last executing test programs: 5m38.984160776s ago: executing program 32 (id=560): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00"], 0x88}, 0x1, 0x7}, 0x0) 5m38.954388428s ago: executing program 33 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 5m38.497111606s ago: executing program 34 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 5m38.484046727s ago: executing program 35 (id=565): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) 5m34.919252166s ago: executing program 36 (id=579): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) set_mempolicy(0x3, &(0x7f0000000000)=0xffffffffffffffff, 0xc2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 4m54.155264788s ago: executing program 37 (id=1950): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e28bd71000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 1m44.998698375s ago: executing program 38 (id=8571): creat(&(0x7f0000000080)='./file0\x00', 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)) 1m39.967653282s ago: executing program 2 (id=8700): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x0) syz_clone3(0x0, 0x0) 1m39.902599118s ago: executing program 2 (id=8704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m39.902459718s ago: executing program 2 (id=8705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 1m39.886666389s ago: executing program 2 (id=8707): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m39.823718304s ago: executing program 2 (id=8709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:utempter_exec_t:s0\x00', 0x25, 0x1) 1m38.180377038s ago: executing program 2 (id=8776): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x220501, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 1m38.156818089s ago: executing program 39 (id=8776): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x220501, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 1m10.561295427s ago: executing program 6 (id=9564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) 1m10.488361984s ago: executing program 6 (id=9568): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m9.78808358s ago: executing program 6 (id=9585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xf}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1m9.700868117s ago: executing program 6 (id=9577): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m9.653924831s ago: executing program 6 (id=9580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a000100"], 0x118}}, 0x0) 1m9.364437955s ago: executing program 5 (id=9597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 1m9.260897223s ago: executing program 5 (id=9588): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = socket$isdn(0x22, 0x3, 0x1) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1m9.142944093s ago: executing program 5 (id=9590): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1m9.094906856s ago: executing program 6 (id=9591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m9.077435618s ago: executing program 40 (id=9591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m9.019843373s ago: executing program 5 (id=9594): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m8.967964397s ago: executing program 5 (id=9598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m8.285551572s ago: executing program 5 (id=9606): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m8.285231222s ago: executing program 41 (id=9606): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 33.865998213s ago: executing program 0 (id=10728): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 33.42072976s ago: executing program 0 (id=10742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) 33.279181711s ago: executing program 0 (id=10744): r0 = syz_io_uring_setup(0x496, &(0x7f0000000180)={0x0, 0x20004885, 0x100, 0x4, 0x9a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 33.210709517s ago: executing program 0 (id=10749): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 33.0464474s ago: executing program 0 (id=10757): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) 32.790481261s ago: executing program 0 (id=10760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 32.790291091s ago: executing program 42 (id=10760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 10.143173018s ago: executing program 4 (id=11717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 10.108615951s ago: executing program 4 (id=11718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 10.046218836s ago: executing program 4 (id=11733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b00090000000014"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) 10.000685679s ago: executing program 4 (id=11725): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 9.818940414s ago: executing program 4 (id=11727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unshare(0x24040000) unshare(0x2c020400) 9.095200253s ago: executing program 4 (id=11746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) unshare(0x22020600) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 9.052746756s ago: executing program 43 (id=11746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) unshare(0x22020600) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.934879904s ago: executing program 1 (id=11979): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.896004537s ago: executing program 1 (id=11981): r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000100)=0x7, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) 1.36587256s ago: executing program 1 (id=11985): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 821.499174ms ago: executing program 3 (id=12020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 804.887666ms ago: executing program 7 (id=12021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 781.549347ms ago: executing program 3 (id=12022): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b18"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 678.774676ms ago: executing program 7 (id=12024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 676.493766ms ago: executing program 9 (id=12025): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x82) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 632.344199ms ago: executing program 7 (id=12036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getxattr(0x0, &(0x7f0000000100)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 575.018534ms ago: executing program 7 (id=12027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) 515.395799ms ago: executing program 1 (id=12028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 468.524032ms ago: executing program 3 (id=12029): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x303}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x9) 454.455854ms ago: executing program 8 (id=12030): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setresuid(0xee01, 0xee01, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0xbf0c876882f97c09) 410.347587ms ago: executing program 3 (id=12031): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 408.966347ms ago: executing program 1 (id=12032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0xec0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 359.459431ms ago: executing program 8 (id=12033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x4a9, &(0x7f0000001440)="$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") 358.933221ms ago: executing program 1 (id=12034): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) socket(0x25, 0x1, 0x0) r0 = syz_io_uring_setup(0x23e7, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 332.529923ms ago: executing program 8 (id=12035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0x7fffffff) 270.819719ms ago: executing program 8 (id=12037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 270.284959ms ago: executing program 9 (id=12038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 231.830192ms ago: executing program 9 (id=12039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 231.234062ms ago: executing program 9 (id=12040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) cachestat(r2, &(0x7f0000000840)={0x8, 0x80}, &(0x7f0000000800), 0x0) 193.836195ms ago: executing program 9 (id=12041): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b18"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 193.086335ms ago: executing program 3 (id=12042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 174.269266ms ago: executing program 7 (id=12043): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 47.650187ms ago: executing program 8 (id=12044): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x4) close(r2) 46.825796ms ago: executing program 7 (id=12045): r0 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000010c0)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 46.563797ms ago: executing program 3 (id=12046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0xec0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 14.605349ms ago: executing program 8 (id=12047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc88, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) setreuid(0x0, 0xee00) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000380)='/dev/vcsu#\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 0s ago: executing program 9 (id=12048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x80, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) kernel console output (not intermixed with test programs): -000000000000. [ 333.429937][T27607] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 333.448583][T27634] syzkaller1: entered promiscuous mode [ 333.454376][T27634] syzkaller1: entered allmulticast mode [ 333.501059][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.561892][T27647] loop9: detected capacity change from 0 to 1024 [ 333.576591][T27647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.601115][T27644] loop0: detected capacity change from 0 to 8192 [ 333.702918][T27655] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 333.770903][T27647] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 333.866528][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.886618][T27671] syzkaller1: entered promiscuous mode [ 333.892194][T27671] syzkaller1: entered allmulticast mode [ 334.082380][T27684] loop9: detected capacity change from 0 to 512 [ 334.092430][T27684] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.9815: casefold flag without casefold feature [ 334.107154][T27684] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.9815: couldn't read orphan inode 15 (err -117) [ 334.119846][T27684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.154444][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.247957][T27696] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 334.258527][T27694] loop9: detected capacity change from 0 to 2048 [ 334.290565][T27694] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.9818: bad orphan inode 61 [ 334.301467][T27694] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.319196][T27694] EXT4-fs (loop9): shut down requested (2) [ 334.325736][T27694] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 334.335425][T27694] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 334.383161][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.425604][T27707] loop4: detected capacity change from 0 to 1024 [ 334.434028][T27709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9836'. [ 334.461774][T27707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.638681][T27707] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 334.701595][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.740835][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9845'. [ 334.775033][T27736] syzkaller1: entered promiscuous mode [ 334.780762][T27736] syzkaller1: entered allmulticast mode [ 334.935834][T27748] syzkaller0: entered promiscuous mode [ 334.941428][T27748] syzkaller0: entered allmulticast mode [ 334.949267][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 334.958364][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 334.967519][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 335.000618][T27762] loop1: detected capacity change from 0 to 2048 [ 335.014103][T27766] loop9: detected capacity change from 0 to 1024 [ 335.021296][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 335.030433][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 335.039685][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 335.044963][T27762] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.9850: bad orphan inode 61 [ 335.061224][T27762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.079728][T27766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.096175][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 335.097640][T27762] EXT4-fs (loop1): shut down requested (2) [ 335.105414][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 335.126220][T27762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 335.135525][T27762] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 335.136529][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.164887][T27052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.199312][T27778] loop9: detected capacity change from 0 to 1024 [ 335.215452][T27778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 335.233009][T27778] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.9864: lblock 0 mapped to illegal pblock 0 (length 4) [ 