743] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.593932][ T4743] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.615345][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.635324][ T4743] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.653009][ T4768] loop4: detected capacity change from 0 to 2048 [ 49.675282][ T4768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.708212][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.770329][ T4776] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 49.788866][ T4780] netlink: 'syz.4.432': attribute type 10 has an invalid length. [ 49.804038][ T4780] dummy0: left promiscuous mode [ 49.813315][ T4780] team0: Port device dummy0 added [ 49.834335][ T4780] netlink: 'syz.4.432': attribute type 10 has an invalid length. [ 49.842479][ T4776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.869361][ T4784] bond0: (slave gretap1): making interface the new active one [ 49.883055][ T4784] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 49.892560][ T4791] loop0: detected capacity change from 0 to 512 [ 49.892771][ T4780] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.910116][ T4780] team0: Failed to send options change via netlink (err -105) [ 49.910195][ T4791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.917753][ T4780] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.935913][ T4780] team0: Port device dummy0 removed [ 49.943203][ T4780] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.944710][ T4791] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 49.956136][ T4776] vlan2: entered allmulticast mode [ 49.964977][ T4776] bond0: entered allmulticast mode [ 49.966202][ T4791] System zones: [ 49.970091][ T4776] gretap1: entered allmulticast mode [ 49.972265][ T4776] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 49.973657][ T4791] 0-2, 18-18, 34-34 [ 50.005461][ T4791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.018687][ T4791] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.034283][ T4795] netlink: 'syz.1.447': attribute type 29 has an invalid length. [ 50.046414][ T4797] xt_hashlimit: size too large, truncated to 1048576 [ 50.047752][ T4795] netlink: 'syz.1.447': attribute type 29 has an invalid length. [ 50.075964][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.089846][ T4795] netlink: 'syz.1.447': attribute type 29 has an invalid length. [ 50.128702][ T4795] netlink: 'syz.1.447': attribute type 29 has an invalid length. [ 50.241361][ T4801] loop0: detected capacity change from 0 to 512 [ 50.276829][ T4801] EXT4-fs (loop0): 1 orphan inode deleted [ 50.282998][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.297141][ T3686] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:41: Failed to release dquot type 1 [ 50.331679][ T4801] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.435092][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.480548][ T4820] netlink: 14 bytes leftover after parsing attributes in process `syz.0.442'. [ 50.491624][ T4820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.499982][ T4816] loop4: detected capacity change from 0 to 8192 [ 50.507474][ T4820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.516597][ T4820] bond0 (unregistering): Released all slaves [ 50.661228][ T4827] loop0: detected capacity change from 0 to 128 [ 50.745263][ T4832] bio_check_eod: 103 callbacks suppressed [ 50.745277][ T4832] syz.0.457: attempt to access beyond end of device [ 50.745277][ T4832] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 50.764573][ T4832] syz.0.457: attempt to access beyond end of device [ 50.764573][ T4832] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 50.777967][ T4832] syz.0.457: attempt to access beyond end of device [ 50.777967][ T4832] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 50.791396][ T4832] syz.0.457: attempt to access beyond end of device [ 50.791396][ T4832] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 50.804780][ T4832] syz.0.457: attempt to access beyond end of device [ 50.804780][ T4832] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 50.818361][ T4832] syz.0.457: attempt to access beyond end of device [ 50.818361][ T4832] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 50.831895][ T4832] syz.0.457: attempt to access beyond end of device [ 50.831895][ T4832] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 50.845397][ T4832] syz.0.457: attempt to access beyond end of device [ 50.845397][ T4832] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 50.860217][ T4832] syz.0.457: attempt to access beyond end of device [ 50.860217][ T4832] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 50.885788][ T4832] syz.0.457: attempt to access beyond end of device [ 50.885788][ T4832] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 50.916056][ T4836] loop1: detected capacity change from 0 to 512 [ 50.928588][ T4838] netlink: 33912 bytes leftover after parsing attributes in process `syz.4.445'. [ 50.939250][ T4836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.939459][ T4840] SELinux: failed to load policy [ 50.975196][ T4836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 50.993611][ T4836] System zones: 0-2, 18-18, 34-34 [ 51.001514][ T4849] netlink: 'syz.2.449': attribute type 10 has an invalid length. [ 51.009400][ T4849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.449'. [ 51.024181][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.037283][ T4849] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.045534][ T4849] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.049843][ T4851] loop4: detected capacity change from 0 to 512 [ 51.053698][ T4849] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.053728][ T4849] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.070191][ T4836] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.077622][ T4849] team0: Port device geneve1 added [ 51.093095][ T4851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.134853][ T4851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.202566][ T4856] loop2: detected capacity change from 0 to 128 [ 51.208962][ T4851] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.225152][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.248885][ T4858] xt_hashlimit: size too large, truncated to 1048576 [ 51.286119][ T4860] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 51.329013][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.365356][ T4860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.387399][ T4862] bond2: (slave gretap1): making interface the new active one [ 51.395679][ T4862] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 51.422546][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 51.442545][ T4860] vlan2: entered allmulticast mode [ 51.447857][ T4860] bond2: entered allmulticast mode [ 51.453095][ T4860] gretap1: entered allmulticast mode [ 51.466130][ T4860] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 51.546542][ T4871] loop2: detected capacity change from 0 to 512 [ 51.566643][ T4871] EXT4-fs (loop2): 1 orphan inode deleted [ 51.572882][ T4871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.590816][ T3685] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:40: Failed to release dquot type 1 [ 51.609408][ T4871] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.631498][ T4875] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.685374][ T4875] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.731744][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.759172][ T4875] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.762221][ T4884] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.464'. [ 51.866486][ T4875] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.877411][ T4893] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 52.019377][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 52.019403][ T29] audit: type=1326 audit(2000000019.250:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.050480][ T29] audit: type=1326 audit(2000000019.250:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.061197][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119678e00: rx timeout, send abort [ 52.073931][ T29] audit: type=1326 audit(2000000019.250:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.105186][ T29] audit: type=1326 audit(2000000019.250:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.128470][ T29] audit: type=1326 audit(2000000019.250:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.151784][ T29] audit: type=1326 audit(2000000019.250:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.175090][ T29] audit: type=1326 audit(2000000019.260:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.198514][ T29] audit: type=1326 audit(2000000019.260:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.221759][ T29] audit: type=1326 audit(2000000019.260:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.245062][ T29] audit: type=1326 audit(2000000019.260:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 52.561208][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811965a200: rx timeout, send abort [ 52.581917][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119678e00: abort rx timeout. Force session deactivation [ 52.649214][ T4906] team0: Port device dummy0 added [ 52.650450][ T4907] xt_hashlimit: size too large, truncated to 1048576 [ 52.656390][ T4906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.672759][ T4906] team0: Failed to send options change via netlink (err -105) [ 52.680359][ T4906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.690158][ T4906] team0: Port device dummy0 removed [ 53.069448][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811965a200: abort rx timeout. Force session deactivation [ 53.699181][ T4875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.710216][ T4875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.721331][ T4875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.732836][ T4875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.097745][ T4918] validate_nla: 6 callbacks suppressed [ 55.097772][ T4918] netlink: 'syz.0.487': attribute type 7 has an invalid length. [ 55.110983][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 55.120304][ T4921] loop3: detected capacity change from 0 to 512 [ 55.144279][ T4923] loop1: detected capacity change from 0 to 128 [ 55.158441][ T4919] tipc: Started in network mode [ 55.163421][ T4919] tipc: Node identity de0266119e64, cluster identity 4711 [ 55.170695][ T4919] tipc: Enabled bearer , priority 0 [ 55.180471][ T4916] pim6reg1: entered promiscuous mode [ 55.185932][ T4916] pim6reg1: entered allmulticast mode [ 55.206839][ T4921] EXT4-fs (loop3): 1 orphan inode deleted [ 55.213316][ T4921] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.227273][ T3685] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:40: Failed to release dquot type 1 [ 55.242775][ T4929] loop0: detected capacity change from 0 to 2048 [ 55.255670][ T4917] tipc: Resetting bearer [ 55.262109][ T4929] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.289377][ T4917] tipc: Disabling bearer [ 