last executing test programs: 1m16.757390091s ago: executing program 32 (id=5087): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d26089c000000a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) 58.844270789s ago: executing program 33 (id=5790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 22.047775975s ago: executing program 34 (id=7160): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 18.571224148s ago: executing program 6 (id=7296): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 18.530384831s ago: executing program 6 (id=7299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 18.459056277s ago: executing program 6 (id=7302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) 18.457573967s ago: executing program 6 (id=7306): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 18.181626679s ago: executing program 6 (id=7313): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x440, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) 17.557692731s ago: executing program 6 (id=7314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_io_uring_setup(0x88e, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) memfd_secret(0x0) 17.55717939s ago: executing program 35 (id=7314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_io_uring_setup(0x88e, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) memfd_secret(0x0) 14.554014355s ago: executing program 7 (id=7388): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 14.526309677s ago: executing program 7 (id=7389): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000008c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @local, @remote}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xfe}}}}}}, 0x0) 14.451657753s ago: executing program 7 (id=7391): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) memfd_secret(0x80000) 14.285975417s ago: executing program 7 (id=7394): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 14.054365425s ago: executing program 7 (id=7397): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) migrate_pages(0x0, 0xfffffffffffffffc, 0x0, &(0x7f0000000680)=0xfffffffffffffffe) 13.692090675s ago: executing program 7 (id=7404): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0xf04601c4a2f46e46}) 13.673400786s ago: executing program 36 (id=7404): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0xf04601c4a2f46e46}) 13.38849655s ago: executing program 5 (id=7415): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x4b) ioprio_get$uid(0x3, 0x0) 13.331123524s ago: executing program 5 (id=7418): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 12.374971892s ago: executing program 5 (id=7427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 12.339039755s ago: executing program 5 (id=7428): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 11.79159638s ago: executing program 5 (id=7432): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 11.094716247s ago: executing program 8 (id=7442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) openat$vcsu(0xffffffffffffff9c, 0x0, 0x20001, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getitimer(0x0, &(0x7f0000000000)) 11.05348836s ago: executing program 8 (id=7445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x4b) ioprio_get$uid(0x3, 0x0) 11.024972432s ago: executing program 5 (id=7446): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x10000, 0x0, 0x0, 0x4, 0xd, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac000000000000000000003b000000000000000002000000000800", "90be8b1c5512406c7f00", [0x8, 0x4000000001ffff]}}) 11.024465062s ago: executing program 8 (id=7447): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000400)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRESDEC=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 10.994477185s ago: executing program 37 (id=7446): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x10000, 0x0, 0x0, 0x4, 0xd, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac000000000000000000003b000000000000000002000000000800", "90be8b1c5512406c7f00", [0x8, 0x4000000001ffff]}}) 10.850800287s ago: executing program 8 (id=7451): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fdatasync(r0) 10.632632054s ago: executing program 8 (id=7456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 10.118101936s ago: executing program 8 (id=7471): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x67e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 10.117295576s ago: executing program 38 (id=7471): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x67e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 8.247487738s ago: executing program 0 (id=7502): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0), 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 8.22407895s ago: executing program 0 (id=7504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8.189886023s ago: executing program 0 (id=7506): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1a02, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, &(0x7f0000000040)) 8.159251055s ago: executing program 0 (id=7507): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 8.039647455s ago: executing program 0 (id=7509): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = semget(0x1, 0x4, 0x20) semop(r2, 0x0, 0x0) 7.869474059s ago: executing program 0 (id=7513): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 7.864855719s ago: executing program 39 (id=7513): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 1.213432831s ago: executing program 3 (id=7800): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 1.142865397s ago: executing program 3 (id=7806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 1.09582524s ago: executing program 3 (id=7810): unshare(0x2c020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) 1.062259373s ago: executing program 3 (id=7813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 936.693424ms ago: executing program 9 (id=7821): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), 0x4) 936.506304ms ago: executing program 9 (id=7822): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="42c3a6a34ab0", 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'veth0_to_hsr\x00'}}, 0x1e) 935.933003ms ago: executing program 3 (id=7823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x9, 0x7fff}, 0x8) 848.98227ms ago: executing program 9 (id=7826): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) unshare(0x2c020400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) lsm_get_self_attr(0x66, &(0x7f00000003c0)={0x0, 0x0, 0xc8, 0xa8, ""/168}, &(0x7f0000000180)=0xc8, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 834.391792ms ago: executing program 9 (id=7827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}, 0x38) 726.52875ms ago: executing program 9 (id=7833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) 661.247866ms ago: executing program 9 (id=7835): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000004c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400604033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177332e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd5339ec2a0f0d1bcae5fa0f5fcbbc7bc190bd06a76a715498fe9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd64338034a084f2013cd1890058a10000c880ac801fe4af", 0xfc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 295.146986ms ago: executing program 1 (id=7843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 281.344287ms ago: executing program 1 (id=7845): socket(0x25, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x13, 0x20, 0xbc, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 260.417068ms ago: executing program 4 (id=7848): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r3, 0x1, 0x20000000, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x0, 0xffffffff, 0x5}}}}, 0x30}}, 0x0) 226.835821ms ago: executing program 1 (id=7849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 212.345442ms ago: executing program 4 (id=7850): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) 151.930687ms ago: executing program 2 (id=7852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x10) connect$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r1) 143.523648ms ago: executing program 4 (id=7853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = memfd_secret(0x80000) ftruncate(r1, 0x3) 133.435579ms ago: executing program 1 (id=7854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x2) 123.76043ms ago: executing program 2 (id=7855): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040)) 100.481162ms ago: executing program 2 (id=7856): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r0, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 100.162212ms ago: executing program 4 (id=7857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 98.707642ms ago: executing