335.250030][T27778] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.9864: lblock 0 mapped to illegal pblock 0 (length 1) [ 335.261211][T27788] vxcan1: entered allmulticast mode [ 335.269711][T27778] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 335.282162][T27778] EXT4-fs (loop9): This should not happen!! Data will be lost [ 335.282162][T27778] [ 335.300194][T27778] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.9864: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 335.336939][T27778] EXT4-fs error (device loop9) in ext4_setattr:6071: Corrupt filesystem [ 335.385235][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.396165][T27793] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 335.526375][T27802] loop4: detected capacity change from 0 to 1024 [ 335.556615][T27802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.615067][T27809] loop1: detected capacity change from 0 to 4096 [ 335.635160][T27809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.683791][T27052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.738874][T27813] syzkaller0: entered promiscuous mode [ 335.744450][T27813] syzkaller0: entered allmulticast mode [ 335.784064][T27820] vxcan1: entered allmulticast mode [ 335.839556][T27802] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 335.854454][T27827] loop0: detected capacity change from 0 to 1024 [ 335.881711][T27827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 335.897051][T27827] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.9873: lblock 0 mapped to illegal pblock 0 (length 4) [ 335.911586][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.912423][T27827] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.9873: lblock 0 mapped to illegal pblock 0 (length 1) [ 335.934354][T27827] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 335.946740][T27827] EXT4-fs (loop0): This should not happen!! Data will be lost [ 335.946740][T27827] [ 335.959357][T27827] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.9873: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 335.978447][T27827] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 335.999445][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.041946][T27835] netlink: 'syz.9.9886': attribute type 21 has an invalid length. [ 336.239195][T27849] loop0: detected capacity change from 0 to 2048 [ 336.320345][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 336.320364][ T29] audit: type=1326 audit(526425.799:10183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27858 comm="syz.9.9884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 336.350139][ T29] audit: type=1326 audit(526425.799:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27858 comm="syz.9.9884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 336.373615][ T29] audit: type=1326 audit(526425.799:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27858 comm="syz.9.9884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 336.376156][T27849] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.9878: bad orphan inode 61 [ 336.396892][ T29] audit: type=1326 audit(526425.799:10186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27858 comm="syz.9.9884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 336.430498][ T29] audit: type=1326 audit(526425.810:10187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27858 comm="syz.9.9884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 336.454036][ T29] audit: type=1326 audit(526425.810:10188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27858 comm="syz.9.9884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 336.465237][T27861] vhci_hcd: invalid port number 255 [ 336.486095][T27863] loop3: detected capacity change from 0 to 512 [ 336.492883][T27849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.511483][T27865] random: crng reseeded on system resumption [ 336.530574][T27849] EXT4-fs (loop0): shut down requested (2) [ 336.537544][T27849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 336.539673][T27865] Restarting kernel threads ... [ 336.551434][T27865] Done restarting kernel threads. [ 336.556716][T27849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 336.579839][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.690711][T27876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 336.853481][T27888] loop9: detected capacity change from 0 to 2048 [ 336.877376][T27893] loop3: detected capacity change from 0 to 1024 [ 336.904423][T27888] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.915415][T27893] EXT4-fs: Ignoring removed bh option [ 336.921155][ T29] audit: type=1400 audit(526426.450:10189): avc: denied { mount } for pid=27886 comm="syz.9.9898" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 336.943998][ T29] audit: type=1400 audit(526426.471:10190): avc: denied { read write } for pid=8309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.968221][ T29] audit: type=1400 audit(526426.471:10191): avc: denied { open } for pid=8309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.992248][ T29] audit: type=1400 audit(526426.471:10192): avc: denied { ioctl } for pid=8309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 337.031962][T27893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.059995][T27906] loop1: detected capacity change from 0 to 128 [ 337.131314][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.215869][ T5642] kworker/u8:9: attempt to access beyond end of device [ 337.215869][ T5642] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 337.291694][T27928] loop1: detected capacity change from 0 to 256 [ 337.318183][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.421993][T27943] loop4: detected capacity change from 0 to 256 [ 337.429685][T27942] loop3: detected capacity change from 0 to 128 [ 337.439805][T27942] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.479223][T25000] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.024166][T27966] loop3: detected capacity change from 0 to 128 [ 338.038315][T27971] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 338.084143][ T5642] kworker/u8:9: attempt to access beyond end of device [ 338.084143][ T5642] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 338.230252][T27991] sd 0:0:1:0: device reset [ 338.271640][T27997] atomic_op ffff88810379f128 conn xmit_atomic 0000000000000000 [ 338.451932][T28020] SELinux: ebitmap: truncated map [ 338.461474][T28020] SELinux: failed to load policy [ 338.683083][T28051] infiniband syz2: set active [ 338.687844][T28051] infiniband syz2: added bond0 [ 338.701436][T28068] loop1: detected capacity change from 0 to 512 [ 338.715314][T28051] RDS/IB: syz2: added [ 338.723245][T28068] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.9981: corrupted inode contents [ 338.736951][T28051] smc: adding ib device syz2 with port count 1 [ 338.743582][T28051] smc: ib device syz2 port 1 has pnetid [ 338.753070][T28068] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.9981: mark_inode_dirty error [ 338.777550][T28068] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.9981: corrupted inode contents [ 338.792998][T28068] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.9981: mark_inode_dirty error [ 338.810190][T28075] loop3: detected capacity change from 0 to 512 [ 338.818551][T28068] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9981: Failed to acquire dquot type 0 [ 338.833228][T28075] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.835191][T28053] team0: Device gtp0 is of different type [ 338.852688][T28068] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.9981: corrupted inode contents [ 338.866314][T28068] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.9981: mark_inode_dirty error [ 338.869466][T28075] EXT4-fs (loop3): mount failed [ 338.878546][T28068] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.9981: corrupted inode contents [ 338.896107][T28068] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.9981: mark_inode_dirty error [ 338.907875][T28068] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.9981: corrupted inode contents [ 338.929413][T28068] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 338.939829][T28068] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.9981: corrupted inode contents [ 338.956783][T28068] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.9981: mark_inode_dirty error [ 338.969403][T28068] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 338.980328][T28068] EXT4-fs (loop1): 1 truncate cleaned up [ 338.987444][T28068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.001708][T28068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.141396][T28090] loop1: detected capacity change from 0 to 8192 [ 339.424732][T28124] random: crng reseeded on system resumption [ 339.454160][T28128] __nla_validate_parse: 15 callbacks suppressed [ 339.454182][T28128] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10007'. [ 339.645784][T28161] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 339.683265][T28167] pimreg: entered allmulticast mode [ 339.699927][T28167] pimreg: left allmulticast mode [ 339.749534][T28175] loop9: detected capacity change from 0 to 512 [ 339.762231][T28175] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.769778][T28175] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 339.786037][T28175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 339.794337][T28175] System zones: 1-12 [ 339.799054][T28175] EXT4-fs (loop9): 1 truncate cleaned up [ 339.807097][T28175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.884519][T28190] 9pnet_fd: Insufficient options for proto=fd [ 340.087466][T28221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.140968][T28221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.213405][T28240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10059'. [ 340.303960][T28256] loop3: detected capacity change from 0 to 512 [ 340.406190][T28272] SELinux: ebitmap: truncated map [ 340.428580][T28272] SELinux: failed to load policy [ 340.512055][T28297] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 340.542476][T28297] bridge0: entered promiscuous mode [ 340.551394][T28297] bridge0: port 3(macvlan2) entered blocking state [ 340.558103][T28297] bridge0: port 3(macvlan2) entered disabled state [ 340.564858][T28297] macvlan2: entered allmulticast mode [ 340.570308][T28297] bridge0: entered allmulticast mode [ 340.576954][T28297] macvlan2: left allmulticast mode [ 340.582146][T28297] bridge0: left allmulticast mode [ 340.587948][T28297] bridge0: left promiscuous mode [ 340.689208][T28311] loop9: detected capacity change from 0 to 512 [ 340.860351][T28329] netlink: 3 bytes leftover after parsing attributes in process `syz.9.10097'. [ 340.878396][T28331] batman_adv: batadv0: Adding interface: dummy0 [ 340.884770][T28331] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.931338][T28331] batman_adv: batadv0: Interface activated: dummy0 [ 340.948993][T28329] 0ªX¹¦À: renamed from caif0 [ 340.957876][T28329] 0ªX¹¦À: entered allmulticast mode [ 340.963233][T28329] net_ratelimit: 44 callbacks suppressed [ 340.963249][T28329] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 341.069672][T28335] loop9: detected capacity change from 0 to 128 [ 341.249556][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 341.249612][ T29] audit: type=1400 audit(526431.006:10613): avc: denied { name_bind } for pid=28351 comm="syz.3.10107" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.277743][ T29] audit: type=1400 audit(526431.006:10614): avc: denied { node_bind } for pid=28351 comm="syz.3.10107" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.350350][T28360] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 341.405922][ T29] audit: type=1400 audit(526431.111:10615): avc: denied { relabelfrom } for pid=28359 comm="syz.0.10110" name="NETLINK" dev="sockfs" ino=90218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 341.430415][ T29] audit: type=1400 audit(526431.111:10616): avc: denied { mac_admin } for pid=28359 comm="syz.0.10110" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.451546][ T29] audit: type=1400 audit(526431.132:10617): avc: denied { relabelto } for pid=28359 comm="syz.0.10110" name="NETLINK" dev="sockfs" ino=90218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 341.480604][ T29] audit: type=1326 audit(526431.132:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28363 comm="syz.9.10112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 341.504241][ T29] audit: type=1326 audit(526431.132:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28363 comm="syz.9.10112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 341.527712][ T29] audit: type=1326 audit(526431.132:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28363 comm="syz.9.10112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 341.553153][T28369] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 341.570437][ T29] audit: type=1326 audit(526431.332:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28366 comm="syz.9.10113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 341.593920][ T29] audit: type=1326 audit(526431.332:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28366 comm="syz.9.10113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 341.712320][T28385] loop4: detected capacity change from 0 to 1024 [ 341.748343][T28391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10123'. [ 341.775514][T28385] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 13) [ 341.799698][T28385] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 