55.297563][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.309384][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.343969][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.353058][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.393246][ T4943] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.423658][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.435237][ T4943] SELinux: failed to load policy [ 55.437075][ T4941] vlan2: entered allmulticast mode [ 55.445444][ T4941] bond0: entered allmulticast mode [ 55.450628][ T4941] bond_slave_0: entered allmulticast mode [ 55.456211][ T4943] netlink: 'syz.2.488': attribute type 10 has an invalid length. [ 55.456390][ T4941] bond_slave_1: entered allmulticast mode [ 55.464097][ T4943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'. [ 55.471633][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.480937][ T4941] dummy0: entered allmulticast mode [ 55.506342][ T4943] dummy0: entered promiscuous mode [ 55.511963][ T4943] bridge0: port 3(dummy0) entered blocking state [ 55.518394][ T4943] bridge0: port 3(dummy0) entered disabled state [ 55.520390][ T4953] loop3: detected capacity change from 0 to 1024 [ 55.525905][ T4943] dummy0: entered allmulticast mode [ 55.667523][ T4972] capability: warning: `syz.2.497' uses deprecated v2 capabilities in a way that may be insecure [ 55.686948][ T4974] netlink: 'syz.4.500': attribute type 7 has an invalid length. [ 55.694722][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 55.734768][ T4981] netlink: 'syz.3.503': attribute type 10 has an invalid length. [ 55.742774][ T4981] veth0_vlan: entered allmulticast mode [ 55.749724][ T4981] veth0_vlan: left promiscuous mode [ 55.756352][ T4981] veth0_vlan: entered promiscuous mode [ 55.763248][ T4981] team0: Device veth0_vlan failed to register rx_handler [ 55.777784][ T4982] loop2: detected capacity change from 0 to 1024 [ 55.789346][ T4982] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.800413][ T4982] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.815481][ T4982] JBD2: no valid journal superblock found [ 55.821257][ T4982] EXT4-fs (loop2): Could not load journal inode [ 55.834876][ T4989] loop4: detected capacity change from 0 to 1024 [ 55.845733][ T4991] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.855502][ T4991] SELinux: failed to load policy [ 55.861216][ T4991] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 55.869062][ T4991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.506'. [ 55.881968][ T4991] dummy0: entered promiscuous mode [ 55.888577][ T4991] bridge0: port 3(dummy0) entered blocking state [ 55.895399][ T4991] bridge0: port 3(dummy0) entered disabled state [ 55.902258][ T4991] dummy0: entered allmulticast mode [ 55.938053][ T4998] ref_ctr_offset mismatch. inode: 0x272 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 56.006129][ T5007] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 56.006129][ T5007] The task syz.2.509 (5007) triggered the difference, watch for misbehavior. [ 56.088447][ T5013] loop0: detected capacity change from 0 to 512 [ 56.097645][ T5007] loop2: detected capacity change from 0 to 256 [ 56.104657][ T5007] vfat: Unknown parameter 'shortname' [ 56.107192][ T5013] EXT4-fs (loop0): 1 orphan inode deleted [ 56.116725][ T5013] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.127377][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 56.563649][ T5020] syzkaller0: entered allmulticast mode [ 56.572197][ T5024] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 56.582056][ T5020] syzkaller0 (unregistering): left allmulticast mode [ 56.611252][ T5028] loop0: detected capacity change from 0 to 1024 [ 56.696644][ T5037] loop1: detected capacity change from 0 to 2048 [ 56.719523][ T5037] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.126393][ T5108] loop1: detected capacity change from 0 to 1024 [ 57.557627][ T5164] netlink: 'syz.3.532': attribute type 7 has an invalid length. [ 57.588996][ T5162] hub 6-0:1.0: USB hub found [ 57.593684][ T5162] hub 6-0:1.0: 8 ports detected [ 57.664484][ T5177] loop4: detected capacity change from 0 to 2048 [ 57.677264][ T5175] loop3: detected capacity change from 0 to 256 [ 57.684318][ T5175] vfat: Unknown parameter 'shortname' [ 57.685092][ T5177] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.766715][ T5185] loop1: detected capacity change from 0 to 2048 [ 57.821631][ T5197] loop4: detected capacity change from 0 to 1024 [ 57.828589][ T5197] EXT4-fs: Ignoring removed orlov option [ 57.834355][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.879584][ T5205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5205 comm=syz.0.544 [ 57.903313][ T5200] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.918432][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 57.918447][ T29] audit: type=1400 audit(2000000025.130:1004): avc: denied { setopt } for pid=5207 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.927588][ T5210] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 57.954379][ T5200] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1306 with error 28 [ 57.967097][ T5200] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.967097][ T5200] [ 57.976909][ T5200] EXT4-fs (loop1): Total free blocks count 0 [ 57.983023][ T5200] EXT4-fs (loop1): Free/Dirty block details [ 57.989009][ T5200] EXT4-fs (loop1): free_blocks=2415919104 [ 57.994734][ T5200] EXT4-fs (loop1): dirty_blocks=1312 [ 58.000007][ T5200] EXT4-fs (loop1): Block reservation details [ 58.006091][ T5200] EXT4-fs (loop1): i_reserved_data_blocks=82 [ 58.020051][ T5210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.036819][ T5214] bond0: (slave gretap1): making interface the new active one [ 58.046572][ T5214] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 58.094416][ T5210] vlan2: entered allmulticast mode [ 58.099649][ T5210] bond0: entered allmulticast mode [ 58.104837][ T5210] gretap1: entered allmulticast mode [ 58.114407][ T5210] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 58.136219][ T3663] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 58.148595][ T3663] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.148595][ T3663] [ 58.149411][ T29] audit: type=1400 audit(2000000025.370:1005): avc: denied { wake_alarm } for pid=5219 comm="syz.4.549" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.889650][ T5228] @ÿ: renamed from bond_slave_0 [ 59.909328][ T5232] pim6reg1: entered promiscuous mode [ 59.914767][ T5232] pim6reg1: entered allmulticast mode [ 59.920021][ T5235] loop2: detected capacity change from 0 to 1024 [ 59.925245][ T5233] lo speed is unknown, defaulting to 1000 [ 59.948881][ T5233] lo speed is unknown, defaulting to 1000 [ 59.960391][ T5233] lo speed is unknown, defaulting to 1000 [ 59.969427][ T5233] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.981659][ T5233] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.067147][ T5233] lo speed is unknown, defaulting to 1000 [ 60.126464][ T29] audit: type=1400 audit(2000000027.360:1006): avc: denied { create } for pid=5251 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.133426][ T5233] lo speed is unknown, defaulting to 1000 [ 60.155670][ T5242] lo speed is unknown, defaulting to 1000 [ 60.170695][ T29] audit: type=1400 audit(2000000027.380:1007): avc: denied { write } for pid=5251 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.190077][ T29] audit: type=1326 audit(2000000027.380:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 60.213512][ T29] audit: type=1326 audit(2000000027.380:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 60.236873][ T29] audit: type=1326 audit(2000000027.380:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 60.260314][ T29] audit: type=1326 audit(2000000027.380:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 60.283791][ T29] audit: type=1326 audit(2000000027.380:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 60.307256][ T29] audit: type=1326 audit(2000000027.380:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 60.334610][ T5250] syzkaller0: entered allmulticast mode [ 60.340565][ T5233] lo speed is unknown, defaulting to 1000 [ 60.349992][ T5233] lo speed is unknown, defaulting to 1000 [ 60.357397][ T5253] syzkaller0 (unregistering): left allmulticast mode [ 60.470269][ T5233] lo speed is unknown, defaulting to 1000 [ 60.610654][ T5271] loop1: detected capacity change from 0 to 1024 [ 60.922993][ T5288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.021792][ T5290] syzkaller0: entered promiscuous mode [ 61.027494][ T5290] syzkaller0: entered allmulticast mode [ 61.031786][ T5296] siw: device registration error -23 [ 61.706316][ T5306] loop3: detected capacity change from 0 to 164 [ 61.714388][ T5302] loop2: detected capacity change from 0 to 2048 [ 61.718308][ T5307] loop4: detected capacity change from 0 to 512 [ 61.728790][ T5306] ISOFS: unable to read i-node block [ 61.734263][ T5306] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 61.744434][ T5307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.756820][ T5307] EXT4-fs (loop4): 1 truncate cleaned up [ 61.758372][ T5305] loop0: detected capacity change from 0 to 764 [ 61.770070][ T5302] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.779250][ T5305] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.796752][ T5302] __nla_validate_parse: 16 callbacks suppressed [ 61.796766][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 61.831957][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 61.923677][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 61.963846][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 61.979169][ T5316] lo speed is unknown, defaulting to 1000 [ 61.990974][ T5319] lo speed is unknown, defaulting to 1000 [ 61.997606][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 62.069304][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 62.349206][ T5335] lo speed is unknown, defaulting to 1000 [ 62.599577][ T5348] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 62.615074][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 62.945552][ T5360] loop3: detected capacity change from 0 to 2048 [ 62.992035][ T5360] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.015068][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 63.036141][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 63.081464][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 63.133682][ T5372] lo speed is unknown, defaulting to 1000 [ 63.385242][ T5394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.402416][ T5396] loop3: detected capacity change from 0 to 2048 [ 63.441593][ T5396] EXT4-fs: Ignoring removed bh option [ 63.688348][ T5413] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.800185][ T5413] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.965150][ T5413] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.973464][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 63.973482][ T29] audit: type=1326 audit(2000000031.200:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.019715][ T29] audit: type=1326 audit(2000000031.250:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.043140][ T29] audit: type=1326 audit(2000000031.250:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.066546][ T29] audit: type=1326 audit(2000000031.250:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.090060][ T29] audit: type=1326 audit(2000000031.250:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.113445][ T29] audit: type=1326 audit(2000000031.250:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.137057][ T29] audit: type=1326 audit(2000000031.250:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.160529][ T29] audit: type=1326 audit(2000000031.250:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.184042][ T29] audit: type=1326 audit(2000000031.250:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.207443][ T29] audit: type=1326 audit(2000000031.250:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5459 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe42d6ee929 code=0x7ffc0000 [ 64.259050][ T5413] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.284151][ T5401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.350710][ T3701] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.363023][ T3701] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.363023][ T3701] [ 64.373382][ T3701] EXT4-fs (loop3): Total free blocks count 0 [ 64.379435][ T3701] EXT4-fs (loop3): Free/Dirty block details [ 64.385386][ T3701] EXT4-fs (loop3): free_blocks=2415919104 [ 64.391098][ T3701] EXT4-fs (loop3): dirty_blocks=6336 [ 64.396439][ T3701] EXT4-fs (loop3): Block reservation details [ 64.402414][ T3701] EXT4-fs (loop3): i_reserved_data_blocks=396 [ 64.412313][ T3701] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 64.418795][ T5413] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.424888][ T3701] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.424888][ T3701] [ 64.447611][ T5413] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.459656][ T5413] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.492913][ T5413] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.815314][ T5485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.036842][ T5511] syzkaller0: entered promiscuous mode [ 65.042550][ T5511] syzkaller0: entered allmulticast mode [ 65.076216][ T5515] ÿÿÿÿÿÿ: renamed from vlan1 [ 65.090681][ T5517] netlink: 'syz.2.633': attribute type 9 has an invalid length. [ 65.124528][ T5519] vhci_hcd: invalid port number 96 [ 65.129738][ T5519] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 65.274897][ T5536] loop0: detected capacity change from 0 to 128 [ 65.368775][ T3701] bio_check_eod: 212 callbacks suppressed [ 65.368791][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.368791][ T3701] loop0: rw=1, sector=145, nr_sectors = 32 limit=128 [ 65.388477][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.388477][ T3701] loop0: rw=1, sector=185, nr_sectors = 16 limit=128 [ 65.402088][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.402088][ T3701] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 65.415669][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.415669][ T3701] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 65.429167][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.429167][ T3701] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 65.442763][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.442763][ T3701] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 65.443199][ T5548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.458088][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.458088][ T3701] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 65.477879][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.477879][ T3701] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 65.505882][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.505882][ T3701] loop0: rw=1, sector=305, nr_sectors = 8 limit=128 [ 65.520307][ T3701] kworker/u8:55: attempt to access beyond end of device [ 65.520307][ T3701] loop0: rw=1, sector=321, nr_sectors = 8 limit=128 [ 65.591260][ T5560] lo speed is unknown, defaulting to 1000 [ 65.652956][ T5570] lo speed is unknown, defaulting to 1000 [ 65.659546][ T5570] lo speed is unknown, defaulting to 1000 [ 65.666032][ T5570] lo speed is unknown, defaulting to 1000 [ 65.672932][ T5570] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 65.682916][ T5570] lo speed is unknown, defaulting to 1000 [ 65.683168][ T5572] syzkaller1: entered promiscuous mode [ 65.694290][ T5572] syzkaller1: entered allmulticast mode [ 65.706287][ T5570] lo speed is unknown, defaulting to 1000 [ 65.723453][ T5570] lo speed is unknown, defaulting to 1000 [ 65.766548][ T5570] lo speed is unknown, defaulting to 1000 [ 65.784047][ T5570] lo speed is unknown, defaulting to 1000 [ 65.795611][ T5570] lo speed is unknown, defaulting to 1000 [ 65.889150][ T5589] loop4: detected capacity change from 0 to 2048 [ 65.991561][ T5613] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 66.065728][ T5615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.073013][ T5615] IPv6: NLM_F_CREATE should be set when creating new route [ 66.144597][ T5630] loop0: detected capacity change from 0 to 128 [ 66.162164][ T5630] netlink: zone id is out of range [ 66.167911][ T5630] netlink: zone id is out of range [ 66.173054][ T5630] netlink: zone id is out of range [ 66.178664][ T5630] netlink: zone id is out of range [ 66.184772][ T5630] netlink: zone id is out of range [ 66.189953][ T5630] netlink: zone id is out of range [ 66.195099][ T5630] netlink: zone id is out of range [ 66.200286][ T5630] netlink: zone id is out of range [ 66.205490][ T5630] netlink: zone id is out of range [ 66.210767][ T5630] netlink: zone id is out of range [ 66.352100][ T5653] veth0_vlan: entered allmulticast mode [ 66.375430][ T5653] ÿÿÿÿÿÿ: renamed from vlan1 [ 66.391851][ T5658] pim6reg1: entered promiscuous mode [ 66.397235][ T5658] pim6reg1: entered allmulticast mode [ 66.690268][ T5691] pim6reg1: entered promiscuous mode [ 66.695794][ T5691] pim6reg1: entered allmulticast mode [ 66.840484][ T5696] netlink: 'syz.4.713': attribute type 4 has an invalid length. [ 66.874848][ T5696] netlink: 'syz.4.713': attribute type 4 has an invalid length. [ 66.921626][ T5699] netlink: 'syz.4.715': attribute type 10 has an invalid length. [ 66.929593][ T5699] __nla_validate_parse: 12 callbacks suppressed [ 66.929605][ T5699] netlink: 2 bytes leftover after parsing attributes in process `syz.4.715'. [ 66.952575][ T5699] team0: entered promiscuous mode [ 66.957945][ T5699] team_slave_0: entered promiscuous mode [ 66.963787][ T5699] team_slave_1: entered promiscuous mode [ 66.969637][ T5699] geneve1: entered promiscuous mode [ 66.975633][ T5699] bridge0: port 3(team0) entered blocking state [ 66.981941][ T5699] bridge0: port 3(team0) entered disabled state [ 66.988926][ T5699] team0: entered allmulticast mode [ 66.994831][ T5699] team_slave_0: entered allmulticast mode [ 67.000743][ T5699] team_slave_1: entered allmulticast mode [ 67.006741][ T5699] geneve1: entered allmulticast mode [ 67.013884][ T5699] bridge0: port 3(team0) entered blocking state [ 67.020332][ T5699] bridge0: port 3(team0) entered forwarding state [ 67.046853][ T5702] loop1: detected capacity change from 0 to 1024 [ 67.056099][ T5702] EXT4-fs: Ignoring removed orlov option [ 67.196437][ T5717] loop0: detected capacity change from 0 to 128 [ 67.370176][ T5717] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.451838][ T5725] loop1: detected capacity change from 0 to 1024 [ 67.497408][ T5725] EXT4-fs: Ignoring removed nobh option [ 67.503109][ T5725] EXT4-fs: Ignoring removed nobh option [ 67.520925][ T5732] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 67.520925][ T5732] ÄUúeâ[¦ÓÎ%#s' [ 67.572114][ T5732] netlink: 'syz.0.726': attribute type 13 has an invalid length. [ 67.584975][ T5725] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 67.622552][ T5725] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.720: inode #4294967295: comm syz.1.720: iget: illegal inode # [ 67.661522][ T5739] netlink: 216 bytes leftover after parsing attributes in process `syz.4.729'. [ 67.674239][ T5725] EXT4-fs (loop1): no journal found [ 67.674298][ T5725] EXT4-fs (loop1): can't get journal size [ 67.694855][ T5725] EXT4-fs (loop1): failed to initialize system zone (-22) [ 67.702203][ T5725] EXT4-fs (loop1): mount failed [ 67.777215][ T5747] loop2: detected capacity change from 0 to 1024 [ 67.796650][ T5747] EXT4-fs mount: 40 callbacks suppressed [ 67.796719][ T5747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.853899][ T5747] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.869551][ T5747] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.733: lblock 3 mapped to illegal pblock 3 (length 1) [ 67.887199][ T5747] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 67.899559][ T5747] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.899559][ T5747] [ 67.961514][ T5747] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 68.056991][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.105084][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 68.328335][ T5768] pim6reg1: entered promiscuous mode [ 68.333717][ T5768] pim6reg1: entered allmulticast mode [ 68.401904][ T5778] macsec0: entered promiscuous mode [ 68.533958][ T5790] loop3: detected capacity change from 0 to 2048 [ 68.547021][ T5790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.587663][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.717865][ T5804] usb usb8: usbfs: process 5804 (syz.4.758) did not claim interface 0 before use [ 68.889444][ T5821] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 68.903429][ T5821] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 68.911132][ T5821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.764'. [ 68.923678][ T5823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 68.937327][ T5819] lo speed is unknown, defaulting to 1000 [ 68.946460][ T5819] lo speed is unknown, defaulting to 1000 [ 68.963031][ T5825] netlink: 96 bytes leftover after parsing attributes in process `syz.4.766'. [ 69.150122][ T5840] loop0: detected capacity change from 0 to 512 [ 69.194696][ T5838] pim6reg1: entered promiscuous mode [ 69.200104][ T5838] pim6reg1: entered allmulticast mode [ 69.213998][ T5836] lo speed is unknown, defaulting to 1000 [ 69.221304][ T5840] EXT4-fs (loop0): 1 orphan inode deleted [ 69.228721][ T5840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.241758][ T3701] __quota_error: 235 callbacks suppressed [ 69.241771][ T3701] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.257362][ T3701] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 1 [ 69.273283][ T5840] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.301771][ T5836] lo speed is unknown, defaulting to 1000 [ 69.362638][ T29] audit: type=1326 audit(2000000036.590:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.408148][ T29] audit: type=1326 audit(2000000036.620:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.424604][ T5849] mmap: syz.0.774 (5849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.431605][ T29] audit: type=1326 audit(2000000036.630:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.466885][ T29] audit: type=1326 audit(2000000036.630:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.490420][ T29] audit: type=1326 