program 1 (id=7866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="a6", 0xffffffffffffff90, 0x40854, 0x0, 0xfffffd08) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x10}, 0x142) 79.016013ms ago: executing program 2 (id=7858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x22, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0xc000) 77.006943ms ago: executing program 4 (id=7859): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 44.013236ms ago: executing program 1 (id=7860): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="4f1002f8839db50f6b17361b58", 0xd) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 43.499546ms ago: executing program 4 (id=7861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 39.197946ms ago: executing program 2 (id=7862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 0s ago: executing program 2 (id=7863): setresuid(0xee01, 0x0, 0xffffffffffffffff) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800004, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='fdinfo/3\x00') kernel console output (not intermixed with test programs): vc: denied { write } for pid=18866 comm="syz.3.6476" path="socket:[53224]" dev="sockfs" ino=53224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.785445][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.829245][ T29] audit: type=1400 audit(1755774603.991:7890): avc: denied { setopt } for pid=18869 comm="syz.6.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.848937][ T29] audit: type=1400 audit(1755774603.991:7891): avc: denied { connect } for pid=18869 comm="syz.6.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.868762][ T29] audit: type=1400 audit(1755774603.991:7892): avc: denied { name_connect } for pid=18869 comm="syz.6.6477" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 176.891802][T18875] netlink: 'syz.6.6477': attribute type 4 has an invalid length. [ 176.904710][T18875] netlink: 'syz.6.6477': attribute type 4 has an invalid length. [ 176.915489][ T29] audit: type=1400 audit(1755774604.081:7893): avc: denied { write } for pid=18873 comm="syz.5.6479" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.970062][ T29] audit: type=1400 audit(1755774604.141:7894): avc: denied { read } for pid=18876 comm="syz.5.6480" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.994598][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6480'. [ 177.019821][T10664] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 177.029145][T10664] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 177.125191][T18899] loop0: detected capacity change from 0 to 128 [ 177.134901][T18899] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.148763][T18899] ext4 filesystem being mounted at /1276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.173523][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.241489][T18912] bridge0: port 3(batadv0) entered blocking state [ 177.248076][T18912] bridge0: port 3(batadv0) entered disabled state [ 177.254761][T18912] batadv0: entered allmulticast mode [ 177.262196][T18912] batadv0: entered promiscuous mode [ 177.510559][T18921] ref_ctr_offset mismatch. inode: 0x6a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 177.746477][T10664] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 177.756198][T10664] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 177.825471][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.039819][T18938] loop9: detected capacity change from 0 to 7 [ 178.377880][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6526'. [ 178.386970][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6526'. [ 178.426269][T18975] hub 9-0:1.0: USB hub found [ 178.431106][T18975] hub 9-0:1.0: 8 ports detected [ 178.482412][T18983] loop5: detected capacity change from 0 to 512 [ 178.493178][T18983] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 178.626271][T19001] loop5: detected capacity change from 0 to 512 [ 178.861996][T19001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.877337][T19013] netlink: 'syz.0.6540': attribute type 10 has an invalid length. [ 178.894976][T19013] team0: Port device dummy0 added [ 178.911571][T19013] netlink: 'syz.0.6540': attribute type 10 has an invalid length. [ 178.919491][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.964137][T19001] EXT4-fs (loop5): 1 truncate cleaned up [ 178.980460][T19001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.984016][T19013] team0: Port device dummy0 removed [ 179.005664][T19013] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.076258][T15657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.441513][T19049] netlink: 'syz.0.6552': attribute type 10 has an invalid length. [ 179.476305][T19049] bond0: (slave dummy0): Releasing backup interface [ 179.487669][T19049] team0: Port device dummy0 added [ 179.519477][T19049] team0: Port device dummy0 removed [ 179.534703][T19049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.556835][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6558'. [ 179.654351][T19067] loop6: detected capacity change from 0 to 512 [ 179.671359][T19067] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 179.705117][T19067] EXT4-fs (loop6): 1 truncate cleaned up [ 179.711175][T19067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.793944][T17302] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.027137][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6582'. [ 180.039054][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.134273][T19123] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 180.181240][T19126] loop0: detected capacity change from 0 to 164 [ 180.198413][T19126] syz.0.6599: attempt to access beyond end of device [ 180.198413][T19126] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 180.222460][T19126] syz.0.6599: attempt to access beyond end of device [ 180.222460][T19126] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 180.315288][T19140] bond0: (slave dummy0): Releasing backup interface [ 180.323582][T19141] random: crng reseeded on system resumption [ 180.326026][T19140] team0: Port device dummy0 added [ 180.345326][T19140] validate_nla: 2 callbacks suppressed [ 180.345345][T19140] netlink: 'syz.6.6593': attribute type 10 has an invalid length. [ 180.367016][T19140] team0: Port device dummy0 removed [ 180.375293][T19140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.028848][T19187] loop3: detected capacity change from 0 to 512 [ 181.039793][T19187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.052055][T19187] EXT4-fs (loop3): 1 truncate cleaned up [ 181.058484][T19187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.094034][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.121084][ T1035] hid_parser_main: 44 callbacks suppressed [ 181.121103][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.134603][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.142091][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.149604][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.157099][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.164504][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.171950][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.178992][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.186555][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.194069][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.201635][ T1035] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 181.211425][ T1035] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 181.245420][T19198] __nla_validate_parse: 1 callbacks suppressed [ 181.245457][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6622'. [ 181.260824][T19198] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6622'. [ 181.269955][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6622'. [ 181.279642][T19198] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6622'. [ 181.581264][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6642'. [ 181.665345][T19243] loop3: detected capacity change from 0 to 512 [ 181.679208][T19243] EXT4-fs (loop3): orphan cleanup on readonly fs [ 181.698036][T19243] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 181.715740][T19243] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 181.733133][T19243] EXT4-fs (loop3): 1 truncate cleaned up [ 181.743853][T19243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.756515][T19253] loop0: detected capacity change from 0 to 512 [ 181.774325][T19243] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 181.794115][T19253] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 181.802555][T19243] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 181.828823][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.837905][T19253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 181.845836][T19253] System zones: 1-12 [ 