341.812205][T28385] EXT4-fs (loop4): This should not happen!! Data will be lost [ 341.812205][T28385] [ 341.825853][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 341.841224][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 341.865228][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 341.889204][T28399] bond1: entered promiscuous mode [ 341.894397][T28399] bond1: entered allmulticast mode [ 341.899595][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 341.922407][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 341.962341][T28405] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 341.976692][T28399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.992038][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 342.007587][T28399] bond1 (unregistering): Released all slaves [ 342.013971][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 342.031682][T28385] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.10122: lblock 3 mapped to illegal pblock 3 (length 1) [ 342.056113][T28409] pim6reg: entered allmulticast mode [ 342.065642][T28409] pim6reg: left allmulticast mode [ 342.085613][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10133'. [ 342.186857][T28428] loop9: detected capacity change from 0 to 256 [ 342.203816][T28428] FAT-fs (loop9): Directory bread(block 64) failed [ 342.215959][T28428] FAT-fs (loop9): Directory bread(block 65) failed [ 342.222589][T28428] FAT-fs (loop9): Directory bread(block 66) failed [ 342.229601][T28428] FAT-fs (loop9): Directory bread(block 67) failed [ 342.237303][T28428] FAT-fs (loop9): Directory bread(block 68) failed [ 342.244283][T28428] FAT-fs (loop9): Directory bread(block 69) failed [ 342.250966][T28428] FAT-fs (loop9): Directory bread(block 70) failed [ 342.258931][T28428] FAT-fs (loop9): Directory bread(block 71) failed [ 342.265529][T28428] FAT-fs (loop9): Directory bread(block 72) failed [ 342.272267][T28428] FAT-fs (loop9): Directory bread(block 73) failed [ 342.642887][T28452] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 342.688624][T28470] loop4: detected capacity change from 0 to 128 [ 342.840470][T28499] loop0: detected capacity change from 0 to 512 [ 342.841868][T28502] loop4: detected capacity change from 0 to 128 [ 342.868816][T28499] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.903252][T28499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.944415][T28499] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.10175: corrupted xattr block 19: overlapping e_value [ 342.964774][T28499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 342.973887][T28499] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.10175: corrupted xattr block 19: overlapping e_value [ 342.988212][T28499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 342.997559][T28499] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.10175: corrupted xattr block 19: overlapping e_value [ 343.012637][T28499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 343.087638][T28524] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 343.216479][T28533] vhci_hcd: invalid port number 96 [ 343.221675][T28533] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 343.302746][T28558] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 343.345660][T28561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28561 comm=syz.1.10201 [ 343.380141][T28563] bond1: entered promiscuous mode [ 343.385264][T28563] bond1: entered allmulticast mode [ 343.391097][T28561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=28561 comm=syz.1.10201 [ 343.405113][T28563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.415341][T28568] sd 0:0:1:0: device reset [ 343.432072][T28563] bond1 (unregistering): Released all slaves [ 343.457663][T28576] bond1: entered promiscuous mode [ 343.462818][T28576] bond1: entered allmulticast mode [ 343.468565][T28576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.487876][T28576] bond1 (unregistering): Released all slaves [ 343.532606][T28585] loop9: detected capacity change from 0 to 512 [ 343.559639][T28585] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 343.581070][T28585] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10209: invalid indirect mapped block 2683928664 (level 1) [ 343.600444][T28585] EXT4-fs (loop9): 1 truncate cleaned up [ 343.630465][T28585] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.10209: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 343.686208][T28609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.705416][T28616] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 343.756598][T28625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10223'. [ 343.804938][T28631] bond1: entered promiscuous mode [ 343.810053][T28631] bond1: entered allmulticast mode [ 343.815506][T28631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.839587][T28631] bond1 (unregistering): Released all slaves [ 343.849482][T28638] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 344.587526][T28646] netlink: 368 bytes leftover after parsing attributes in process `syz.1.10232'. [ 344.759978][T28668] 9pnet_fd: Insufficient options for proto=fd [ 344.806151][T28674] SELinux: ebitmap: truncated map [ 344.812356][T28674] SELinux: failed to load policy [ 344.858007][T28682] loop3: detected capacity change from 0 to 1024 [ 344.870773][T28684] bond6: entered promiscuous mode [ 344.876281][T28684] bond6: entered allmulticast mode [ 344.881147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.895220][T28684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.915809][T28684] bond6 (unregistering): Released all slaves [ 344.928198][T28682] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 13) [ 344.933320][T28698] loop0: detected capacity change from 0 to 128 [ 344.954216][T28682] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 344.966644][T28682] EXT4-fs (loop3): This should not happen!! Data will be lost [ 344.966644][T28682] [ 344.985260][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.000774][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.019049][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.034221][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.048804][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.066359][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.081725][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.096265][T28682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.123922][T28706] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.10253: lblock 3 mapped to illegal pblock 3 (length 1) [ 345.242111][T28724] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 345.373790][T28733] SELinux: ebitmap: truncated map [ 345.396687][T28733] SELinux: failed to load policy [ 345.739074][T28761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10289'. [ 345.797260][T28765] 9pnet_fd: Insufficient options for proto=fd [ 345.873809][T28778] 9pnet_fd: Insufficient options for proto=fd [ 345.885813][T28780] loop4: detected capacity change from 0 to 512 [ 345.900716][T28780] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.908459][T28780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.921634][T28780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 345.955780][T28785] loop9: detected capacity change from 0 to 512 [ 345.963109][T28780] System zones: 1-12 [ 345.969028][T28780] EXT4-fs (loop4): 1 truncate cleaned up [ 345.975248][T28785] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.10298: corrupted inode contents [ 346.001105][T28785] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.10298: mark_inode_dirty error [ 346.013284][T28785] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.10298: corrupted inode contents [ 346.026495][T28785] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.10298: mark_inode_dirty error [ 346.053065][T28785] __quota_error: 189 callbacks suppressed [ 346.053086][T28785] Quota error (device loop9): write_blk: dquota write failed [ 346.068527][T28785] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 346.078687][T28785] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.10298: Failed to acquire dquot type 0 [ 346.095036][T28785] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.10298: corrupted inode contents [ 346.112084][T28793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10301'. [ 346.128208][T28785] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.10298: mark_inode_dirty error [ 346.140993][T28785] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.10298: corrupted inode contents [ 346.153158][T28785] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.10298: mark_inode_dirty error [ 346.164781][T28785] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.10298: corrupted inode contents [ 346.177044][T28785] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 346.185828][T28785] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.10298: corrupted inode contents [ 346.198391][T28785] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.10298: mark_inode_dirty error [ 346.209737][T28785] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 346.219320][T28785] EXT4-fs (loop9): 1 truncate cleaned up [ 346.267203][T28797] loop9: detected capacity change from 0 to 1024 [ 346.288439][T28797] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 13) [ 346.304642][T28797] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 346.317236][T28797] EXT4-fs (loop9): This should not happen!! Data will be lost [ 346.317236][T28797] [ 346.331323][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.346735][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.362671][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.378742][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.407311][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.431657][T28805] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.449362][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.464699][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.480030][T28797] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.10302: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.670469][T28817] pimreg: entered allmulticast mode [ 346.679267][T28817] pimreg: left allmulticast mode [ 346.686410][T28815] rdma_rxe: rxe_newlink: failed to add bond0 [ 346.709528][ T29] audit: type=1400 audit(526437.733:10812): avc: denied { nlmsg_read } for pid=28818 comm="syz.3.10323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 346.799667][T28823] loop0: detected capacity change from 0 to 512 [ 346.957281][T28841] random: crng reseeded on system resumption [ 346.990014][T28843] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10321'. [ 347.151095][T27373] EXT4-fs unmount: 24 callbacks suppressed [ 347.151116][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.178444][T28860] loop3: detected capacity change from 0 to 512 [ 347.195150][T28860] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.211820][T28860] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.240684][T28863] loop0: detected capacity change from 0 to 8192 [ 347.248371][T28860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 347.256378][T28860] System zones: 1-12 [ 347.261213][T28860] EXT4-fs (loop3): 1 truncate cleaned up [ 347.267485][T28860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.308393][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.713673][ T29] audit: type=1107 audit(526438.793:10813): pid=28901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='1' [ 347.747125][T28902] serio: Serial port ptm1 [ 347.776093][T28910] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10347'. [ 347.814574][ T29] audit: type=1326 audit(526438.898:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28912 comm="syz.1.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 347.851530][ T29] audit: type=1326 audit(526438.898:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28912 comm="syz.1.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 347.875393][ T29] audit: type=1326 audit(526438.898:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28912 comm="syz.1.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 347.898879][ T29] audit: type=1326 audit(526438.898:10817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28912 comm="syz.1.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 347.922388][ T29] audit: type=1326 audit(526438.898:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28912 comm="syz.1.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 347.945863][ T29] audit: type=1326 audit(526438.898:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28912 comm="syz.1.