audit(2000000036.630:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.513790][ T29] audit: type=1326 audit(2000000036.630:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.537151][ T29] audit: type=1326 audit(2000000036.630:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.560534][ T29] audit: type=1326 audit(2000000036.630:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.583906][ T29] audit: type=1326 audit(2000000036.630:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 69.629178][ T5854] loop4: detected capacity change from 0 to 512 [ 69.641766][ T5854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.681769][ T5854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.706053][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.717293][ T5858] syz_tun: entered allmulticast mode [ 69.722851][ T5854] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.740386][ T5857] syz_tun: left allmulticast mode [ 69.756010][ T5860] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.808294][ T5848] sch_fq: defrate 2048 ignored. [ 69.824494][ T5867] futex_wake_op: syz.3.783 tries to shift op by -1; fix this program [ 69.836460][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.860355][ T5869] wg2: entered promiscuous mode [ 69.865284][ T5869] wg2: entered allmulticast mode [ 69.905299][ T5873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.988504][ T5884] loop3: detected capacity change from 0 to 512 [ 69.995313][ T5884] journal_path: Non-blockdev passed as './bus' [ 70.001521][ T5884] EXT4-fs: error: could not find journal device path [ 70.037143][ T5873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.096568][ T5895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'. [ 70.130346][ T5873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.157700][ T5901] loop3: detected capacity change from 0 to 512 [ 70.165276][ T5901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.192769][ T5899] lo speed is unknown, defaulting to 1000 [ 70.200325][ T5901] EXT4-fs (loop3): 1 truncate cleaned up [ 70.206743][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.208227][ T5899] lo speed is unknown, defaulting to 1000 [ 70.228098][ T5873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.275147][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.300754][ T5873] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322659][ T5873] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.346358][ T5873] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.382591][ T5873] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.438323][ T5925] loop4: detected capacity change from 0 to 1024 [ 70.449020][ T5925] EXT4-fs: Ignoring removed orlov option [ 70.476772][ T5925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.527191][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.588686][ T5940] lo speed is unknown, defaulting to 1000 [ 70.595021][ T5940] lo speed is unknown, defaulting to 1000 [ 70.615856][ T5942] loop1: detected capacity change from 0 to 2048 [ 70.629212][ T5945] siw: device registration error -23 [ 70.643249][ T5942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.678983][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.741966][ T5952] loop3: detected capacity change from 0 to 8192 [ 70.750530][ T5956] netlink: 596 bytes leftover after parsing attributes in process `syz.4.822'. [ 70.760584][ T5958] loop1: detected capacity change from 0 to 512 [ 70.767679][ T5958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.803901][ T5958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.816834][ T5958] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.855754][ T5964] loop2: detected capacity change from 0 to 1024 [ 70.863079][ T5964] EXT4-fs: Ignoring removed orlov option [ 70.890194][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.928000][ T5967] loop3: detected capacity change from 0 to 512 [ 70.940877][ T5964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.970772][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.073493][ T5967] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.825: Parent and EA inode have the same ino 15 [ 71.159127][ T5967] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.825: Parent and EA inode have the same ino 15 [ 71.268563][ T5967] EXT4-fs (loop3): 1 orphan inode deleted [ 71.283273][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.377265][ T5987] loop0: detected capacity change from 0 to 2048 [ 71.399198][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.410881][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.445795][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.446375][ T5993] lo speed is unknown, defaulting to 1000 [ 71.461340][ T5993] lo speed is unknown, defaulting to 1000 [ 71.470533][ T5995] loop2: detected capacity change from 0 to 512 [ 71.479311][ T5995] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 71.487205][ T5996] siw: device registration error -23 [ 71.495533][ T5995] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.833: bad orphan inode 15 [ 71.506332][ T5995] ext4_test_bit(bit=14, block=18) = 1 [ 71.511735][ T5995] is_bad_inode(inode)=0 [ 71.515942][ T5995] NEXT_ORPHAN(inode)=1023 [ 71.520290][ T5995] max_ino=32 [ 71.523496][ T5995] i_nlink=0 [ 71.527183][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 71.541324][ T5995] ext2 filesystem being mounted at /155/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 71.570769][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 71.604031][ T6005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6005 comm=syz.2.834 [ 71.811193][ T6030] ref_ctr increment failed for inode: 0x364 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881045d6780 [ 71.824009][ T6029] uprobe: syz.0.849:6029 failed to unregister, leaking uprobe [ 71.865767][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'. [ 71.947911][ T6047] loop2: detected capacity change from 0 to 512 [ 71.962518][ T6049] loop0: detected capacity change from 0 to 512 [ 71.969682][ T6049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.982000][ T6049] EXT4-fs (loop0): 1 truncate cleaned up [ 71.989388][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.028989][ T6047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.092435][ T6047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.171678][ T6047] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.229906][ T6069] pim6reg1: entered promiscuous mode [ 72.235302][ T6069] pim6reg1: entered allmulticast mode [ 72.242755][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.295439][ T6071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.865'. [ 72.504770][ T6079] loop2: detected capacity change from 0 to 4096 [ 72.574941][ T6079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.714396][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 72.732840][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.787329][ T6095] 8021q: adding VLAN 0 to HW filter on device team1 [ 72.876382][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'. [ 72.956956][ T6049] syz.0.858 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 72.971100][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.0.858 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 72.971178][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.971190][ T6049] Call Trace: [ 72.971196][ T6049] [ 72.971202][ T6049] __dump_stack+0x1d/0x30 [ 72.971221][ T6049] dump_stack_lvl+0xe8/0x140 [ 72.971237][ T6049] dump_stack+0x15/0x1b [ 72.971299][ T6049] dump_header+0x81/0x220 [ 72.971337][ T6049] oom_kill_process+0x334/0x3f0 [ 72.971391][ T6049] out_of_memory+0x979/0xb80 [ 72.971495][ T6049] try_charge_memcg+0x5e6/0x9e0 [ 72.971527][ T6049] obj_cgroup_charge_pages+0xa6/0x150 [ 72.971554][ T6049] __memcg_kmem_charge_page+0x9f/0x170 [ 72.971604][ T6049] __alloc_frozen_pages_noprof+0x188/0x360 [ 72.971640][ T6049] alloc_pages_mpol+0xb3/0x250 [ 72.971677][ T6049] alloc_pages_noprof+0x90/0x130 [ 72.971706][ T6049] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 72.971821][ T6049] __kvmalloc_node_noprof+0x30f/0x4e0 [ 72.971849][ T6049] ? ip_set_alloc+0x1f/0x30 [ 72.971877][ T6049] ? ip_set_alloc+0x1f/0x30 [ 72.971929][ T6049] ? __kmalloc_cache_noprof+0x189/0x320 [ 72.971962][ T6049] ip_set_alloc+0x1f/0x30 [ 72.972055][ T6049] hash_netiface_create+0x282/0x740 [ 72.972104][ T6049] ? __pfx_hash_netiface_create+0x10/0x10 [ 72.972225][ T6049] ip_set_create+0x3cc/0x960 [ 72.972258][ T6049] ? __nla_parse+0x40/0x60 [ 72.972287][ T6049] nfnetlink_rcv_msg+0x4c3/0x590 [ 72.972349][ T6049] ? selinux_capable+0x1f9/0x270 [ 72.972397][ T6049] netlink_rcv_skb+0x120/0x220 [ 72.972430][ T6049] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 72.972477][ T6049] nfnetlink_rcv+0x16b/0x1690 [ 72.972583][ T6049] ? __rb_insert_augmented+0x295/0x2c0 [ 72.972603][ T6049] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 72.972639][ T6049] ? update_curr+0x16e/0x320 [ 72.972667][ T6049] ? enqueue_task_fair+0x35e/0x980 [ 72.972732][ T6049] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 72.972773][ T6049] ? probe_sched_wakeup+0x85/0xa0 [ 72.972800][ T6049] ? ttwu_do_activate+0x1cf/0x210 [ 72.972840][ T6049] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 72.972879][ T6049] ? try_to_wake_up+0x3df/0x630 [ 72.973008][ T6049] ? __list_del_entry_valid_or_report+0x65/0x130 [ 72.973042][ T6049] ? __rcu_read_unlock+0x4f/0x70 [ 72.973072][ T6049] ? __account_obj_stock+0x211/0x350 [ 72.973100][ T6049] ? should_fail_ex+0x30/0x280 [ 72.973179][ T6049] ? selinux_nlmsg_lookup+0x99/0x890 [ 72.973207][ T6049] ? selinux_netlink_send+0x59f/0x5f0 [ 72.973234][ T6049] ? __rcu_read_unlock+0x34/0x70 [ 72.973253][ T6049] ? __netlink_lookup+0x266/0x2a0 [ 72.973275][ T6049] netlink_unicast+0x5a1/0x670 [ 72.973384][ T6049] netlink_sendmsg+0x58b/0x6b0 [ 72.973412][ T6049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.973451][ T6049] __sock_sendmsg+0x142/0x180 [ 72.973482][ T6049] ____sys_sendmsg+0x31e/0x4e0 [ 72.973583][ T6049] ___sys_sendmsg+0x17b/0x1d0 [ 72.973675][ T6049] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 72.973747][ T6049] __x64_sys_sendmsg+0xd4/0x160 [ 72.973777][ T6049] x64_sys_call+0x2999/0x2fb0 [ 72.973803][ T6049] do_syscall_64+0xd2/0x200 [ 72.973823][ T6049] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.973845][ T6049] ? clear_bhb_loop+0x40/0x90 [ 72.973967][ T6049] ? clear_bhb_loop+0x40/0x90 [ 72.973990][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.974012][ T6049] RIP: 0033:0x7fe42d6ee929 [ 72.974037][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.974106][ T6049] RSP: 002b:00007fe42bd57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.974125][ T6049] RAX: ffffffffffffffda RBX: 00007fe42d915fa0 RCX: 00007fe42d6ee929 [ 72.974139][ T6049] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000007 [ 72.974153][ T6049] RBP: 00007fe42d770b39 R08: 0000000000000000 R09: 0000000000000000 [ 72.974163][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.974172][ T6049] R13: 0000000000000000 R14: 00007fe42d915fa0 R15: 00007ffe1bbe2f98 [ 72.974187][ T6049] [ 73.371150][ T6049] memory: usage 307200kB, limit 307200kB, failcnt 361 [ 73.377973][ T6049] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 73.385911][ T6049] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 73.393250][ T6049] Memory cgroup stats for /syz0: [ 73.411402][ T6109] netlink: 'syz.2.881': attribute type 39 has an invalid length. [ 73.434221][ T6049] cache 12288 [ 73.437574][ T6049] rss 0 [ 73.437864][ T6111] lo speed is unknown, defaulting to 1000 [ 73.440337][ T6049] shmem 0 [ 73.440346][ T6049] mapped_file 823296 [ 73.453007][ T6049] dirty 0 [ 73.456133][ T6049] writeback 0 [ 73.459422][ T6049] workingset_refault_anon 126 [ 73.464167][ T6049] workingset_refault_file 33 [ 73.468762][ T6049] swap 471040 [ 73.472158][ T6049] swapcached 0 [ 73.475583][ T6049] pgpgin 39099 [ 73.479019][ T6049] pgpgout 39096 [ 73.482488][ T6049] pgfault 40962 [ 73.485984][ T6049] pgmajfault 41 [ 73.489512][ T6049] inactive_anon 0 [ 73.493305][ T6049] active_anon 0 [ 73.496799][ T6049] inactive_file 12288 [ 73.500835][ T6049] active_file 0 [ 73.504350][ T6049] unevictable 0 [ 73.507825][ T6049] hierarchical_memory_limit 314572800 [ 73.513259][ T6049] hierarchical_memsw_limit 9223372036854771712 [ 73.519492][ T6049] total_cache 12288 [ 73.523312][ T6049] total_rss 0 [ 73.526673][ T6049] total_shmem 0 [ 73.530156][ T6049] total_mapped_file 823296 [ 73.534635][ T6049] total_dirty 0 [ 73.538099][ T6049] total_writeback 0 [ 73.541967][ T6049] total_workingset_refault_anon 126 [ 73.547218][ T6049] total_workingset_refault_file 33 [ 73.552357][ T6049] total_swap 471040 [ 73.556203][ T6049] total_swapcached 0 [ 73.560131][ T6049] total_pgpgin 39099 [ 73.564132][ T6049] total_pgpgout 39096 [ 73.568117][ T6049] total_pgfault 40962 [ 73.572115][ T6049] total_pgmajfault 41 [ 73.576149][ T6049] total_inactive_anon 0 [ 73.580464][ T6049] total_active_anon 0 [ 73.584486][ T6049] total_inactive_file 12288 [ 73.589067][ T6049] total_active_file 0 [ 73.593055][ T6049] total_unevictable 0 [ 73.597191][ T6049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.858,pid=6048,uid=0 [ 73.611794][ T6049] Memory cgroup out of memory: Killed process 6048 (syz.0.858) total-vm:96604kB, anon-rss:916kB, file-rss:23084kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 73.637123][ T6111] lo speed is unknown, defaulting to 1000 [ 73.643350][ T6114] siw: device registration error -23 [ 73.820738][ T6049] syz.0.858 (6049) used greatest stack depth: 6064 bytes left [ 73.833557][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.872746][ T6133] loop0: detected capacity change from 0 to 512 [ 73.880622][ T6133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.906685][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.919522][ T6133] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.947240][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.385751][ T6158] loop0: detected capacity change from 0 to 512 [ 74.392536][ T6158] journal_path: Non-blockdev passed as './bus' [ 74.398864][ T6158] EXT4-fs: error: could not find journal device path [ 74.433843][ T6160] lo speed is unknown, defaulting to 1000 [ 74.439969][ T6160] lo speed is unknown, defaulting to 1000 [ 74.657659][ T6174] loop3: detected capacity change from 0 to 512 [ 74.678673][ T6174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.705134][ T6174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.735453][ T6174] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.798279][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.803640][ T6183] lo speed is unknown, defaulting to 1000 [ 74.814811][ T6183] lo speed is unknown, defaulting to 1000 [ 74.844654][ T6187] vhci_hcd: invalid port number 96 [ 74.849815][ T6187] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 75.024375][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 75.024387][ T29] audit: type=1326 audit(2000000042.260:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.054154][ T29] audit: type=1326 audit(2000000042.260:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.080332][ T29] audit: type=1326 audit(2000000042.310:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.103755][ T29] audit: type=1326 audit(2000000042.310:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.127216][ T29] audit: type=1326 audit(2000000042.310:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.150642][ T29] audit: type=1326 audit(2000000042.310:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.182682][ T29] audit: type=1326 audit(2000000042.410:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.220460][ T29] audit: type=1326 audit(2000000042.410:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.243941][ T29] audit: type=1326 audit(2000000042.410:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.267519][ T29] audit: type=1326 audit(2000000042.410:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e393ce929 code=0x7ffc0000 [ 75.387591][ T6211] syz_tun: entered promiscuous mode [ 75.392910][ T6211] vlan2: entered promiscuous mode [ 75.475936][ T6212] lo speed is unknown, defaulting to 1000 [ 75.482230][ T6212] lo speed is unknown, defaulting to 1000 [ 75.541183][ T6212] chnl_net:caif_netlink_parms(): no params data found [ 75.590750][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.597945][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.616455][ T6212] bridge_slave_0: entered allmulticast mode [ 75.625995][ T6212] bridge_slave_0: entered promiscuous mode [ 75.641266][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.648415][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.658646][ T6212] bridge_slave_1: entered allmulticast mode [ 75.665325][ T6212] bridge_slave_1: entered promiscuous mode [ 75.687640][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.701502][ T6234] netlink: 332 bytes leftover after parsing attributes in process `syz.0.922'. [ 75.710160][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.714557][ T6234] netlink: 'syz.0.922': attribute type 9 has an invalid length. [ 75.728024][ T6234] netlink: 108 bytes leftover after parsing attributes in process `syz.0.922'. [ 75.737645][ T6234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.922'. [ 75.756257][ T6212] team0: Port device team_slave_0 added [ 75.782884][ T6212] team0: Port device team_slave_1 added [ 75.815147][ T6241] loop0: detected capacity change from 0 to 128 [ 75.830672][ T6241] EXT4-fs: Ignoring removed nobh option [ 75.837402][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.844434][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.845657][ T6241] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.870561][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.888222][ T6241] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.916209][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.923276][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.949320][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.998816][ T6212] hsr_slave_0: entered promiscuous mode [ 76.005102][ T6212] hsr_slave_1: entered promiscuous mode [ 76.010988][ T6212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.018710][ T6212] Cannot create hsr debugfs directory [ 76.067214][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.191786][ T6212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.231925][ T6212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.241145][ T6212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.275919][ T6212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.294452][ T6281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.389968][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.413682][ T6212] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.430737][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.437848][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.451826][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.458955][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.476577][ T6308] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.512904][ T6306] loop1: detected capacity change from 0 to 512 [ 76.535835][ T6308] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.552642][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.611733][ T6306] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.949: Parent and EA inode have the same ino 15 [ 76.635758][ T6308] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.652370][ T6306] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.949: Parent and EA inode have the same ino 15 [ 76.669423][ T6306] EXT4-fs (loop1): 1 orphan inode deleted [ 76.683021][ T6306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.712614][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.724070][ T6308] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.743342][ T6212] veth0_vlan: entered promiscuous mode [ 76.751872][ T6212] veth1_vlan: entered promiscuous mode [ 76.768663][ T6212] veth0_macvtap: entered promiscuous mode [ 76.779383][ T6212] veth1_macvtap: entered promiscuous mode [ 76.791731][ T6308] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.813487][ T6308] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.826892][ T6308] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.836498][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.849019][ T6308] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.865142][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.882446][ T6212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.891282][ T6212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.900093][ T6212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.908879][ T6212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.255531][ T6347] syzkaller1: entered promiscuous mode [ 77.261163][ T6347] syzkaller1: entered allmulticast mode [ 77.569809][ T6362] xt_cluster: node mask cannot exceed total number of nodes [ 77.570285][ T37] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.695476][ T37] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.736136][ T37] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.774795][ T6369] lo speed is unknown, defaulting to 1000 [ 77.780875][ T6369] lo speed is unknown, defaulting to 1000 [ 77.788165][ T37] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.855774][ T6384] loop5: detected capacity change from 0 to 1024 [ 77.859653][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 77.865625][ T6384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.888672][ T6384] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 77.901056][ T6384] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.901056][ T6384] [ 77.910759][ T6384] EXT4-fs (loop5): Total free blocks count 0 [ 77.916767][ T6384] EXT4-fs (loop5): Free/Dirty block details [ 77.922680][ T6384] EXT4-fs (loop5): free_blocks=0 [ 77.927658][ T6384] EXT4-fs (loop5): dirty_blocks=0 [ 77.932686][ T6384] EXT4-fs (loop5): Block reservation details [ 77.938702][ T6384] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 77.952424][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.959764][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.967357][ T6369] bridge_slave_0: entered allmulticast mode [ 77.971630][ T6212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.973839][ T6369] bridge_slave_0: entered promiscuous mode [ 