181.857098][T19253] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.6649: corrupted in-inode xattr: e_value size too large [ 181.871815][T19253] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6649: couldn't read orphan inode 15 (err -117) [ 181.886050][T19253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.916336][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.929074][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6658'. [ 181.981812][T19281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6661'. [ 181.997842][T19281] netem: change failed [ 182.014882][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 182.014899][ T29] audit: type=1400 audit(1755774608.896:8159): avc: denied { name_bind } for pid=19282 comm="syz.6.6662" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 182.056083][ T29] audit: type=1400 audit(1755774608.924:8160): avc: denied { create } for pid=19286 comm="syz.1.6664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.075922][ T29] audit: type=1400 audit(1755774608.924:8161): avc: denied { write } for pid=19286 comm="syz.1.6664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.114262][T19292] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6665'. [ 182.124138][T19292] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6665'. [ 182.150933][ T29] audit: type=1400 audit(1755774609.016:8162): avc: denied { create } for pid=19295 comm="syz.0.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.171756][ T29] audit: type=1400 audit(1755774609.035:8163): avc: denied { bind } for pid=19295 comm="syz.0.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.211545][ T29] audit: type=1400 audit(1755774609.081:8164): avc: denied { create } for pid=19302 comm="syz.1.6671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.232763][ T29] audit: type=1400 audit(1755774609.100:8165): avc: denied { listen } for pid=19302 comm="syz.1.6671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.252471][ T29] audit: type=1400 audit(1755774609.100:8166): avc: denied { accept } for pid=19302 comm="syz.1.6671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.303325][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.326465][ T29] audit: type=1400 audit(1755774609.183:8167): avc: denied { audit_write } for pid=19312 comm="syz.0.6676" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 182.347831][ T29] audit: type=1107 audit(1755774609.183:8168): pid=19312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 182.403067][T19321] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 182.500251][T19333] loop6: detected capacity change from 0 to 512 [ 182.523468][T19333] EXT4-fs (loop6): orphan cleanup on readonly fs [ 182.532668][T19333] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 182.554889][T19333] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 182.566671][T19333] EXT4-fs (loop6): 1 truncate cleaned up [ 182.573097][T19333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.589671][T19333] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 182.599303][T19333] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 0 [ 182.621748][T17302] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.653548][T19348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19348 comm=syz.0.6694 [ 183.128067][T19382] loop3: detected capacity change from 0 to 128 [ 183.157155][T19382] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.188423][T19382] ext4 filesystem being mounted at /1250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.229491][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.401837][T19418] loop6: detected capacity change from 0 to 512 [ 183.421377][T19418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.430076][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.434486][T19418] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.483602][T17302] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.643143][T19451] netlink: 'syz.3.6739': attribute type 9 has an invalid length. [ 183.651342][T19451] netlink: 'syz.3.6739': attribute type 9 has an invalid length. [ 183.761674][T19461] loop3: detected capacity change from 0 to 128 [ 184.330706][T19500] block device autoloading is deprecated and will be removed. [ 184.525711][T19509] loop6: detected capacity change from 0 to 164 [ 184.546094][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.554208][T19509] rock: directory entry would overflow storage [ 184.560543][T19509] rock: sig=0x66, size=4, remaining=3 [ 184.646927][T19507] loop0: detected capacity change from 0 to 32768 [ 184.667614][T19526] xt_policy: too many policy elements [ 184.688203][T19528] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 184.696738][T19528] SELinux: failed to load policy [ 184.828703][T19550] netlink: 'syz.0.6782': attribute type 12 has an invalid length. [ 184.836702][T19550] netlink: 'syz.0.6782': attribute type 29 has an invalid length. [ 185.115992][T19595] loop5: detected capacity change from 0 to 512 [ 185.148077][T19595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.176198][T19595] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.223365][T19609] loop3: detected capacity change from 0 to 8192 [ 185.234873][T19609] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.257600][T19609] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 185.266260][T19609] FAT-fs (loop3): Filesystem has been set read-only [ 185.324502][T15657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.469692][T19639] loop5: detected capacity change from 0 to 128 [ 185.564646][T19640] syz.5.6825: attempt to access beyond end of device [ 185.564646][T19640] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 185.582148][T19640] syz.5.6825: attempt to access beyond end of device [ 185.582148][T19640] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 185.598849][T19640] syz.5.6825: attempt to access beyond end of device [ 185.598849][T19640] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 185.612421][T19640] syz.5.6825: attempt to access beyond end of device [ 185.612421][T19640] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 185.632981][T19640] syz.5.6825: attempt to access beyond end of device [ 185.632981][T19640] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 185.663548][T19640] syz.5.6825: attempt to access beyond end of device [ 185.663548][T19640] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 185.677070][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.726789][T19640] syz.5.6825: attempt to access beyond end of device [ 185.726789][T19640] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 185.742800][T19640] syz.5.6825: attempt to access beyond end of device [ 185.742800][T19640] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 185.756443][T19640] syz.5.6825: attempt to access beyond end of device [ 185.756443][T19640] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 185.771001][T19640] syz.5.6825: attempt to access beyond end of device [ 185.771001][T19640] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 185.788835][T19646] loop0: detected capacity change from 0 to 512 [ 185.805794][T19640] syz.5.6825: attempt to access beyond end of device [ 185.805794][T19640] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 185.822875][T19646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.845282][T19640] syz.5.6825: attempt to access beyond end of device [ 185.845282][T19640] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 185.858834][T19646] ext4 filesystem being mounted at /1357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.860017][T19640] syz.5.6825: attempt to access beyond end of device [ 185.860017][T19640] loop5: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 185.883698][T19640] syz.5.6825: attempt to access beyond end of device [ 185.883698][T19640] loop5: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 185.972470][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.169265][T19666] loop1: detected capacity change from 0 to 32768 [ 186.799546][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.995924][T19702] loop1: detected capacity change from 0 to 512 [ 187.026685][T19702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.065882][T19702] ext4 filesystem being mounted at /1410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.111813][T19713] loop3: detected capacity change from 0 to 512 [ 187.157494][T19713] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6856: casefold flag without casefold feature [ 187.182386][T19713] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6856: couldn't read orphan inode 15 (err -117) [ 187.233366][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.246099][T19713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.358160][T19732] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19732 comm=syz.1.6863 [ 