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 348.103403][T28941] IPVS: stopping master sync thread 28942 ... [ 348.110174][T28942] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 348.188696][T28951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10367'. [ 348.207497][T28955] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 348.239963][T28960] loop9: detected capacity change from 0 to 1024 [ 348.259199][T28960] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.482354][T28960] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 348.531077][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.143497][T28989] syzkaller1: entered promiscuous mode [ 349.149505][T28989] syzkaller1: entered allmulticast mode [ 349.206529][T28990] siw: device registration error -23 [ 349.236334][T29000] vhci_hcd: invalid port number 255 [ 349.266675][T29004] random: crng reseeded on system resumption [ 349.278360][T29004] Restarting kernel threads ... [ 349.284217][T29004] Done restarting kernel threads. [ 349.498350][T29026] loop4: detected capacity change from 0 to 128 [ 349.749033][ T5660] kworker/u8:24: attempt to access beyond end of device [ 349.749033][ T5660] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 350.151093][T29062] serio: Serial port ptm0 [ 350.250449][T29071] loop4: detected capacity change from 0 to 2048 [ 350.268145][T29071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.419160][T29083] loop0: detected capacity change from 0 to 256 [ 350.477994][T29087] loop3: detected capacity change from 0 to 512 [ 350.495302][T29087] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.10424: casefold flag without casefold feature [ 350.523701][T29089] netlink: 'syz.0.10426': attribute type 1 has an invalid length. [ 350.531649][T29089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10426'. [ 350.571979][T29087] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.10424: couldn't read orphan inode 15 (err -117) [ 350.585648][T29087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.611094][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.625801][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.712441][T29106] serio: Serial port ptm0 [ 350.766094][T29113] loop4: detected capacity change from 0 to 4096 [ 350.774052][T29113] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 350.794935][T29113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.826295][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 350.826443][ T29] audit: type=1400 audit(526442.069:10958): avc: denied { write } for pid=29112 comm="syz.4.10437" name="memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 350.903202][T29125] loop3: detected capacity change from 0 to 2048 [ 350.910911][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.922201][T29125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.968233][T29134] loop4: detected capacity change from 0 to 512 [ 351.001388][T29134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.019110][ T29] audit: type=1400 audit(526442.268:10959): avc: denied { setattr } for pid=29132 comm="syz.4.10443" path="/1653/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 351.048486][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.090260][T29144] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 351.103201][ T29] audit: type=1400 audit(526442.352:10960): avc: denied { ioctl } for pid=29132 comm="syz.4.10443" path="/1653/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 351.166571][T29146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.10443: corrupted inode contents [ 351.177219][ T29] audit: type=1400 audit(526442.405:10961): avc: denied { mounton } for pid=29147 comm="syz.3.10447" path="/337/file0" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.222136][T29146] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm syz.4.10443: mark_inode_dirty error [ 351.235020][T29146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.10443: corrupted inode contents [ 351.247773][T29146] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.10443: mark_inode_dirty error [ 351.260988][T29146] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.10443: mark inode dirty (error -117) [ 351.274955][T29146] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 351.303193][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.333050][ T29] audit: type=1400 audit(526442.593:10962): avc: denied { mount } for pid=29151 comm="syz.9.10460" name="/" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 351.362960][T29156] random: crng reseeded on system resumption [ 351.374232][T29156] Restarting kernel threads ... [ 351.379716][T29156] Done restarting kernel threads. [ 351.381274][ T29] audit: type=1400 audit(526442.625:10963): avc: denied { search } for pid=29151 comm="syz.9.10460" name="/" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 351.406827][ T29] audit: type=1400 audit(526442.625:10964): avc: denied { search } for pid=29151 comm="syz.9.10460" name="/" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 351.428993][ T29] audit: type=1400 audit(526442.625:10965): avc: denied { read open } for pid=29151 comm="syz.9.10460" path="/" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 351.451519][ T29] audit: type=1400 audit(526442.625:10966): avc: denied { append } for pid=29155 comm="syz.3.10448" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 351.474652][ T29] audit: type=1400 audit(526442.625:10967): avc: denied { open } for pid=29155 comm="syz.3.10448" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 351.546641][T29162] loop0: detected capacity change from 0 to 4096 [ 351.555223][T29162] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 351.584404][T29162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.602027][T29164] netlink: 'syz.3.10454': attribute type 1 has an invalid length. [ 351.610040][T29164] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10454'. [ 351.619452][T29169] loop9: detected capacity change from 0 to 512 [ 351.645479][T29169] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 351.662361][T29169] EXT4-fs (loop9): mount failed [ 351.688205][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.718047][T29182] loop0: detected capacity change from 0 to 512 [ 351.732226][T29182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.825505][T29186] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.10462: corrupted inode contents [ 351.837883][T29186] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #18: comm syz.0.10462: mark_inode_dirty error [ 351.850960][T29186] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.10462: corrupted inode contents [ 351.864071][T29186] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.10462: mark_inode_dirty error [ 351.876555][T29186] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.10462: mark inode dirty (error -117) [ 351.891163][T29186] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 351.935376][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.962922][T29190] $Hÿ: renamed from bond0 (while UP) [ 351.974150][T29190] $Hÿ: entered promiscuous mode [ 351.979365][T29190] bond_slave_0: entered promiscuous mode [ 351.985269][T29190] bond_slave_1: entered promiscuous mode [ 352.055392][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10467'. [ 352.839550][T29212] netlink: 'syz.3.10471': attribute type 1 has an invalid length. [ 352.847473][T29212] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10471'. [ 352.935467][T29233] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 353.037108][T29233] bridge0: entered promiscuous mode [ 353.043808][T29233] bridge0: port 1(macvlan3) entered blocking state [ 353.050528][T29233] bridge0: port 1(macvlan3) entered disabled state [ 353.073388][T29233] macvlan3: entered allmulticast mode [ 353.078824][T29233] bridge0: entered allmulticast mode [ 353.120992][T29233] macvlan3: left allmulticast mode [ 353.126217][T29233] bridge0: left allmulticast mode [ 353.145311][T29233] bridge0: left promiscuous mode [ 353.178128][T29241] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 353.201921][T29247] loop3: detected capacity change from 0 to 512 [ 353.233129][T29247] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 353.259346][T29247] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.10486: invalid indirect mapped block 2683928664 (level 1) [ 353.312013][T29247] EXT4-fs (loop3): 1 truncate cleaned up [ 353.326060][T29255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10489'. [ 353.345967][T29247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.379096][T29247] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.10486: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 353.418902][T29259] batman_adv: batadv0: Adding interface: dummy0 [ 353.425266][T29259] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.452872][T29259] batman_adv: batadv0: Interface activated: dummy0 [ 353.493073][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.504795][T29258] openvswitch: netlink: Message has 6 unknown bytes. [ 353.538576][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10493'. [ 353.656983][T29275] bond6: entered promiscuous mode [ 353.662104][T29275] bond6: entered allmulticast mode [ 353.691076][T29275] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.725939][T29275] bond6 (unregistering): Released all slaves [ 353.747002][T29281] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 353.766959][T29281] bridge0: entered promiscuous mode [ 353.774416][T29281] bridge0: port 3(macvlan2) entered blocking state [ 353.781109][T29281] bridge0: port 3(macvlan2) entered disabled state [ 353.789242][T29281] macvlan2: entered allmulticast mode [ 353.794680][T29281] bridge0: entered allmulticast mode [ 353.800881][T29281] macvlan2: left allmulticast mode [ 353.806040][T29281] bridge0: left allmulticast mode [ 353.811692][T29281] bridge0: left promiscuous mode [ 353.837622][T29283] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 353.852328][T29285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.907776][T29293] loop9: detected capacity change from 0 to 1024 [ 353.950722][T29293] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.236717][T29304] $Hÿ: renamed from bond0 (while UP) [ 354.260680][T29293] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 354.283626][T29304] $Hÿ: entered promiscuous mode [ 354.288754][T29304] bond_slave_0: entered promiscuous mode [ 354.293714][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10505'. [ 354.294557][T29304] bond_slave_1: entered promiscuous mode [ 354.365173][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.449584][T29345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10520'. [ 355.449630][T29346] 9pnet_fd: Insufficient options for proto=fd [ 355.541347][T29355] openvswitch: netlink: Message has 6 unknown bytes. [ 355.597723][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 355.597739][ T29] audit: type=1326 audit(526447.066:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.644033][ T29] audit: type=1326 audit(526447.076:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29362 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f464d1014a5 code=0x7ffc0000 [ 355.667611][ T29] audit: type=1326 audit(526447.108:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.691046][ T29] audit: type=1326 audit(526447.108:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.714588][ T29] audit: type=1326 audit(526447.108:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.737974][ T29] audit: type=1326 audit(526447.108:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.761390][ T29] audit: type=1326 audit(526447.108:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29356 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.786520][ T29] audit: type=1326 audit(526447.223:11047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29362 comm="syz.1.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 355.833782][ T29] audit: type=1326 audit(526447.318:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29366 comm="syz.4.10532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37e0ebe9 code=0x7ffc0000 [ 355.857721][ T29] audit: type=1326 audit(526447.318:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29366 comm="syz.4.10532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37e0ebe9 code=0x7ffc0000 [ 356.232227][T29422] openvswitch: netlink: Message has 6 unknown bytes. [ 356.272925][T29426] hub 9-0:1.0: USB hub found [ 356.284426][T29426] hub 9-0:1.0: 8 ports detected [ 356.406032][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10576'. [ 356.631562][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10588'. [ 356.898571][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10597'. [ 356.978310][T29498] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.006938][T29498] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.050697][T29522] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 357.104227][T29522] bridge0: entered promiscuous mode [ 357.111061][T29522] bridge0: port 3(macvlan2) entered blocking state [ 357.117710][T29522] bridge0: port 3(macvlan2) entered disabled state [ 357.126264][T29522] macvlan2: entered allmulticast mode [ 357.131818][T29522] bridge0: entered allmulticast mode [ 357.142159][T29531] netlink: 'syz.9.10613': attribute type 1 has an invalid length. [ 357.150086][T29531] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10613'. [ 357.159476][T29522] macvlan2: left allmulticast mode [ 357.164764][T29522] bridge0: left allmulticast mode [ 357.170378][T29522] bridge0: left promiscuous mode [ 357.474143][T29565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10627'. [ 357.667321][T29557] loop0: detected capacity change from 0 to 32768 [ 357.680948][T29572] serio: Serial port ptm0 [ 357.719278][T29559] loop4: detected capacity change from 0 to 32768 [ 357.750619][T29559] loop4: p1 p2 p3 < > [ 357.754866][T29559] loop4: p1 size 242222080 extends beyond EOD, truncated [ 357.774085][T29559] loop4: p2 start 4294967295 is beyond EOD, truncated [ 357.807640][T29587] loop9: detected capacity change from 0 to 1024 [ 357.843396][T29587] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.956909][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10643'. [ 357.969157][T29609] IPVS: Error joining to the multicast group [ 357.995153][T29613] loop3: detected capacity change from 0 to 128 [ 