77.989368][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.996527][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.004010][ T6369] bridge_slave_1: entered allmulticast mode [ 78.010755][ T6369] bridge_slave_1: entered promiscuous mode [ 78.027344][ T6391] loop5: detected capacity change from 0 to 512 [ 78.034253][ T6391] EXT4-fs: inline encryption not supported [ 78.045008][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.052277][ T6391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.055757][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.066760][ T6391] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.095633][ T6391] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.967: corrupted inode contents [ 78.107700][ T6391] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.967: mark_inode_dirty error [ 78.108859][ T6369] team0: Port device team_slave_0 added [ 78.120772][ T6391] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.967: corrupted inode contents [ 78.125641][ T6369] team0: Port device team_slave_1 added [ 78.147742][ T6391] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.967: mark_inode_dirty error [ 78.168410][ T37] bridge_slave_1: left allmulticast mode [ 78.174192][ T37] bridge_slave_1: left promiscuous mode [ 78.179958][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.189256][ T37] bridge_slave_0: left allmulticast mode [ 78.195132][ T37] bridge_slave_0: left promiscuous mode [ 78.200891][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.210355][ T6212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.232158][ T6395] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.968'. [ 78.241482][ T6395] net_ratelimit: 50 callbacks suppressed [ 78.241494][ T6395] netlink: zone id is out of range [ 78.252512][ T6395] netlink: zone id is out of range [ 78.257712][ T6395] netlink: zone id is out of range [ 78.262911][ T6395] netlink: del zone limit has 8 unknown bytes [ 78.276908][ T37] bond2 (unregistering): (slave gretap1): Releasing active interface [ 78.286060][ T37] gretap1 (unregistering): left allmulticast mode [ 78.312532][ T6399] netlink: 404 bytes leftover after parsing attributes in process `syz.5.970'. [ 78.336807][ T37] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 78.345620][ T37] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 78.354652][ T37] bridge1 (unregistering): left promiscuous mode [ 78.361021][ T37] bridge1 (unregistering): left allmulticast mode [ 78.446020][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.455858][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.466308][ T37] bond0 (unregistering): Released all slaves [ 78.475021][ T37] bond1 (unregistering): Released all slaves [ 78.483584][ T37] bond2 (unregistering): Released all slaves [ 78.492853][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.499867][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.525940][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.537346][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.544337][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.570276][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.616117][ T37] hsr_slave_0: left promiscuous mode [ 78.621880][ T37] hsr_slave_1: left promiscuous mode [ 78.627550][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.635077][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.644425][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.651830][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.664708][ T37] veth1_macvtap: left promiscuous mode [ 78.670353][ T37] veth0_macvtap: left promiscuous mode [ 78.675971][ T37] veth1_vlan: left promiscuous mode [ 78.746201][ T37] team0 (unregistering): Port device team_slave_1 removed [ 78.756972][ T37] team0 (unregistering): Port device team_slave_0 removed [ 78.794333][ T6369] hsr_slave_0: entered promiscuous mode [ 78.800515][ T6369] hsr_slave_1: entered promiscuous mode [ 78.806695][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.814713][ T6369] Cannot create hsr debugfs directory [ 78.906094][ T6412] ref_ctr increment failed for inode: 0x41a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881045d7300 [ 78.919253][ T6411] uprobe: syz.3.976:6411 failed to unregister, leaking uprobe [ 78.932810][ T6414] loop5: detected capacity change from 0 to 512 [ 78.968810][ T6414] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.975: Parent and EA inode have the same ino 15 [ 78.987024][ T6414] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.975: Parent and EA inode have the same ino 15 [ 79.000206][ T6414] EXT4-fs (loop5): 1 orphan inode deleted [ 79.008003][ T6414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.038247][ T6212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.078304][ T6421] serio: Serial port ttyS3 [ 79.178460][ T6369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.187173][ T6369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.195914][ T6369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.205602][ T6369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.240048][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.251433][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.260343][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.267555][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.278529][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.285597][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.347137][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.419828][ T6369] veth0_vlan: entered promiscuous mode [ 79.427549][ T6369] veth1_vlan: entered promiscuous mode [ 79.444648][ T6369] veth0_macvtap: entered promiscuous mode [ 79.451883][ T6369] veth1_macvtap: entered promiscuous mode [ 79.464951][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.475996][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.485192][ T6369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.494062][ T6369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.502775][ T6369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.511545][ T6369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.842040][ T6469] xt_cluster: node mask cannot exceed total number of nodes [ 79.857854][ T6472] serio: Serial port ttyS3 [ 79.865608][ T6473] loop0: detected capacity change from 0 to 1024 [ 79.876555][ T6473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.897617][ T6473] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 79.910120][ T6473] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.910120][ T6473] [ 79.919824][ T6473] EXT4-fs (loop0): Total free blocks count 0 [ 79.925838][ T6473] EXT4-fs (loop0): Free/Dirty block details [ 79.931759][ T6473] EXT4-fs (loop0): free_blocks=0 [ 79.936717][ T6473] EXT4-fs (loop0): dirty_blocks=0 [ 79.941809][ T6473] EXT4-fs (loop0): Block reservation details [ 79.947850][ T6473] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 79.971741][ T6481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.984220][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.031693][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.999'. [ 80.079857][ T6499] netlink: 'syz.3.1003': attribute type 27 has an invalid length. [ 80.090552][ T6499] wg2: left promiscuous mode [ 80.095330][ T6499] wg2: left allmulticast mode [ 80.102124][ T6499] veth0_vlan: left allmulticast mode [ 80.108265][ T6499] macsec0: left promiscuous mode [ 80.132180][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.141145][ T6499] bridge0: port 3(dummy0) entered blocking state [ 80.147564][ T6499] bridge0: port 3(dummy0) entered forwarding state [ 80.156401][ T6499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.172460][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 80.172476][ T29] audit: type=1326 audit(2000000047.410:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.236058][ T6509] serio: Serial port ttyS3 [ 80.240744][ T29] audit: type=1326 audit(2000000047.410:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.264282][ T29] audit: type=1326 audit(2000000047.410:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.266121][ T6512] loop0: detected capacity change from 0 to 256 [ 80.287779][ T29] audit: type=1326 audit(2000000047.410:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.287816][ T29] audit: type=1326 audit(2000000047.410:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.287845][ T29] audit: type=1326 audit(2000000047.410:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.364455][ T29] audit: type=1326 audit(2000000047.410:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.370250][ T6513] loop1: detected capacity change from 0 to 1024 [ 80.387773][ T29] audit: type=1326 audit(2000000047.410:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.387824][ T29] audit: type=1326 audit(2000000047.410:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.440994][ T29] audit: type=1326 audit(2000000047.410:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae76be929 code=0x7ffc0000 [ 80.461269][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.502550][ T6513] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 80.514989][ T6513] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.514989][ T6513] [ 80.524744][ T6513] EXT4-fs (loop1): Total free blocks count 0 [ 80.530760][ T6513] EXT4-fs (loop1): Free/Dirty block details [ 80.536722][ T6513] EXT4-fs (loop1): free_blocks=0 [ 80.541787][ T6513] EXT4-fs (loop1): dirty_blocks=0 [ 80.546889][ T6513] EXT4-fs (loop1): Block reservation details [ 80.546902][ T6513] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 80.789507][ T6369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.219128][ T6546] tipc: Started in network mode [ 81.224247][ T6546] tipc: Node identity 8e796cf025c8, cluster identity 4711 [ 81.231487][ T6546] tipc: Enabled bearer , priority 0 [ 81.240891][ T6545] tipc: Resetting bearer [ 81.256437][ T6545] tipc: Disabling bearer [ 81.386403][ T6550] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.480253][ T6550] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.577887][ T6550] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.620799][ T6560] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.644629][ T6550] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.673580][ T6564] xt_hashlimit: size too large, truncated to 1048576 [ 81.681464][ T6560] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.823842][ T6550] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.847245][ T6560] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.870487][ T6550] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.890770][ T6550] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.921889][ T6560] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.937217][ T6550] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.947347][ T6573] hub 6-0:1.0: USB hub found [ 81.954007][ T6573] hub 6-0:1.0: 8 ports detected [ 82.003258][ T6560] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.016277][ T6560] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.029229][ T6560] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.041059][ T6560] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.051204][ T6577] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.124580][ T6583] netlink: 'syz.1.1036': attribute type 12 has an invalid length. [ 82.156073][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 82.167075][ T6589] loop5: detected capacity change from 0 to 1024 [ 82.187684][ T6589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.192811][ T6585] bond2: entered promiscuous mode [ 82.199400][ T6585] bond2: entered allmulticast mode [ 82.206065][ T6585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.206137][ T6589] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.228282][ T6589] JBD2: no valid journal superblock found [ 82.234136][ T6589] EXT4-fs (loop5): Could not load journal inode [ 82.381577][ T6605] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 82.388190][ T6601] hub 6-0:1.0: USB hub found [ 82.397186][ T6601] hub 6-0:1.0: 8 ports detected [ 83.305601][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1048'. [ 83.359216][ T6619] lo speed is unknown, defaulting to 1000 [ 83.369002][ T6617] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.394395][ T6619] lo speed is unknown, defaulting to 1000 [ 83.432826][ T6617] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.496954][ T6617] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.533511][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1057'. [ 83.545488][ T6625] lo speed is unknown, defaulting to 1000 [ 83.551635][ T6625] lo speed is unknown, defaulting to 1000 [ 83.600891][ T6617] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.673347][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 83.968322][ T6633] capability: warning: `syz.3.1059' uses 32-bit capabilities (legacy support in use) [ 84.082401][ T6659] loop3: detected capacity change from 0 to 1024 [ 84.126755][ T6660] lo speed is unknown, defaulting to 1000 [ 84.133009][ T6660] lo speed is unknown, defaulting to 1000 [ 84.147220][ T6659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.248892][ T6659] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 84.283028][ T6658] EXT4-fs (loop3): pa ffff888106e032a0: logic 48, phys. 177, len 21 [ 84.291221][ T6658] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 84.354324][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.642037][ T6671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.721891][ T6675] netlink: 'syz.3.1071': attribute type 12 has an invalid length. [ 84.755020][ T6671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.805248][ T6671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.896353][ T6671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.961828][ T6671] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.978487][ T6671] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.989861][ T6671] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006184][ T6671] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069809][ T6685] loop0: detected capacity change from 0 to 8192 [ 85.272811][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 85.272823][ T29] audit: type=1400 audit(2000000052.500:1939): avc: denied { append } for pid=6692 comm="syz.1.1080" name="event3" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.379003][ T29] audit: type=1326 audit(2000000052.610:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.436638][ T29] audit: type=1326 audit(2000000052.610:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.460465][ T29] audit: type=1326 audit(2000000052.610:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.484334][ T29] audit: type=1326 audit(2000000052.610:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.507740][ T29] audit: type=1326 audit(2000000052.610:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.531282][ T29] audit: type=1326 audit(2000000052.610:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.554865][ T29] audit: type=1326 audit(2000000052.630:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.578443][ T29] audit: type=1326 audit(2000000052.630:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.4.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb13e929 code=0x7ffc0000 [ 85.602094][ T29] audit: type=1400 audit(2000000052.650:1948): avc: denied { search } for pid=6701 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.658692][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1084'. [ 85.699437][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'. [ 85.846307][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 85.855353][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 85.866105][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 85.883181][ T6754] pim6reg1: entered promiscuous mode [ 85.888632][ T6754] pim6reg1: entered allmulticast mode [ 85.973564][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.981663][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.389209][ T6815] loop0: detected capacity change from 0 to 512 [ 86.405421][ T6815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.418393][ T6815] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.452303][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.551101][ T6617] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.581441][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1117'. [ 86.601954][ T6617] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.633089][ T6617] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.660033][ T6617] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.678818][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 86.742044][ T4593] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.750154][ T4593] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.827122][ T6882] pim6reg1: entered promiscuous mode [ 86.832508][ T6882] pim6reg1: entered allmulticast mode [ 87.140551][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.147856][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.238506][ T6925] xt_hashlimit: size too large, truncated to 1048576 [ 87.257607][ T6900] bridge_slave_0: left allmulticast mode [ 87.263285][ T6900] bridge_slave_0: left promiscuous mode [ 87.268995][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.344732][ T6900] bridge_slave_1: left allmulticast mode [ 87.350438][ T6900] bridge_slave_1: left promiscuous mode [ 87.356134][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.385355][ T6900] bond0: (slave bond_slave_0): Releasing backup interface [ 87.409336][ T6900] bond0: (slave bond_slave_1): Releasing backup interface [ 87.421505][ T6900] team0: Port device team_slave_0 removed [ 87.435329][ T6900] team0: Port device team_slave_1 removed [ 87.442897][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.460583][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.473987][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.506526][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.643842][ T6900] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.652296][ T6900] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.660694][ T6900] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.669178][ T6900] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.789590][ T6943] 9pnet: p9_errstr2errno: server reported unknown error [ 87.869913][ T6946] syz_tun: entered allmulticast mode [ 87.901828][ T6945] syz_tun: left allmulticast mode [ 88.086044][ T6964] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 88.099291][ T6964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.118861][ T6964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.132284][ T6964] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 88.144253][ T6964] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 88.169698][ T6971] ip6erspan0: entered promiscuous mode [ 88.177301][ T6971] bond2: (slave ip6erspan0): making interface the new active one [ 88.185430][ T6971] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 88.218126][ T6977] @ÿ: renamed from bond_slave_0 [ 88.265335][ T6985] netlink: '+}[@': attribute type 12 has an invalid length. [ 88.303298][ T6989] netlink: 'syz.0.1152': attribute type 27 has an invalid length. [ 88.315725][ T6989] wg2: left promiscuous mode [ 88.320430][ T6989] wg2: left allmulticast mode [ 88.329707][ T6989] bond2: left promiscuous mode [ 88.334678][ T6989] bond2: left allmulticast mode [ 88.359144][ T6989] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.368702][ T6989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.384627][ T6907] lo speed is unknown, defaulting to 1000 [ 88.390389][ T6907] syz2: Port: 1 Link ACTIVE [ 88.439853][ T7004] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1159'. [ 88.591323][ T7021] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1166'. [ 88.628806][ T7023] loop5: detected capacity change from 0 to 1024 [ 88.649423][ T7023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.672650][ T7031] loop4: detected capacity change from 0 to 512 [ 88.677302][ T7023] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 88.682021][ T7031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1170: bg 0: block 5: invalid block bitmap [ 88.702250][ T7022] EXT4-fs (loop5): pa ffff888106e6c770: logic 48, phys. 177, len 21 [ 88.705341][ T7031] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 88.712542][ T7022] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 88.732490][ T7031] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1170: invalid indirect mapped block 3 (level 2) [ 88.747029][ T7031] EXT4-fs (loop4): 2 truncates cleaned up [ 88.761014][ T7031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.785611][ T6212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.826897][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.991589][ T7053] dummy0: entered promiscuous mode [ 88.997404][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 89.025267][ T7053] bond0: (slave dummy0): Releasing backup interface [ 89.037434][ T7053] dummy0 (unregistering): left allmulticast mode [ 89.044614][ T7053] dummy0 (unregistering): left promiscuous mode [ 89.055985][ T7056] pim6reg1: entered promiscuous mode [ 89.061292][ T7056] pim6reg1: entered allmulticast mode [ 89.341635][ T7084] loop4: detected capacity change from 0 to 1024 [ 89.366049][ T7084] EXT4-fs: Ignoring removed nobh option [ 89.371864][ T7084] EXT4-fs: Ignoring removed nobh option [ 89.399008][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.426027][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.457863][ T7084] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 89.534718][ T7084] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.1185: inode #4294967295: comm syz.4.1185: iget: illegal inode # [ 89.582386][ T7084] EXT4-fs (loop4): no journal found [ 89.587662][ T7084] EXT4-fs (loop4): can't get journal size [ 89.651852][ T7084] EXT4-fs (loop4): failed to initialize system zone (-22) [ 89.673028][ T7084] EXT4-fs (loop4): mount failed [ 90.165013][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 90.204902][ T7106] xt_hashlimit: size too large, truncated to 1048576 [ 90.458346][ T7116] netlink: 'syz.5.1203': attribute type 27 has an invalid length. [ 90.467238][ T7114] loop4: detected capacity change from 0 to 8192 [ 90.480591][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.488451][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.497285][ T7116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.523886][ T7114] loop4: p3 [ 90.534088][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 90.534101][ T29] audit: type=1400 audit(2000000057.760:2068): avc: denied { write } for pid=7113 comm="syz.4.1202" name="loop4p3" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.563198][ T29] audit: type=1400 audit(2000000057.760:2069): avc: denied { open } for pid=7113 comm="syz.4.1202" path="/dev/loop4p3" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.586424][ T29] audit: type=1400 audit(2000000057.760:2070): avc: denied { ioctl } for pid=7113 comm="syz.4.1202" path="/dev/loop4p3" dev="devtmpfs" ino=635 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.621035][ T7120] loop3: detected capacity change from 0 to 164 [ 90.640019][ T7120] bio_check_eod: 98 callbacks suppressed [ 90.640071][ T7120] syz.3.1205: attempt to access beyond end of device [ 90.640071][ T7120] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.661630][ T7120] syz.3.1205: attempt to access beyond end of device [ 90.661630][ T7120] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.726491][ T29] audit: type=1400 audit(2000000057.960:2071): avc: denied { create } for pid=7129 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.758513][ T7130] IPv6: Can't replace route, no match found [ 90.766314][ T7128] lo speed is unknown, defaulting to 1000 [ 90.782443][ T7128] lo speed is unknown, defaulting to 1000 [ 91.175409][ T7157] bond1: entered promiscuous mode [ 91.180496][ T7157] bond1: entered allmulticast mode [ 91.187885][ T7157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.212062][ T7157] bond1 (unregistering): Released all slaves [ 91.325688][ T7160] syzkaller0: entered promiscuous mode [ 91.331262][ T7160] syzkaller0: entered allmulticast mode [ 91.438495][ T29] audit: type=1400 audit(2000000058.670:2072): avc: denied { unmount } for pid=6369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 91.513621][ T29] audit: type=1326 audit(2000000058.740:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 91.537834][ T29] audit: type=1326 audit(2000000058.740:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 91.593137][ T7169] lo speed is unknown, defaulting to 1000 [ 91.603968][ T7169] lo speed is unknown, defaulting to 1000 [ 91.694625][ T29] audit: type=1326 audit(2000000058.740:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 91.718882][ T29] audit: type=1326 audit(2000000058.750:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 91.742603][ T29] audit: type=1326 audit(2000000058.750:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87560ae929 code=0x7ffc0000 [ 91.810172][ T7180] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1231'. [ 91.924673][ T7193] loop4: detected capacity change from 0 to 256 [ 91.931379][ T7193] msdos: Bad value for 'gid' [ 91.936119][ T7193] msdos: Bad value for 'gid' [ 92.029493][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1235'. [ 92.139514][ T7222] pim6reg1: entered promiscuous mode [ 92.144970][ T7222] pim6reg1: entered allmulticast mode [ 92.202361][ T7228] loop0: detected capacity change from 0 to 512 [ 92.216014][ T7228] EXT4-fs: Ignoring removed i_version option [ 92.223385][ T7228] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.238080][ T7228] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1249: bg 0: block 131: padding at end of block bitmap is not set [ 92.255395][ T7228] EXT4-fs (loop0): Remounting filesystem read-only [ 92.262034][ T7228] EXT4-fs (loop0): 1 truncate cleaned up [ 92.268302][ T7228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.293085][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.314608][ T7241] loop0: detected capacity change from 0 to 512 [ 92.321234][ T7241] EXT4-fs: inline encryption not supported [ 92.327417][ T7241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.337605][ T7243] netlink: 'syz.1.1256': attribute type 13 has an invalid length. [ 92.454545][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.461819][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.512698][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.544926][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.695665][ T7243] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.704275][ T7243] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.712658][ T7243] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.721593][ T7243] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.033906][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 93.045909][ T7275] bond0: (slave bond_slave_0): Releasing backup interface [ 93.203595][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 93.665072][ T7304] loop0: detected capacity change from 0 to 1024 [ 93.672342][ T7304] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.683499][ T7304] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 93.691927][ T7304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.699605][ T7304] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.1281: Invalid inode table block 0 in block_group 0 [ 93.714178][ T7304] EXT4-fs (loop0): Remounting filesystem read-only [ 93.720892][ T7304] EXT4-fs (loop0): 1 truncate cleaned up [ 93.727779][ T7304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.760122][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.801227][ T7307] loop4: detected capacity change from 0 to 512 [ 93.808627][ T7307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.829399][ T7307] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1283: invalid block [ 93.854134][ T7307] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1283: invalid indirect mapped block 4294967295 (level 1) [ 93.869309][ T7307] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1283: invalid indirect mapped block 4294967295 (level 1) [ 93.883708][ T7307] EXT4-fs (loop4): 2 truncates cleaned up [ 93.890979][ T7307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.908270][ T7307] EXT4-fs (loop4): shut down requested (2) [ 93.929417][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.974989][ T7317] ip6gre1: entered allmulticast mode [ 94.397706][ T7330] macvlan1: entered promiscuous mode [ 94.403647][ T7330] ipvlan0: entered promiscuous mode [ 94.409415][ T7330] ipvlan0: left promiscuous mode [ 94.415178][ T7330] macvlan1: left promiscuous mode [ 94.465357][ T7335] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1294'. [ 94.474886][ T7335] netlink: zone id is out of range [ 94.476471][ T7333] loop5: detected capacity change from 0 to 2048 [ 94.480081][ T7335] netlink: zone id is out of range [ 94.480090][ T7335] netlink: zone id is out of range [ 94.480097][ T7335] netlink: zone id is out of range [ 94.497367][ T7333] EXT4-fs (loop5): failed to initialize system zone (-117) [ 94.501918][ T7335] netlink: zone id is out of range [ 94.501928][ T7335] netlink: zone id is out of range [ 94.502031][ T7335] netlink: zone id is out of range [ 94.510197][ T7333] EXT4-fs (loop5): mount failed [ 94.515626][ T7335] netlink: del zone limit has 8 unknown bytes [ 94.888724][ T7354] loop4: detected capacity change from 0 to 2048 [ 94.905234][ T7354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.920636][ T7354] Invalid ELF header magic: != ELF [ 94.964583][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.990854][ T7368] loop4: detected capacity change from 0 to 1024 [ 94.997745][ T7368] EXT4-fs: Ignoring removed bh option [ 95.003203][ T7368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.148897][ T7373] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 95.163024][ T7373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.199788][ T7373] bond3 (unregistering): Released all slaves [ 95.267726][ T7377] bridge: RTM_NEWNEIGH with invalid ether address [ 95.301995][ T7379] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.341830][ T7368] ================================================================== [ 95.350053][ T7368] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 95.357199][ T7368] [ 95.359538][ T7368] write to 0xffff888106f79c9c of 4 bytes by task 7371 on cpu 1: [ 95.367191][ T7368] xas_set_mark+0x12b/0x140 [ 95.371722][ T7368] __folio_start_writeback+0x1dd/0x440 [ 95.377203][ T7368] ext4_bio_write_folio+0x5ad/0x9f0 [ 95.382432][ T7368] mpage_submit_folio+0xe4/0x170 [ 95.387403][ T7368] mpage_process_page_bufs+0x39b/0x4a0 [ 95.392907][ T7368] mpage_prepare_extent_to_map+0x741/0xaa0 [ 95.398765][ T7368] ext4_do_writepages+0xa1a/0x21c0 [ 95.403913][ T7368] ext4_writepages+0x176/0x300 [ 95.408710][ T7368] do_writepages+0x1c6/0x310 [ 95.413329][ T7368] file_write_and_wait_range+0x156/0x2c0 [ 95.418997][ T7368] generic_buffers_fsync_noflush+0x45/0x120 [ 95.424913][ T7368] ext4_sync_file+0x1ab/0x690 [ 95.429604][ T7368] vfs_fsync_range+0x10d/0x130 [ 95.434396][ T7368] ext4_buffered_write_iter+0x34f/0x3c0 [ 95.439953][ T7368] ext4_file_write_iter+0x383/0xf00 [ 95.445162][ T7368] iter_file_splice_write+0x5f2/0x970 [ 95.450558][ T7368] direct_splice_actor+0x156/0x2a0 [ 95.455688][ T7368] splice_direct_to_actor+0x312/0x680 [ 95.461077][ T7368] do_splice_direct+0xda/0x150 [ 95.465857][ T7368] do_sendfile+0x380/0x650 [ 95.470288][ T7368] __x64_sys_sendfile64+0x105/0x150 [ 95.475503][ T7368] x64_sys_call+0xb39/0x2fb0 [ 95.480102][ T7368] do_syscall_64+0xd2/0x200 [ 95.484613][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.490516][ T7368] [ 95.492852][ T7368] read to 0xffff888106f79c9c of 4 bytes by task 7368 on cpu 0: [ 95.500407][ T7368] xas_find_marked+0x5dc/0x620 [ 95.505182][ T7368] find_get_entry+0x5d/0x380 [ 95.509789][ T7368] filemap_get_folios_tag+0x92/0x210 [ 95.515095][ T7368] mpage_prepare_extent_to_map+0x320/0xaa0 [ 95.520928][ T7368] ext4_do_writepages+0xa1a/0x21c0 [ 95.526055][ T7368] ext4_writepages+0x176/0x300 [ 95.530838][ T7368] do_writepages+0x1c6/0x310 [ 95.535439][ T7368] file_write_and_wait_range+0x156/0x2c0 [ 95.541088][ T7368] generic_buffers_fsync_noflush+0x45/0x120 [ 95.547003][ T7368] ext4_sync_file+0x1ab/0x690 [ 95.551692][ T7368] vfs_fsync_range+0x10d/0x130 [ 95.556463][ T7368] ext4_buffered_write_iter+0x34f/0x3c0 [ 95.562024][ T7368] ext4_file_write_iter+0x383/0xf00 [ 95.567262][ T7368] iter_file_splice_write+0x5f2/0x970 [ 95.572666][ T7368] direct_splice_actor+0x156/0x2a0 [ 95.577804][ T7368] splice_direct_to_actor+0x312/0x680 [ 95.583199][ T7368] do_splice_direct+0xda/0x150 [ 95.588009][ T7368] do_sendfile+0x380/0x650 [ 95.592444][ T7368] __x64_sys_sendfile64+0x105/0x150 [ 95.597671][ T7368] x64_sys_call+0xb39/0x2fb0 [ 95.602277][ T7368] do_syscall_64+0xd2/0x200 [ 95.606801][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.612704][ T7368] [ 95.615037][ T7368] value changed: 0x0a000021 -> 0x04000021 [ 95.620768][ T7368] [ 95.623095][ T7368] Reported by Kernel Concurrency Sanitizer on: [ 95.629253][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.4.1305 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 95.641675][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.651742][ T7368] ================================================================== [ 95.776305][ T7382] pim6reg1: entered promiscuous mode [ 95.781751][ T7382] pim6reg1: entered allmulticast mode