187.496065][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 187.496083][ T29] audit: type=1326 audit(1755774613.954:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.550976][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.611497][ T29] audit: type=1326 audit(1755774613.954:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.635265][ T29] audit: type=1326 audit(1755774613.954:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.659145][ T29] audit: type=1326 audit(1755774613.954:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.682754][ T29] audit: type=1326 audit(1755774613.954:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.706332][ T29] audit: type=1326 audit(1755774613.954:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.729902][ T29] audit: type=1326 audit(1755774613.954:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.753525][ T29] audit: type=1326 audit(1755774613.954:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.777033][ T29] audit: type=1326 audit(1755774613.954:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.800575][ T29] audit: type=1326 audit(1755774613.954:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19741 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 187.926259][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.959711][T19766] 9pnet_fd: Insufficient options for proto=fd [ 188.005869][T19774] loop5: detected capacity change from 0 to 512 [ 188.026640][T19774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.061368][T19774] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.102699][T19774] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.6881: corrupted inode contents [ 188.109271][T19784] vlan0: entered allmulticast mode [ 188.119923][T19784] dummy0: entered allmulticast mode [ 188.148239][T19774] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.6881: mark_inode_dirty error [ 188.160838][T19774] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.6881: corrupted inode contents [ 188.173338][T19774] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.6881: mark_inode_dirty error [ 188.200100][T15657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.329166][T19811] loop0: detected capacity change from 0 to 512 [ 188.338159][T19813] loop3: detected capacity change from 0 to 256 [ 188.342269][T19811] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6898: casefold flag without casefold feature [ 188.358128][T19811] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6898: couldn't read orphan inode 15 (err -117) [ 188.377067][T19816] loop5: detected capacity change from 0 to 1024 [ 188.384497][T19811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.393592][T19816] EXT4-fs: Ignoring removed oldalloc option [ 188.408275][T19816] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 188.432391][T19816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.449328][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.455391][T19816] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 188.491351][T15657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.713156][T19865] __nla_validate_parse: 17 callbacks suppressed [ 188.713191][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6916'. [ 188.964887][T19909] vhci_hcd: invalid port number 96 [ 188.970141][T19909] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 189.011046][T19916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6936'. [ 189.053094][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.060780][T19923] netlink: 'syz.5.6940': attribute type 10 has an invalid length. [ 189.068743][T19923] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6940'. [ 189.078008][T19901] loop6: detected capacity change from 0 to 32768 [ 189.079626][T19923] dummy0: entered promiscuous mode [ 189.090470][T19923] bond0: (slave dummy0): Releasing backup interface [ 189.104928][T19923] bridge0: port 4(dummy0) entered blocking state [ 189.111475][T19923] bridge0: port 4(dummy0) entered disabled state [ 189.117911][T19923] dummy0: entered allmulticast mode [ 189.931156][T18034] hid_parser_main: 22 callbacks suppressed [ 189.931177][T18034] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 189.944530][T18034] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 189.951930][T18034] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 189.967855][T18034] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 189.997324][T19970] netlink: 'syz.0.6961': attribute type 1 has an invalid length. [ 190.044675][T19979] loop1: detected capacity change from 0 to 764 [ 190.052680][T19979] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 190.160468][T19991] loop3: detected capacity change from 0 to 4096 [ 190.172026][T19993] bridge: RTM_NEWNEIGH with invalid ether address [ 190.180052][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.205547][T19991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.276531][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.356290][T20017] loop1: detected capacity change from 0 to 512 [ 190.363492][T20017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.379242][T20017] EXT4-fs (loop1): 1 truncate cleaned up [ 190.386217][T20017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.415109][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.689212][T20053] loop3: detected capacity change from 0 to 2048 [ 190.697238][T20053] EXT4-fs: inline encryption not supported [ 190.712612][T20053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.727417][T20053] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.6998: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 190.756361][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.997939][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7014'. [ 191.026828][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7014'. [ 191.119132][T20107] loop3: detected capacity change from 0 to 2048 [ 191.174861][T20119] loop5: detected capacity change from 0 to 128 [ 191.182168][T20107] loop3: p1 < > p4 [ 191.186851][T20107] loop3: p4 size 8388608 extends beyond EOD, truncated [ 191.210691][T20119] bio_check_eod: 97 callbacks suppressed [ 191.210712][T20119] syz.5.7030: attempt to access beyond end of device [ 191.210712][T20119] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 191.232134][T20119] syz.5.7030: attempt to access beyond end of device [ 191.232134][T20119] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 191.245861][T20119] syz.5.7030: attempt to access beyond end of device [ 191.245861][T20119] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 191.283010][T20119] syz.5.7030: attempt to access beyond end of device [ 191.283010][T20119] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 191.306637][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.311858][T20119] syz.5.7030: attempt to access beyond end of device [ 191.311858][T20119] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 191.324344][T20127] SELinux: failed to load policy [ 191.336890][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7034'. [ 191.373145][T20119] syz.5.7030: attempt to access beyond end of device [ 191.373145][T20119] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 191.405588][T20119] syz.5.7030: attempt to access beyond end of device [ 191.405588][T20119] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 191.425477][T20119] syz.5.7030: attempt to access beyond end of device [ 191.425477][T20119] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 191.440172][T20119] syz.5.7030: attempt to access beyond end of device [ 191.440172][T20119] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 191.454392][T20119] syz.5.7030: attempt to access beyond end of device [ 191.454392][T20119] loop5: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 191.474182][T20141] vhci_hcd: invalid port number 96 [ 191.479392][T20141] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 191.532602][T20153] rdma_op ffff8881002a7d80 conn xmit_rdma 0000000000000000 [ 191.625567][T20167] loop0: detected capacity change from 0 to 1024 [ 191.675950][T20167] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.686934][T20167] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.722821][T20167] JBD2: no valid journal superblock found [ 191.728680][T20167] EXT4-fs (loop0): Could not load journal inode [ 191.766016][T20167] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 192.061160][T20246] netlink: 'syz.3.7064': attribute type 6 has an invalid length. [ 192.223473][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7071'. [ 192.235009][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7071'. [ 192.247196][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7071'. [ 192.257562][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7071'. [ 192.433297][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.843279][T20306] loop5: detected capacity change from 0 to 164 [ 192.878587][T20311] loop6: detected capacity change from 0 to 164 [ 192.898107][T20311] rock: directory entry would overflow storage [ 192.904635][T20311] rock: sig=0x66, size=4, remaining=3 [ 192.988884][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 192.988901][ T29] audit: type=1400 audit(1755774619.031:8826): avc: denied { read } for pid=20318 comm="syz.0.