358.173653][T29587] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 358.221945][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.692083][T29632] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 358.706266][T29632] bridge0: entered promiscuous mode [ 358.721569][T29632] bridge0: port 3(macvlan2) entered blocking state [ 358.728249][T29632] bridge0: port 3(macvlan2) entered disabled state [ 358.736312][T29632] macvlan2: entered allmulticast mode [ 358.741906][T29632] bridge0: entered allmulticast mode [ 358.748991][T29632] macvlan2: left allmulticast mode [ 358.749392][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10658'. [ 358.754259][T29632] bridge0: left allmulticast mode [ 358.754961][T29632] bridge0: left promiscuous mode [ 358.984167][T29673] binfmt_misc: register: failed to install interpreter file ./file0 [ 359.020134][T29677] bridge0: entered promiscuous mode [ 359.043969][T29677] bridge0: port 3(macvlan2) entered blocking state [ 359.050683][T29677] bridge0: port 3(macvlan2) entered disabled state [ 359.060785][T29677] macvlan2: entered allmulticast mode [ 359.066264][T29677] bridge0: entered allmulticast mode [ 359.072932][T29677] macvlan2: left allmulticast mode [ 359.078351][T29677] bridge0: left allmulticast mode [ 359.095395][T29677] bridge0: left promiscuous mode [ 359.288082][T29699] can0: slcan on ttyS3. [ 359.332240][T29699] can0 (unregistered): slcan off ttyS3. [ 359.368970][T29704] loop0: detected capacity change from 0 to 128 [ 359.504041][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 359.511822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.600551][T29713] vhci_hcd: invalid port number 224 [ 359.612407][T29715] loop3: detected capacity change from 0 to 1024 [ 359.620059][T29717] bridge0: entered promiscuous mode [ 359.628632][T29717] bridge0: port 3(macvlan2) entered blocking state [ 359.635205][T29717] bridge0: port 3(macvlan2) entered disabled state [ 359.642857][T29717] macvlan2: entered allmulticast mode [ 359.648411][T29717] bridge0: entered allmulticast mode [ 359.655686][T29717] macvlan2: left allmulticast mode [ 359.660950][T29717] bridge0: left allmulticast mode [ 359.667618][T29715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.680301][T29717] bridge0: left promiscuous mode [ 359.924986][T29732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.960400][T29732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.015139][T29750] bridge0: entered promiscuous mode [ 360.025736][T29750] bridge0: port 3(macvlan2) entered blocking state [ 360.032674][T29750] bridge0: port 3(macvlan2) entered disabled state [ 360.042965][T29750] macvlan2: entered allmulticast mode [ 360.048459][T29750] bridge0: entered allmulticast mode [ 360.071149][T29750] macvlan2: left allmulticast mode [ 360.076383][T29750] bridge0: left allmulticast mode [ 360.082793][T29750] bridge0: left promiscuous mode [ 360.094422][T29755] openvswitch: netlink: Message has 6 unknown bytes. [ 360.106622][T29715] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 360.195515][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.286809][T29782] __nla_validate_parse: 5 callbacks suppressed [ 360.286825][T29782] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 360.309976][T29782] bridge0: entered promiscuous mode [ 360.317881][T29782] bridge0: port 3(macvlan2) entered blocking state [ 360.324503][T29782] bridge0: port 3(macvlan2) entered disabled state [ 360.331453][T29782] macvlan2: entered allmulticast mode [ 360.336899][T29782] bridge0: entered allmulticast mode [ 360.348269][T29787] loop0: detected capacity change from 0 to 1024 [ 360.357626][T29782] macvlan2: left allmulticast mode [ 360.363001][T29782] bridge0: left allmulticast mode [ 360.368856][T29782] bridge0: left promiscuous mode [ 360.392391][T29787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.439079][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 360.439094][ T29] audit: type=1400 audit(526452.157:11229): avc: denied { getopt } for pid=29795 comm="syz.4.10732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.504644][T29798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10733'. [ 360.526828][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10733'. [ 360.592974][ T29] audit: type=1400 audit(526452.315:11230): avc: denied { create } for pid=29806 comm="syz.9.10737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.632810][ T29] audit: type=1400 audit(526452.315:11231): avc: denied { connect } for pid=29806 comm="syz.9.10737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.652609][ T29] audit: type=1400 audit(526452.346:11232): avc: denied { name_connect } for pid=29810 comm="syz.3.10738" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 360.661811][T29787] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 360.675006][ T29] audit: type=1400 audit(526452.346:11233): avc: denied { ioctl } for pid=29806 comm="syz.9.10737" path="socket:[93421]" dev="sockfs" ino=93421 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.732297][ T29] audit: type=1400 audit(526452.451:11234): avc: denied { write } for pid=29812 comm="syz.9.10739" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.773460][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.786680][ T29] audit: type=1400 audit(526452.514:11235): avc: denied { ioctl } for pid=29818 comm="+}[@" path="socket:[93166]" dev="sockfs" ino=93166 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.816423][ T29] audit: type=1326 audit(526452.546:11236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29820 comm="syz.0.10742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2047ebe9 code=0x7ffc0000 [ 360.835576][T29823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.840129][ T29] audit: type=1326 audit(526452.546:11237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29820 comm="syz.0.10742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2047ebe9 code=0x7ffc0000 [ 360.849914][T29823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.879746][ T29] audit: type=1326 audit(526452.588:11238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29820 comm="syz.0.10742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e2047ebe9 code=0x7ffc0000 [ 361.006614][T29836] loop0: detected capacity change from 0 to 512 [ 361.014121][T29836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 361.043672][T29836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.112454][T29836] loop0: detected capacity change from 512 to 64 [ 361.333707][T27084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.348286][ T5674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.405513][ T5674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.484084][ T5674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.545672][ T5674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.684598][ T5674] bridge_slave_1: left allmulticast mode [ 361.690295][ T5674] bridge_slave_1: left promiscuous mode [ 361.696133][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.766313][ T5674] bridge_slave_0: left allmulticast mode [ 361.772100][ T5674] bridge_slave_0: left promiscuous mode [ 361.777785][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.840402][T29882] loop3: detected capacity change from 0 to 32768 [ 361.916029][ T5674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.927466][ T5674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.944856][ T5674] bond0 (unregistering): Released all slaves [ 361.961457][T29867] lo speed is unknown, defaulting to 1000 [ 362.051290][ T5674] hsr_slave_0: left promiscuous mode [ 362.057696][ T5674] hsr_slave_1: left promiscuous mode [ 362.063615][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.071091][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.079692][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.087161][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.095171][ T5674] batman_adv: batadv0: Interface deactivated: dummy0 [ 362.101911][ T5674] batman_adv: batadv0: Removing interface: dummy0 [ 362.109738][T29909] loop9: detected capacity change from 0 to 128 [ 362.119877][ T5674] veth1_macvtap: left promiscuous mode [ 362.125810][ T5674] veth0_macvtap: left promiscuous mode [ 362.131904][ T5674] veth1_vlan: left promiscuous mode [ 362.137431][ T5674] veth0_vlan: left promiscuous mode [ 362.143492][T29909] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.205199][T27373] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.280746][ T5674] team0 (unregistering): Port device team_slave_1 removed [ 362.293260][ T5674] team0 (unregistering): Port device team_slave_0 removed [ 362.503456][T29867] chnl_net:caif_netlink_parms(): no params data found [ 362.609708][T29867] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.616937][T29867] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.635523][T29867] bridge_slave_0: entered allmulticast mode [ 362.642403][T29867] bridge_slave_0: entered promiscuous mode [ 362.664436][T29867] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.671823][T29867] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.681157][T29867] bridge_slave_1: entered allmulticast mode [ 362.688126][T29867] bridge_slave_1: entered promiscuous mode [ 362.710436][T29867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.729884][T29867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.793232][T29867] team0: Port device team_slave_0 added [ 362.800339][T29867] team0: Port device team_slave_1 added [ 362.831503][T29867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.838532][T29867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.864568][T29867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.878428][T29867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.885615][T29867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.911654][T29867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.943442][T29940] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10791'. [ 362.953259][T29940] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10791'. [ 363.001048][T29867] hsr_slave_0: entered promiscuous mode [ 363.011466][T29867] hsr_slave_1: entered promiscuous mode [ 363.017723][T29867] debugfs: 'hsr0' already exists in 'hsr' [ 363.023595][T29867] Cannot create hsr debugfs directory [ 363.165778][T29955] netlink: 'syz.3.10798': attribute type 3 has an invalid length. [ 363.185711][T29955] netlink: 'syz.3.10798': attribute type 3 has an invalid length. [ 363.252818][T29959] loop3: detected capacity change from 0 to 512 [ 363.261248][T29959] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 363.270311][T29959] EXT4-fs (loop3): invalid journal inode [ 363.277134][T29959] EXT4-fs (loop3): can't get journal size [ 363.287017][T29959] EXT4-fs (loop3): 1 truncate cleaned up [ 363.304027][T29959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.354814][T29867] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.367973][T29867] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 363.378542][T29867] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 363.388062][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.390413][T29867] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 363.435269][T29974] batman_adv: batadv0: Adding interface: ipvlan2 [ 363.441783][T29974] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.467247][T29974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.477834][T29974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.489605][T29974] batman_adv: batadv0: Interface activated: ipvlan2 [ 363.576579][T29867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.595403][T29867] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.610222][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.617511][ T5688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.638966][T29993] atomic_op ffff88810e361d28 conn xmit_atomic 0000000000000000 [ 363.676008][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.683102][ T5688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.709211][T29995] C: renamed from team_slave_0 (while UP) [ 363.719650][T29995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10814'. [ 363.868895][T30014] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 363.868895][T30014] program syz.9.10821 not setting count and/or reply_len properly [ 363.877650][T29867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.922889][T30021] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 363.947821][T30025] netlink: 'syz.1.10822': attribute type 13 has an invalid length. [ 363.955962][T30025] netlink: 'syz.1.10822': attribute type 17 has an invalid length. [ 364.033083][T30031] SELinux: failed to load policy [ 364.038170][T30025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.225406][T29867] veth0_vlan: entered promiscuous mode [ 364.243520][T29867] veth1_vlan: entered promiscuous mode [ 364.286336][T29867] veth0_macvtap: entered promiscuous mode [ 364.302020][T29867] veth1_macvtap: entered promiscuous mode [ 364.325708][T29867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.334082][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10842'. [ 364.353225][T29867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.375984][ T5688] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.389485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.402342][ T5688] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.422007][T30084] netlink: 268 bytes leftover after parsing attributes in process `syz.3.10845'. [ 364.423928][ T5688] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.452041][ T5688] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.506548][T30094] netlink: 'syz.8.10850': attribute type 2 has an invalid length. [ 364.514694][T30094] netlink: 'syz.8.10850': attribute type 1 has an invalid length. [ 364.522536][T30094] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.10850'. [ 364.620229][T30112] loop9: detected capacity change from 0 to 128 [ 364.697580][T30124] loop3: detected capacity change from 0 to 1024 [ 364.715602][T30124] EXT4-fs: Ignoring removed orlov option [ 364.721415][T30124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.744731][T30124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.788123][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.910254][T30155] netlink: 'syz.1.10877': attribute type 21 has an invalid length. [ 365.265586][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 365.265607][ T29] audit: type=1326 audit(526457.154:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30179 comm="syz.1.10887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 365.295418][ T29] audit: type=1326 audit(526457.154:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30179 comm="syz.1.10887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 365.507203][T30188] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.514565][T30188] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.597051][T30188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.629913][T30188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.766785][T30191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10891'. [ 365.797305][T30193] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10891'. [ 365.807466][ T5668] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.836821][ T5668] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.875926][ T5668] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.901924][ T5668] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.932519][ T29] audit: type=1400 audit(526457.910:11487): avc: denied { create } for pid=30195 comm="syz.1.10894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 365.952159][ T2955] syz1: Port: 1 Link DOWN [ 366.068175][ T29] audit: type=1400 audit(526458.068:11488): avc: denied { remount } for pid=30205 comm="syz.4.10898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 366.109676][T30208] netem: change failed [ 366.137322][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10900'. [ 366.146418][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10900'. [ 366.192327][T30215] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10901'. [ 366.201547][T30215] netem: unknown loss type 0 [ 366.206164][T30215] netem: change failed [ 366.251941][ T29] audit: type=1400 audit(526458.215:11489): avc: denied { read write } for pid=30216 comm="syz.4.10902" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 366.277808][ T29] audit: type=1400 audit(526458.215:11490): avc: denied { open } for pid=30216 comm="syz.4.10902" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 366.406623][T30230] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10908'. [ 366.437015][T30230] 0ªX¹¦À: renamed from caif0 [ 366.445562][T30234] loop4: detected capacity change from 0 to 1024 [ 366.487627][T30230] 0ªX¹¦À: entered allmulticast mode [ 366.492934][T30230] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 366.552459][T30234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.590945][T30247] netlink: 'syz.8.10913': attribute type 4 has an invalid length. [ 366.604980][T30247] netlink: 'syz.8.10913': attribute type 4 has an invalid length. [ 366.649274][T30234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.10909: inode #187: comm syz.4.10909: iget: illegal inode # [ 366.662991][T30234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.10909: error while reading EA inode 187 err=-117 [ 366.694694][ T29] audit: type=1400 audit(526458.718:11491): avc: denied { listen } for pid=30251 comm="syz.1.10914" lport=38659 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.717688][ T29] audit: type=1400 audit(526458.718:11492): avc: denied { accept } for pid=30251 comm="syz.1.10914" lport=38659 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.740702][ T29] audit: type=1400 audit(526458.718:11493): avc: denied { setopt } for pid=30251 comm="syz.1.10914" lport=38659 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 366.764388][ T29] audit: type=1400 audit(526458.718:11494): avc: denied { getopt } for pid=30251 comm="syz.1.10914" lport=38659 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 366.820094][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.905523][T30271] netlink: 'syz.8.10925': attribute type 1 has an invalid length. [ 366.982470][T30279] ref_ctr_offset mismatch. inode: 0x4c5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 367.207419][T30305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10940'. [ 367.332192][T30315] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10942'. [ 367.786246][T30376] bridge_slave_1: entered promiscuous mode [ 367.944859][T30398] loop9: detected capacity change from 0 to 512 [ 367.958511][T30398] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 367.972701][T30403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10980'. [ 368.000745][T30398] EXT4-fs (loop9): 1 truncate cleaned up [ 368.000815][T30406] 9pnet_fd: Insufficient options for proto=fd [ 368.012564][T30398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.013565][T30398] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.104243][T30412] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10984'. [ 368.170545][T30422] loop4: detected capacity change from 0 to 1024 [ 368.179627][T30422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.208285][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.288015][T30429] loop4: detected capacity change from 0 to 8192 [ 369.198030][T30493] bond1: entered promiscuous mode [ 369.203405][T30493] bond1: entered allmulticast mode [ 369.209528][T30493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.221632][T30493] bond1 (unregistering): Released all slaves [ 369.285642][T30499] loop4: detected capacity change from 0 to 1024 [ 369.293629][T30499] EXT4-fs: Ignoring removed orlov option [ 369.314567][T30499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.350211][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.120125][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 370.120142][ T29] audit: type=1400 audit(526462.309:11681): avc: denied { connect } for pid=30620 comm="syz.8.11083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 370.126405][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d54200: rx timeout, send abort [ 370.218709][ T29] audit: type=1400 audit(526462.361:11682): avc: denied { write } for pid=30620 comm="syz.8.11083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 370.295473][ T29] audit: type=1326 audit(526462.508:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.318888][ T29] audit: type=1326 audit(526462.508:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.351346][ T29] audit: type=1326 audit(526462.550:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.374829][ T29] audit: type=1326 audit(526462.550:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.398217][ T29] audit: type=1326 audit(526462.550:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30644 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f619c4a14a5 code=0x7ffc0000 [ 370.421648][ T29] audit: type=1326 audit(526462.550:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.445055][ T29] audit: type=1326 audit(526462.550:11689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.468493][ T29] audit: type=1326 audit(526462.550:11690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30638 comm="syz.3.11089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619c46ebe9 code=0x7ffc0000 [ 370.497059][T30649] netlink: 'syz.8.11094': attribute type 1 has an invalid length. [ 370.545664][T30658] __nla_validate_parse: 6 callbacks suppressed [ 370.545730][T30658] netlink: 3 bytes leftover after parsing attributes in process `syz.9.11098'. [ 370.570402][T30658] batadv1: entered promiscuous mode [ 370.575722][T30658] batadv1: entered allmulticast mode [ 370.597221][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d55000: rx timeout, send abort [ 370.603990][T30666] netlink: 'syz.3.11102': attribute type 6 has an invalid length. [ 370.605847][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d54200: abort rx timeout. Force session deactivation [ 370.655156][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11104'. [ 370.664399][T30671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11104'. [ 370.683643][T30671] macsec1: entered promiscuous mode [ 370.688959][T30671] team0: entered promiscuous mode [ 370.694024][T30671] team_slave_0: entered promiscuous mode [ 370.700034][T30671] team_slave_1: entered promiscuous mode [ 370.706112][T30671] macsec1: entered allmulticast mode [ 370.711524][T30671] team0: entered allmulticast mode [ 370.716692][T30671] team_slave_0: entered allmulticast mode [ 370.722481][T30671] team_slave_1: entered allmulticast mode [ 370.797659][T30687] netlink: 'syz.3.11112': attribute type 12 has an invalid length. [ 370.805680][T30687] netlink: 'syz.3.11112': attribute type 29 has an invalid length. [ 370.813621][T30687] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11112'. [ 370.822869][T30687] netlink: 'syz.3.11112': attribute type 2 has an invalid length. [ 370.830716][T30687] netlink: 'syz.3.11112': attribute type 3 has an invalid length. [ 370.853785][T30687] netlink: 'syz.3.11112': attribute type 12 has an invalid length. [ 370.861810][T30687] netlink: 'syz.3.11112': attribute type 29 has an invalid length. [ 370.869817][T30687] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11112'. [ 370.879107][T30687] netlink: 'syz.3.11112': attribute type 2 has an invalid length. [ 370.886980][T30687] netlink: 'syz.3.11112': attribute type 3 has an invalid length. [ 370.923969][T30694] loop3: detected capacity change from 0 to 1024 [ 370.930945][T30694] EXT4-fs: inline encryption not supported [ 370.939089][T30694] EXT4-fs: Ignoring removed bh option [ 370.966260][T30694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.011921][T30709] syz_tun: entered allmulticast mode [ 371.018501][T30708] syz_tun: left allmulticast mode [ 371.029685][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.081779][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d55000: abort rx timeout. Force session deactivation [ 371.093152][T30721] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 371.110539][T30723] ip6tnl1: entered promiscuous mode [ 371.115841][T30723] ip6tnl1: entered allmulticast mode [ 371.128845][T30719] 9pnet: Could not find request transport: 0xffffffffffffffff [ 371.606829][T30774] loop9: detected capacity change from 0 to 512 [ 371.613692][T30774] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.620651][T30774] ext4: Unknown parameter 'noacl' [ 371.654921][T30779] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 371.703243][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11163'. [ 371.807646][T30797] loop9: detected capacity change from 0 to 1024 [ 371.814660][T30797] EXT4-fs: inline encryption not supported [ 371.820982][T30797] EXT4-fs: Ignoring removed bh option [ 371.851551][T30797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.960025][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.016592][T30829] 9pnet: Could not find request transport: 0xffffffffffffffff [ 372.064009][T30841] loop4: detected capacity change from 0 to 1024 [ 372.070838][T30841] EXT4-fs: inline encryption not supported [ 372.077980][T30841] EXT4-fs: Ignoring removed bh option [ 372.111266][T30841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.187587][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.195795][T30863] syz_tun: entered allmulticast mode [ 372.202756][T30862] syz_tun: left allmulticast mode [ 372.241061][T30870] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 372.323809][ C1] vcan0: j1939_tp_rxtimer: 0xffff888122fae600: rx timeout, send abort [ 372.398930][T30889] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11200'. [ 372.410891][T30889] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11200'. [ 372.566481][T30899] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 372.800222][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d55c00: rx timeout, send abort [ 372.808627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888122fae600: abort rx timeout. Force session deactivation [ 372.922536][T30950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11241'. [ 373.041153][T30974] team0: Device hsr_slave_0 failed to register rx_handler [ 373.103145][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11245'. [ 373.144608][T30982] vhci_hcd: invalid port number 224 [ 373.249785][T31002] openvswitch: netlink: Message has 6 unknown bytes. [ 373.284778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119d55c00: abort rx timeout. Force session deactivation [ 373.636421][T31054] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 373.709108][T31058] team0: Device hsr_slave_0 failed to register rx_handler [ 374.080148][T31089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.105824][T31089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.424099][T31136] rdma_op ffff8881016fa180 conn xmit_rdma 0000000000000000 [ 374.441115][T31132] lo speed is unknown, defaulting to 1000 [ 374.625090][T31160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.675847][T31160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.975756][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 374.975775][ T29] audit: type=1326 audit(526467.411:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.058892][ T29] audit: type=1326 audit(526467.464:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.082242][ T29] audit: type=1326 audit(526467.464:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.105749][ T29] audit: type=1326 audit(526467.464:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.129219][ T29] audit: type=1326 audit(526467.464:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.152629][ T29] audit: type=1326 audit(526467.464:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.176056][ T29] audit: type=1326 audit(526467.464:11821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.199597][ T29] audit: type=1326 audit(526467.464:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.222957][ T29] audit: type=1326 audit(526467.464:11823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.246390][ T29] audit: type=1326 audit(526467.464:11824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.9.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496163ebe9 code=0x7ffc0000 [ 375.331403][T31227] validate_nla: 12 callbacks suppressed [ 375.331419][T31227] netlink: 'syz.8.11361': attribute type 3 has an invalid length. [ 375.346926][T31227] netlink: 'syz.8.11361': attribute type 3 has an invalid length. [ 375.368019][T31228] __nla_validate_parse: 8 callbacks suppressed [ 375.368040][T31228] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11360'. [ 375.570565][T31258] batman_adv: batadv0: Adding interface: ipvlan2 [ 375.577043][T31258] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.602464][T31258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.613035][T31258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.630609][T31258] batman_adv: batadv0: Interface activated: ipvlan2 [ 375.683984][T31271] atomic_op ffff88811936f128 conn xmit_atomic 0000000000000000 [ 375.716692][T31275] C: renamed from team_slave_0 (while UP) [ 375.724362][T31275] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11385'. [ 375.881704][T31288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 375.881704][T31288] program syz.4.11391 not setting count and/or reply_len properly [ 376.016442][T31296] netlink: 332 bytes leftover after parsing attributes in process `syz.4.11394'. [ 376.262160][T31307] netlink: 'syz.8.11398': attribute type 13 has an invalid length. [ 376.270317][T31307] netlink: 'syz.8.11398': attribute type 17 has an invalid length. [ 376.422087][T31307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.549698][T31333] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11410'. [ 376.588724][T31337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11412'. [ 376.903798][T31378] netlink: 'syz.8.11432': attribute type 21 has an invalid length. [ 377.113147][T31407] loop4: detected capacity change from 0 to 512 [ 377.121480][T31407] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.129853][T31407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 377.160286][T31407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 377.175568][T31407] System zones: 1-12 [ 377.200058][T31407] EXT4-fs (loop4): 1 truncate cleaned up [ 377.211981][T31407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.309893][ T8309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.555246][T31442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11460'. [ 377.564339][T31442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11460'. [ 377.700502][T31459] netem: change failed [ 377.735894][T31465] netlink: 'syz.1.11468': attribute type 4 has an invalid length. [ 377.777694][T31465] netlink: 'syz.1.11468': attribute type 4 has an invalid length. [ 377.833163][T31481] loop3: detected capacity change from 0 to 1024 [ 377.882970][T31481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.949373][T31481] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.11479: inode #187: comm syz.3.11479: iget: illegal inode # [ 377.980341][T31481] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.11479: error while reading EA inode 187 err=-117 [ 378.007433][T31508] netlink: 'syz.9.11491': attribute type 1 has an invalid length. [ 378.066977][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.092715][T31520] ref_ctr_offset mismatch. inode: 0x317 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 378.117176][T31526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11501'. [ 378.466470][T31577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11529'. [ 378.529056][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11522'. [ 378.718201][ T3389] kernel write not supported for file 1155/net/vlan/vlan1 (pid: 3389 comm: kworker/1:4) [ 378.891072][T31608] netlink: 'syz.4.11535': attribute type 1 has an invalid length. [ 378.978899][T31616] openvswitch: netlink: Message has 6 unknown bytes. [ 379.290288][T31651] can0: slcan on ttyS3. [ 379.353964][T31651] can0 (unregistered): slcan off ttyS3. [ 379.413265][T31667] batadv1: entered promiscuous mode [ 379.418542][T31667] batadv1: entered allmulticast mode [ 379.447024][T31674] netem: change failed [ 379.743965][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 379.744063][ T29] audit: type=1326 audit(526472.419:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31714 comm="syz.1.11581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.778504][ T29] audit: type=1326 audit(526472.450:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31714 comm="syz.1.11581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.862327][ T29] audit: type=1326 audit(526472.513:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.885739][ T29] audit: type=1326 audit(526472.513:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.909170][ T29] audit: type=1326 audit(526472.513:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.932687][ T29] audit: type=1326 audit(526472.513:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.956261][ T29] audit: type=1326 audit(526472.513:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 379.979708][ T29] audit: type=1326 audit(526472.545:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 380.003180][ T29] audit: type=1326 audit(526472.545:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 380.026783][ T29] audit: type=1326 audit(526472.545:11973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31718 comm="syz.1.11582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 380.272840][T31743] loop4: detected capacity change from 0 to 164 [ 380.299243][T31743] __nla_validate_parse: 5 callbacks suppressed [ 380.299265][T31743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11596'. [ 380.505440][T31762] netlink: 'syz.8.11605': attribute type 6 has an invalid length. [ 380.671703][T31773] netem: change failed [ 380.865057][T31781] netlink: 'syz.9.11612': attribute type 1 has an invalid length. [ 380.873029][T31781] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11612'. [ 381.121575][T31790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11616'. [ 381.457362][T31800] netem: change failed [ 381.804847][T31817] loop9: detected capacity change from 0 to 512 [ 382.006594][T31817] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11628: bg 0: block 248: padding at end of block bitmap is not set [ 382.035258][T31817] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.11628: Failed to acquire dquot type 1 [ 382.205918][T31817] EXT4-fs (loop9): 1 truncate cleaned up [ 382.213699][T31817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.278663][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.583708][ T3389] IPVS: starting estimator thread 0... [ 382.641025][T31871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11650'. [ 382.668889][T31867] IPVS: using max 1824 ests per chain, 91200 per kthread [ 383.630225][T31960] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11689'. [ 383.657572][T31960] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11689'. [ 383.860920][T31979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11697'. [ 383.909748][T31991] netlink: 'syz.1.11704': attribute type 3 has an invalid length. [ 384.062380][T32023] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 384.172628][T32035] loop3: detected capacity change from 0 to 2048 [ 384.203704][T32035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.220780][T32045] loop4: detected capacity change from 0 to 512 [ 384.230495][T32045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 384.260565][T32045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.335074][T32045] loop4: detected capacity change from 512 to 64 [ 384.515701][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.655089][T32064] netlink: 'syz.1.11735': attribute type 3 has an invalid length. [ 384.679731][T32064] netlink: 'syz.1.11735': attribute type 3 has an invalid length. [ 384.798374][T14501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.854090][T14501] syz_tun (unregistering): left promiscuous mode [ 384.910850][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 384.910870][ T29] audit: type=1326 audit(526477.847:12036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.1.11739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 384.953682][ T29] audit: type=1326 audit(526477.878:12037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.1.11739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 385.008342][ T29] audit: type=1326 audit(526477.941:12038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.1.11739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 385.049116][ T29] audit: type=1326 audit(526477.952:12039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.1.11739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464d0cebe9 code=0x7ffc0000 [ 385.073571][T32084] rdma_op ffff88810a833580 conn xmit_rdma 0000000000000000 [ 385.132140][T32088] batman_adv: batadv0: Adding interface: ipvlan2 [ 385.138655][T32088] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.164078][T32088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.174597][T32088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.199223][T32088] batman_adv: batadv0: Interface activated: ipvlan2 [ 385.206188][T32094] atomic_op ffff88810a833528 conn xmit_atomic 0000000000000000 [ 385.245225][T32103] C: renamed from team_slave_0 (while UP) [ 385.254104][T32103] netlink: 152 bytes leftover after parsing attributes in process `syz.8.11756'. [ 385.304226][ T29] audit: type=1326 audit(526478.256:12040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32113 comm="syz.8.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 385.327776][ T29] audit: type=1326 audit(526478.256:12041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32113 comm="syz.8.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 385.354579][ T29] audit: type=1326 audit(526478.256:12042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32113 comm="syz.8.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 385.377943][ T29] audit: type=1326 audit(526478.256:12043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32113 comm="syz.8.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 385.401285][ T29] audit: type=1326 audit(526478.288:12044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32113 comm="syz.8.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 385.476885][T32134] loop9: detected capacity change from 0 to 1024 [ 385.499003][T32134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.499640][T32106] lo speed is unknown, defaulting to 1000 [ 385.522069][T32134] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.11764: inode #187: comm syz.9.11764: iget: illegal inode # [ 385.535829][T32134] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.11764: error while reading EA inode 187 err=-117 [ 385.563466][T32138] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.570722][T32138] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.582542][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.655610][T32138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.665599][T32138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.713652][T32138] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 385.815848][ T5650] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.847403][ T5650] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.875701][ T5650] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.903200][ T5650] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.935935][T32106] chnl_net:caif_netlink_parms(): no params data found [ 385.979674][T32106] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.986850][T32106] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.995328][T32106] bridge_slave_0: entered allmulticast mode [ 386.001840][T32106] bridge_slave_0: entered promiscuous mode [ 386.009192][T32106] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.016389][T32106] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.023688][T32106] bridge_slave_1: entered allmulticast mode [ 386.030120][T32106] bridge_slave_1: entered promiscuous mode [ 386.049819][T32106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.060328][T32106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.082155][T32106] team0: Port device team_slave_0 added [ 386.088809][T32106] team0: Port device team_slave_1 