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.062212][ T29] audit: type=1400 audit(1755774619.068:8827): avc: denied { read } for pid=20320 comm="syz.5.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 193.121030][T20325] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 193.152946][ T29] audit: type=1400 audit(1755774619.160:8828): avc: denied { relabelto } for pid=20322 comm="syz.1.7102" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 193.180630][ T29] audit: type=1400 audit(1755774619.160:8829): avc: denied { associate } for pid=20322 comm="syz.1.7102" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 193.260930][T20349] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.289204][ T29] audit: type=1400 audit(1755774619.206:8830): avc: denied { bind } for pid=20337 comm="syz.3.7108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.309374][ T29] audit: type=1326 audit(1755774619.253:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 193.332970][ T29] audit: type=1326 audit(1755774619.253:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 193.356539][ T29] audit: type=1326 audit(1755774619.253:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 193.380229][ T29] audit: type=1326 audit(1755774619.253:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 193.403852][ T29] audit: type=1326 audit(1755774619.253:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d805ebe9 code=0x7ffc0000 [ 193.560162][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.662767][T20378] bridge0: port 4(macsec1) entered blocking state [ 193.669391][T20378] bridge0: port 4(macsec1) entered disabled state [ 193.678368][T20378] macsec1: entered allmulticast mode [ 193.695598][T20378] macsec1: left allmulticast mode [ 193.840556][T20386] loop3: detected capacity change from 0 to 128 [ 193.873310][T20386] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.912317][T20386] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.043934][T20395] tipc: Started in network mode [ 194.048884][T20395] tipc: Node identity ac14140f, cluster identity 4711 [ 194.072813][T20395] tipc: New replicast peer: 255.255.255.255 [ 194.078952][T20395] tipc: Enabled bearer , priority 10 [ 194.086239][T20399] netlink: 'syz.3.7133': attribute type 21 has an invalid length. [ 194.096401][T20399] netlink: 'syz.3.7133': attribute type 1 has an invalid length. [ 194.194345][T20412] loop1: detected capacity change from 0 to 128 [ 194.260096][T20422] __nla_validate_parse: 8 callbacks suppressed [ 194.260114][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7144'. [ 194.275370][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7144'. [ 194.686848][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.749548][T20460] chnl_net:caif_netlink_parms(): no params data found [ 194.792240][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7166'. [ 194.812700][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.819962][T20460] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.827219][T20460] bridge_slave_0: entered allmulticast mode [ 194.833772][T20460] bridge_slave_0: entered promiscuous mode [ 194.840537][T20460] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.847690][T20460] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.854877][T20460] bridge_slave_1: entered allmulticast mode [ 194.861611][T20460] bridge_slave_1: entered promiscuous mode [ 194.885623][T20212] bridge_slave_1: left allmulticast mode [ 194.891322][T20212] bridge_slave_1: left promiscuous mode [ 194.897125][T20212] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.905008][T20212] bridge_slave_0: left allmulticast mode [ 194.910680][T20212] bridge_slave_0: left promiscuous mode [ 194.916434][T20212] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.943907][T20212] team0: Port device geneve1 removed [ 194.991905][T20212] bond0 (unregistering): left promiscuous mode [ 194.998273][T20212] bond_slave_0: left promiscuous mode [ 195.003893][T20212] bond_slave_1: left promiscuous mode [ 195.013788][T20212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.024833][T20212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.034269][T20212] bond0 (unregistering): Released all slaves [ 195.055325][T20212] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 195.063409][T20212] vxcan3: left promiscuous mode [ 195.071687][T20212] bond1 (unregistering): Released all slaves [ 195.093329][T20460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.105808][T20496] netlink: 664 bytes leftover after parsing attributes in process `syz.6.7174'. [ 195.107895][T20460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.150970][T20460] team0: Port device team_slave_0 added [ 195.156783][T15545] tipc: Node number set to 2886997007 [ 195.162479][T20501] loop0: detected capacity change from 0 to 512 [ 195.167169][T20460] team0: Port device team_slave_1 added [ 195.179008][T20501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.191659][T20501] ext4 filesystem being mounted at /1429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.202719][T20212] tipc: Disabling bearer [ 195.208120][T20212] tipc: Left network mode [ 195.215242][T20460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.222290][T20460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.248433][T20460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.259803][T20460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.266878][T20460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.292827][T20460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.303791][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.320025][T20212] hsr_slave_0: left promiscuous mode [ 195.325777][T20212] hsr_slave_1: left promiscuous mode [ 195.359504][T20509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7179'. [ 195.375369][T20212] team0 (unregistering): Port device team_slave_1 removed [ 195.395390][T20212] team0 (unregistering): Port device team_slave_0 removed [ 195.436696][T20460] hsr_slave_0: entered promiscuous mode [ 195.443456][T20460] hsr_slave_1: entered promiscuous mode [ 195.516415][T20522] SELinux: failed to load policy [ 195.562256][T20460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.574907][T20460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.591803][T20460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.614199][T20460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 195.654588][T20212] IPVS: stop unused estimator thread 0... [ 195.693683][T20460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.711439][T20460] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.721987][T20199] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.729154][T20199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.738465][T20553] vhci_hcd: invalid port number 96 [ 195.743700][T20553] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 195.753853][T20460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.764382][T20460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.794619][T20199] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.801847][T20199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.832312][T20570] netlink: 664 bytes leftover after parsing attributes in process `syz.5.7204'. [ 195.869641][T20460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.901939][T20580] loop3: detected capacity change from 0 to 512 [ 195.914755][T20580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.928134][T20580] ext4 filesystem being mounted at /1373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.983929][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.096005][T20609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7214'. [ 196.156428][T20460] veth0_vlan: entered promiscuous mode [ 196.173360][T20460] veth1_vlan: entered promiscuous mode [ 196.216864][T20460] veth0_macvtap: entered promiscuous mode [ 196.225763][T20460] veth1_macvtap: entered promiscuous mode [ 196.239514][T20460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.250600][T20460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.260654][T20209] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.277372][T20209] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.297939][T20209] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.322835][T20209] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.452541][T20664] SELinux: ebitmap: truncated map [ 196.460531][T20664] SELinux: failed to load policy [ 197.307796][T20725] loop7: detected capacity change from 0 to 512 [ 197.348946][T20725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.349004][T20727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.349081][T20727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.371191][T20725] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.413595][T20725] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.7260: corrupted inode contents [ 197.430372][T20725] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.7260: mark_inode_dirty error [ 197.467594][T20725] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.7260: corrupted inode contents [ 197.507575][T20725] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.7260: mark_inode_dirty error [ 197.549972][T20755] loop5: detected capacity change from 0 to 512 [ 197.561023][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.573562][T20755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.587269][T20755] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.649155][T20767] vhci_hcd: invalid port number 96 [ 197.654325][T20767] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 197.693928][T15657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.718347][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7282'. [ 197.727502][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7282'. [ 197.793300][T20793] loop0: detected capacity change from 0 to 512 [ 197.812317][T20797] loop7: detected capacity change from 0 to 1024 [ 197.819204][T20797] EXT4-fs: Ignoring removed oldalloc option [ 197.829013][T20797] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 197.830545][T20793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.864594][T20797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.872165][T20793] ext4 filesystem being mounted at /1456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.923010][T20793] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.7288: corrupted inode contents [ 197.940539][T20793] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.7288: mark_inode_dirty error [ 197.953707][T20793] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.7288: corrupted inode contents [ 197.961436][T20797] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 197.999514][T20793] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.7288: mark_inode_dirty error [ 198.024757][T20811] netlink: 'syz.5.7294': attribute type 3 has an invalid length. [ 198.047098][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.071725][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.159787][T20832] netlink: 'syz.7.7305': attribute type 10 has an invalid length. [ 198.167703][T20832] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7305'. [ 198.169169][T20834] loop6: detected capacity change from 0 to 512 [ 198.183743][T20834] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 198.185397][T20832] dummy0: entered promiscuous mode [ 198.196056][T20834] EXT4-fs (loop6): invalid journal inode [ 198.198507][T20832] bridge0: port 3(dummy0) entered blocking state [ 198.207296][T20834] EXT4-fs (loop6): can't get journal size [ 198.209247][T20832] bridge0: port 3(dummy0) entered disabled state [ 198.217219][T20834] EXT4-fs (loop6): 1 truncate cleaned up [ 198.227590][T20834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.242635][T20832] dummy0: entered allmulticast mode [ 198.248874][T20832] bridge0: port 3(dummy0) entered blocking state [ 198.255286][T20832] bridge0: port 3(dummy0) entered forwarding state [ 198.269436][T20842] loop3: detected capacity change from 0 to 1024 [ 198.276638][T20842] EXT4-fs: Ignoring removed oldalloc option [ 198.282949][T20842] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 198.296223][T20842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.309057][T20834] loop6: detected capacity change from 512 to 0 [ 198.319797][T20834] bio_check_eod: 85 callbacks suppressed [ 198.319815][T20834] syz.6.7306: attempt to access beyond end of device [ 198.319815][T20834] loop6: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 198.347050][T20842] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 198.347350][T20834] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.7306: reading directory lblock 0 [ 198.366811][T20834] syz.6.7306: attempt to access beyond end of device [ 198.366811][T20834] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 198.380088][T20834] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 198.389004][T20834] EXT4-fs (loop6): I/O error while writing superblock [ 198.390003][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.418246][T17302] syz-executor: attempt to access beyond end of device [ 198.418246][T17302] loop6: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 198.420154][T20853] loop3: detected capacity change from 0 to 512 [ 198.434421][T17302] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 198.452329][T17302] syz-executor: attempt to access beyond end of device [ 198.452329][T17302] loop6: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 198.459157][T20853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.466379][T17302] syz-executor: attempt to access beyond end of device [ 198.466379][T17302] loop6: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 198.478707][T20853] ext4 filesystem being mounted at /1393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.495240][T17302] syz-executor: attempt to access beyond end of device [ 198.495240][T17302] loop6: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 198.518029][T17302] syz-executor: attempt to access beyond end of device [ 198.518029][T17302] loop6: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 198.523761][T20853] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7312: corrupted inode contents [ 198.531834][T17302] syz-executor: attempt to access beyond end of device [ 198.531834][T17302] loop6: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 198.545131][T20853] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.7312: mark_inode_dirty error [ 198.557552][T17302] syz-executor: attempt to access beyond end of device [ 198.557552][T17302] loop6: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 198.569636][T20853] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7312: corrupted inode contents [ 198.582673][T17302] syz-executor: attempt to access beyond end of device [ 198.582673][T17302] loop6: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 198.595252][T20853] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7312: mark_inode_dirty error [ 198.607575][T17302] EXT4-fs error (device loop6): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 198.631197][T17302] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 198.639452][T17302] EXT4-fs (loop6): I/O error while writing superblock [ 198.646285][T17302] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: IO failure [ 198.656319][T17302] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 198.664653][T17302] EXT4-fs (loop6): I/O error while writing superblock [ 198.671436][T17302] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 198.683036][T17302] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 198.685252][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.691350][T17302] EXT4-fs (loop6): I/O error while writing superblock [ 198.721245][T20209] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:54: unable to read itable block [ 198.735048][T20209] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 198.743324][T20209] EXT4-fs (loop6): I/O error while writing superblock [ 198.750691][T17950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.759860][T17950] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 198.769090][T17950] EXT4-fs (loop6): I/O error while writing superblock [ 199.004419][T20198] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.055528][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 199.055595][ T29] audit: type=1400 audit(1755774624.624:9034): avc: denied { mounton } for pid=20861 comm="syz.5.7318" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 199.100693][T20198] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.113294][ T29] audit: type=1400 audit(1755774624.680:9035): avc: denied { unmount } for pid=15657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.185878][T20198] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.241003][T20198] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.368891][T20198] bridge_slave_1: left allmulticast mode [ 199.374726][T20198] bridge_slave_1: left promiscuous mode [ 199.380493][T20198] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.398695][T20198] bridge_slave_0: left allmulticast mode [ 199.404459][T20198] bridge_slave_0: left promiscuous mode [ 199.410270][T20198] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.424804][T20882] netlink: 'syz.7.7321': attribute type 1 has an invalid length. [ 199.514178][T20890] loop3: detected capacity change from 0 to 512 [ 199.521016][T20889] loop7: detected capacity change from 0 to 764 [ 199.545643][T20890] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 199.555419][T20889] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 199.566022][T20890] EXT4-fs (loop3): invalid journal inode [ 199.580613][T20890] EXT4-fs (loop3): can't get journal size [ 199.590491][T20890] EXT4-fs (loop3): 1 truncate cleaned up [ 199.598511][T20890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.621499][ T29] audit: type=1326 audit(1755774625.150:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.659826][T20890] loop3: detected capacity change from 512 to 0 [ 199.671250][T20890] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.7325: reading directory lblock 0 [ 199.683389][T20198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.694561][T20198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.719330][ T29] audit: type=1326 audit(1755774625.150:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.743032][ T29] audit: type=1326 audit(1755774625.150:9038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.766587][ T29] audit: type=1326 audit(1755774625.150:9039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.790197][ T29] audit: type=1326 audit(1755774625.150:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.813823][ T29] audit: type=1326 audit(1755774625.150:9041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.837353][ T29] audit: type=1326 audit(1755774625.150:9042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.860876][ T29] audit: type=1326 audit(1755774625.150:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9a3aebe9 code=0x7ffc0000 [ 199.884996][T20890] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 199.893379][T20890] EXT4-fs (loop3): I/O error while writing superblock [ 199.910192][ T3309] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 199.924404][ T3309] EXT4-fs error (device loop3): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 199.937737][ T3309] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 199.948430][T20198] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 199.952402][ T3309] EXT4-fs (loop3): I/O error while writing superblock [ 199.963308][ T3309] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: IO failure [ 199.988865][T20198] bond0 (unregistering): Released all slaves [ 199.990669][ T3309] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 200.003294][ T3309] EXT4-fs (loop3): I/O error while writing superblock [ 200.010274][ T3309] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 200.040884][ T3309] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 200.049461][ T3309] EXT4-fs (loop3): I/O error while writing superblock [ 200.105234][T20865] chnl_net:caif_netlink_parms(): no params data found [ 200.155437][T20209] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:54: unable to read itable block [ 200.184278][T20198] hsr_slave_0: left promiscuous mode [ 200.189989][T20209] EXT4-fs (loop3): I/O error while writing superblock [ 200.200829][T20198] hsr_slave_1: left promiscuous mode [ 200.207056][ T9918] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.221218][T20198] veth1_macvtap: left promiscuous mode [ 200.236305][T20198] veth0_macvtap: left promiscuous mode [ 200.241953][ T9918] EXT4-fs (loop3): I/O error while writing superblock [ 200.254729][T20198] veth1_vlan: left promiscuous mode [ 200.265139][T20198] veth0_vlan: left promiscuous mode [ 200.353029][T20198] team0 (unregistering): Port device team_slave_1 removed [ 200.366316][T20198] team0 (unregistering): Port device team_slave_0 removed [ 200.400589][T20865] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.407831][T20865] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.415215][T20865] bridge_slave_0: entered allmulticast mode [ 200.422469][T20865] bridge_slave_0: entered promiscuous mode [ 200.431135][T20865] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.438317][T20865] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.449592][T20865] bridge_slave_1: entered allmulticast mode [ 200.457127][T20865] bridge_slave_1: entered promiscuous mode [ 200.465305][ T9918] team0: Port device vlan2 removed [ 200.509068][T20865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.538728][T20865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.577811][T20865] team0: Port device team_slave_0 added [ 200.592825][T20865] team0: Port device team_slave_1 added [ 200.620250][T20934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7344'. [ 200.642519][T20865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.649579][T20865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.675575][T20865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.691264][T20934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7344'. [ 200.718312][T20865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.725439][T20865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.751536][T20865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.795798][T20947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.807036][T20947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.817732][T20865] hsr_slave_0: entered promiscuous mode [ 200.823906][T20865] hsr_slave_1: entered promiscuous mode [ 200.831624][T20865] debugfs: 'hsr0' already exists in 'hsr' [ 200.837371][T20865] Cannot create hsr debugfs directory [ 201.011955][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.019455][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.026914][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.034371][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.041867][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.043185][T20865] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.049304][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.063422][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.070873][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.078412][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.085859][T15539] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 201.096113][T15539] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 201.104477][T20865] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.139023][T20865] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.164635][T20865] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.261888][T20939] chnl_net:caif_netlink_parms(): no params data found [ 201.276482][T20198] batadv1: left allmulticast mode [ 201.281574][T20198] batadv1: left promiscuous mode [ 201.286796][T20198] bridge0: port 3(batadv1) entered disabled state [ 201.294549][T20198] bridge_slave_1: left allmulticast mode [ 201.300304][T20198] bridge_slave_1: left promiscuous mode [ 201.306050][T20198] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.314022][T20198] bridge_slave_0: left allmulticast mode [ 201.319733][T20198] bridge_slave_0: left promiscuous mode [ 201.325572][T20198] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.368752][T20198] team0: Port device geneve1 removed [ 201.475209][T21002] rdma_op ffff88812b347180 conn xmit_rdma 0000000000000000 [ 201.494430][T20199] smc: removing ib device syz2 [ 201.499531][T20198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.510967][T20198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.521369][T20198] bond0 (unregistering): Released all slaves [ 201.555713][T21009] loop7: detected capacity change from 0 to 512 [ 201.563175][T21009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 201.594359][T21009] EXT4-fs (loop7): 1 truncate cleaned up [ 201.603560][T21009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.644677][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.713251][T20939] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.720390][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.733136][T20939] bridge_slave_0: entered allmulticast mode [ 201.746403][T20939] bridge_slave_0: entered promiscuous mode [ 201.798856][T20865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.818122][T20939] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.825216][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.839980][T20939] bridge_slave_1: entered allmulticast mode [ 201.848401][T20939] bridge_slave_1: entered promiscuous mode [ 201.857931][T21030] SELinux: failed to load policy [ 201.875332][T20198] hsr_slave_0: left promiscuous mode [ 201.888060][T20198] hsr_slave_1: left promiscuous mode [ 201.901751][T20198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.932427][T20198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.943061][T21039] netlink: 348 bytes leftover after parsing attributes in process `syz.5.7383'. [ 202.004983][T20198] team0 (unregistering): Port