added [ 386.107242][T32106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.114298][T32106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.140245][T32106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.151734][T32106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.158730][T32106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.184683][T32106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.214797][T32106] hsr_slave_0: entered promiscuous mode [ 386.221110][T32106] hsr_slave_1: entered promiscuous mode [ 386.227168][T32106] debugfs: 'hsr0' already exists in 'hsr' [ 386.232950][T32106] Cannot create hsr debugfs directory [ 386.271553][ T29] audit: type=1326 audit(526479.274:12045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32167 comm="syz.8.11776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 386.508679][T32106] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 386.518732][T32106] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 386.528704][T32106] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 386.538961][T32106] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 386.562136][T32106] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.569347][T32106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.576772][T32106] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.583850][T32106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.618837][T32106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.633031][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.642241][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.656561][T32106] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.667445][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.674667][ T5657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.686310][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.693418][ T5660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.805002][T32180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32180 comm=syz.1.11786 [ 386.822681][T32187] netlink: 'syz.9.11777': attribute type 13 has an invalid length. [ 386.830868][T32187] netlink: 'syz.9.11777': attribute type 17 has an invalid length. [ 386.895407][T32187] $Hÿ: left promiscuous mode [ 386.900370][T32187] bond_slave_0: left promiscuous mode [ 386.905858][T32187] bond_slave_1: left promiscuous mode [ 386.927217][T32187] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 386.944681][T32200] loop3: detected capacity change from 0 to 128 [ 386.972616][T32200] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.024966][T25000] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.039947][T32187] 0ªX¹¦À: left allmulticast mode [ 387.044983][T32187] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 387.062889][T32106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.074436][ T1041] IPVS: starting estimator thread 0... [ 387.153788][T32223] loop9: detected capacity change from 0 to 128 [ 387.164842][T32212] IPVS: using max 2160 ests per chain, 108000 per kthread [ 387.174047][T32227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32227 comm=syz.3.11794 [ 387.271670][T32106] veth0_vlan: entered promiscuous mode [ 387.294594][T32106] veth1_vlan: entered promiscuous mode [ 387.312901][T32106] veth0_macvtap: entered promiscuous mode [ 387.320709][T32106] veth1_macvtap: entered promiscuous mode [ 387.332652][T32106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.344449][T32106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.355825][ T5668] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.365182][ T5668] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.376545][ T5668] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.385483][ T5668] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.446774][T32255] loop7: detected capacity change from 0 to 128 [ 387.462290][T32255] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.519472][T32106] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.555039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.756444][T32298] lo speed is unknown, defaulting to 1000 [ 387.762678][T32297] netlink: 332 bytes leftover after parsing attributes in process `syz.7.11829'. [ 387.796511][T32302] netlink: 268 bytes leftover after parsing attributes in process `syz.3.11821'. [ 387.960957][T32315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32315 comm=syz.7.11826 [ 388.017900][T32325] netlink: '+}[@': attribute type 10 has an invalid length. [ 388.036775][T32325] team0: Device hsr_slave_0 failed to register rx_handler [ 388.176935][T32342] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11849'. [ 388.430177][T32381] loop3: detected capacity change from 0 to 2048 [ 388.438120][T32381] EXT4-fs: Ignoring removed nobh option [ 388.486931][T32385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11856'. [ 388.574383][T32381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.614947][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.681347][T32424] lo speed is unknown, defaulting to 1000 [ 389.705897][T32426] loop9: detected capacity change from 0 to 2048 [ 389.713542][T32426] EXT4-fs: Ignoring removed nobh option [ 389.720735][T32430] netlink: 268 bytes leftover after parsing attributes in process `syz.1.11871'. [ 389.738717][T32426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.781314][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.008111][T32448] loop9: detected capacity change from 0 to 1024 [ 390.022955][T32448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.073703][T27373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.108300][T32461] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11886'. [ 390.131217][T32461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11886'. [ 390.231792][T32478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11895'. [ 390.401973][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 390.401993][ T29] audit: type=1326 audit(526483.600:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.450684][ T29] audit: type=1326 audit(526483.600:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.474541][ T29] audit: type=1326 audit(526483.610:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.497919][ T29] audit: type=1326 audit(526483.610:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.521536][ T29] audit: type=1326 audit(526483.610:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.545376][ T29] audit: type=1326 audit(526483.610:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.568822][ T29] audit: type=1326 audit(526483.610:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.592410][ T29] audit: type=1326 audit(526483.610:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.615974][ T29] audit: type=1326 audit(526483.610:12152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.650627][ T29] audit: type=1326 audit(526483.852:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.8.11901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb985e2ebe9 code=0x7ffc0000 [ 390.789435][T32504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11907'. [ 390.822102][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11907'. [ 390.946958][T32523] loop7: detected capacity change from 0 to 512 [ 390.953922][T32523] EXT4-fs: Ignoring removed mblk_io_submit option [ 390.961607][T32521] bond0: entered promiscuous mode [ 390.963026][T32523] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 390.966809][T32521] bond0: entered allmulticast mode [ 390.989814][T32523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 390.997020][T32521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.998149][T32523] System zones: 1-12 [ 391.008941][T32523] EXT4-fs (loop7): 1 truncate cleaned up [ 391.015263][T32523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.036363][T32521] bond0 (unregistering): Released all slaves [ 391.092287][T32106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.153320][T32542] loop3: detected capacity change from 0 to 512 [ 391.160254][T32542] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 391.170480][T32542] EXT4-fs (loop3): invalid journal inode [ 391.179693][T32542] EXT4-fs (loop3): can't get journal size [ 391.185259][T32547] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11926'. [ 391.199724][T32542] EXT4-fs (loop3): 1 truncate cleaned up [ 391.201858][T32547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11926'. [ 391.215143][T32542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.232203][T32542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.294998][T32555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11930'. [ 391.437624][T32571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11938'. [ 391.447485][T32571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11938'. [ 391.514834][T32578] bond2: entered promiscuous mode [ 391.520012][T32578] bond2: entered allmulticast mode [ 391.568794][T32585] loop3: detected capacity change from 0 to 512 [ 391.582355][T32578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.595732][T32585] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.607874][T32578] bond2 (unregistering): Released all slaves [ 391.615651][T32585] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 391.627053][T32585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 391.638603][T32585] System zones: 1-12 [ 391.645126][T32585] EXT4-fs (loop3): 1 truncate cleaned up [ 391.653060][T32585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.653433][T32595] netlink: 'syz.7.11947': attribute type 13 has an invalid length. [ 391.673714][T32595] netlink: 'syz.7.11947': attribute type 17 has an invalid length. [ 391.819764][T32611] rdma_rxe: rxe_newlink: failed to add bond0 [ 391.868364][T25000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.942668][T32595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.108355][T32637] netlink: 'syz.1.11969': attribute type 1 has an invalid length. [ 392.853242][T32677] lo speed is unknown, defaulting to 1000 [ 392.886786][T32685] macvtap0: refused to change device tx_queue_len [ 392.905431][T32688] netlink: 'syz.1.11985': attribute type 6 has an invalid length. [ 393.011618][T32699] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 393.147668][T32716] team0: Port device team_slave_0 removed [ 393.190440][T32724] loop3: detected capacity change from 0 to 128 [ 393.236073][T32728] netlink: 'syz.7.12011': attribute type 10 has an invalid length. [ 393.262686][T32728] team0: Port device dummy0 added [ 393.280287][T32728] netlink: 'syz.7.12011': attribute type 10 has an invalid length. [ 393.295476][T32736] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 393.308713][T32728] team0: Port device dummy0 removed [ 393.316947][T32728] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 393.414131][T32747] random: crng reseeded on system resumption [ 393.497769][T32754] netlink: 'syz.3.12022': attribute type 13 has an invalid length. [ 393.505775][T32754] netlink: 'syz.3.12022': attribute type 17 has an invalid length. [ 393.522549][T32756] loop9: detected capacity change from 0 to 128 [ 393.571118][T32754] $Hÿ: left promiscuous mode [ 393.576151][T32754] bond_slave_0: left promiscuous mode [ 393.581646][T32754] bond_slave_1: left promiscuous mode [ 393.589787][T32754] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 393.599058][T32754] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.618279][T32754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.643242][T32760] team0: Port device C removed [ 393.988020][ T321] bond1: entered promiscuous mode [ 393.993112][ T321] bond1: entered allmulticast mode [ 394.023750][ T321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.037805][ T321] bond1 (unregistering): Released all slaves [ 394.056252][ T335] netlink: 'syz.9.12041': attribute type 13 has an invalid length. [ 394.064378][ T335] netlink: 'syz.9.12041': attribute type 17 has an invalid length. [ 394.098640][ T335] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 394.222160][ T348] ================================================================== [ 394.230396][ T348] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 394.237800][ T348] [ 394.240120][ T348] read-write to 0xffff88811ee4b210 of 4 bytes by task 347 on cpu 0: [ 394.248092][ T348] io_issue_sqe+0x19c/0x970 [ 394.252604][ T348] io_wq_submit_work+0x3f7/0x5f0 [ 394.257551][ T348] io_worker_handle_work+0x44e/0x9b0 [ 394.262889][ T348] io_wq_worker+0x22e/0x870 [ 394.267406][ T348] ret_from_fork+0xda/0x150 [ 394.271925][ T348] ret_from_fork_asm+0x1a/0x30 [ 394.276707][ T348] [ 394.279069][ T348] read to 0xffff88811ee4b210 of 4 bytes by task 348 on cpu 1: [ 394.286542][ T348] io_flush_timeouts+0x56/0x1d0 [ 394.291412][ T348] __io_commit_cqring_flush+0xeb/0x100 [ 394.296888][ T348] io_issue_sqe+0x7cb/0x970 [ 394.301401][ T348] io_wq_submit_work+0x3f7/0x5f0 [ 394.306362][ T348] io_worker_handle_work+0x44e/0x9b0 [ 394.311693][ T348] io_wq_worker+0x22e/0x870 [ 394.316210][ T348] ret_from_fork+0xda/0x150 [ 394.320716][ T348] ret_from_fork_asm+0x1a/0x30 [ 394.325482][ T348] [ 394.327826][ T348] value changed: 0x00000225 -> 0x00000226 [ 394.333540][ T348] [ 394.335869][ T348] Reported by Kernel Concurrency Sanitizer on: [ 394.342022][ T348] CPU: 1 UID: 0 PID: 348 Comm: iou-wrk-341 Tainted: G W 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 394.355679][ T348] Tainted: [W]=WARN [ 394.359479][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.369540][ T348] ==================================================================