device team_slave_1 removed [ 202.025341][T20198] team0 (unregistering): Port device team_slave_0 removed [ 202.075520][T20939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.088806][T20939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.101251][T20865] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.132234][T20174] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.139364][T20174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.156271][T20212] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.163391][T20212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.176207][T20939] team0: Port device team_slave_0 added [ 202.183024][T20939] team0: Port device team_slave_1 added [ 202.203750][T20939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.210795][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.236800][T20939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.248235][T20939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.255355][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.281277][T20939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.326025][T21064] loop7: detected capacity change from 0 to 512 [ 202.334784][T21064] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 202.337744][T20865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.353348][T20865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.359057][T21064] EXT4-fs (loop7): invalid journal inode [ 202.371581][T21064] EXT4-fs (loop7): can't get journal size [ 202.384435][T20939] hsr_slave_0: entered promiscuous mode [ 202.392251][T21064] EXT4-fs (loop7): 1 truncate cleaned up [ 202.393103][T20939] hsr_slave_1: entered promiscuous mode [ 202.398366][T21064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.404409][T20939] debugfs: 'hsr0' already exists in 'hsr' [ 202.421379][T20939] Cannot create hsr debugfs directory [ 202.466364][T21064] loop7: detected capacity change from 512 to 0 [ 202.480212][T21064] EXT4-fs error (device loop7): __ext4_find_entry:1615: inode #2: comm syz.7.7394: reading directory lblock 0 [ 202.496413][T21074] loop5: detected capacity change from 0 to 2048 [ 202.502205][T21064] EXT4-fs (loop7): I/O error while writing superblock [ 202.520121][T21068] EXT4-fs error (device loop7): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 202.532985][T20865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.543774][T20460] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 202.553776][T21074] loop5: p1 < > p4 [ 202.563647][T21068] EXT4-fs (loop7): I/O error while writing superblock [ 202.564357][T20198] IPVS: stop unused estimator thread 0... [ 202.570464][T21068] EXT4-fs error (device loop7): ext4_check_bdev_write_error:228: comm ext4lazyinit: Error while async write back metadata [ 202.589127][T20460] EXT4-fs error (device loop7): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 202.604023][T21074] loop5: p4 size 8388608 extends beyond EOD, truncated [ 202.613188][T20460] EXT4-fs (loop7): I/O error while writing superblock [ 202.618350][T21068] EXT4-fs (loop7): previous I/O error to superblock detected [ 202.620053][T20460] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: IO failure [ 202.627548][T21068] EXT4-fs (loop7): I/O error while writing superblock [ 202.647878][T20460] EXT4-fs (loop7): I/O error while writing superblock [ 202.654827][T20460] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 202.673198][T20460] EXT4-fs (loop7): I/O error while writing superblock [ 202.689737][T20209] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:54: unable to read itable block [ 202.705121][T20209] EXT4-fs (loop7): I/O error while writing superblock [ 202.712506][T20460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.793942][T20865] veth0_vlan: entered promiscuous mode [ 202.803390][T20865] veth1_vlan: entered promiscuous mode [ 202.819413][T20865] veth0_macvtap: entered promiscuous mode [ 202.828819][T20865] veth1_macvtap: entered promiscuous mode [ 202.839784][T20865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.851005][T20865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.862625][T20198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.881485][T20189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.912669][T20189] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.939528][T20939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.965400][T20189] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.974445][T20939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.997100][T21110] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7407'. [ 203.011753][T20198] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.028412][T21113] loop0: detected capacity change from 0 to 128 [ 203.035177][T20939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.053786][T20939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.070955][T21113] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.092818][T21113] ext4 filesystem being mounted at /1481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.120687][T20198] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.132455][T21113] EXT4-fs (loop0): shut down requested (1) [ 203.132689][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7412'. [ 203.162175][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.185125][T20198] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.231952][T20198] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.258172][T20939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.280186][T20939] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.303982][T20200] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.311100][T20200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.331979][T20939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.342480][T20939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.363914][T20200] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.371100][T20200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.404243][T20198] dummy0: left allmulticast mode [ 203.409833][T20198] bridge0: port 3(dummy0) entered disabled state [ 203.421274][T20198] bridge_slave_1: left allmulticast mode [ 203.426983][T20198] bridge_slave_1: left promiscuous mode [ 203.432771][T20198] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.442432][T20198] bridge_slave_0: left allmulticast mode [ 203.448188][T20198] bridge_slave_0: left promiscuous mode [ 203.454023][T20198] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.531990][T20198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.542550][T20198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.552033][T20198] bond0 (unregistering): Released all slaves [ 203.602872][T20198] hsr_slave_0: left promiscuous mode [ 203.609218][T20198] hsr_slave_1: left promiscuous mode [ 203.617429][T20198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.624854][T20198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.632499][T20198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.640039][T20198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.650877][T20198] veth1_macvtap: left promiscuous mode [ 203.656511][T20198] veth0_macvtap: left promiscuous mode [ 203.662245][T20198] veth1_vlan: left promiscuous mode [ 203.667558][T20198] veth0_vlan: left promiscuous mode [ 203.739172][T20198] team0 (unregistering): Port device team_slave_1 removed [ 203.748952][T20198] team0 (unregistering): Port device team_slave_0 removed [ 203.819861][T20939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.833712][T21114] chnl_net:caif_netlink_parms(): no params data found [ 203.892859][T21114] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.900099][T21114] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.907690][T21114] bridge_slave_0: entered allmulticast mode [ 203.914119][T21114] bridge_slave_0: entered promiscuous mode [ 203.921105][T21114] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.928241][T21114] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.935630][T21114] bridge_slave_1: entered allmulticast mode [ 203.943378][T21114] bridge_slave_1: entered promiscuous mode [ 203.961718][T21114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.972621][T21114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.995947][T21114] team0: Port device team_slave_0 added [ 204.002829][T21114] team0: Port device team_slave_1 added [ 204.025548][T20939] veth0_vlan: entered promiscuous mode [ 204.032159][T21114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.039243][T21114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.065278][T21114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.077283][T21114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.084281][T21114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.110232][T21114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.139345][T21114] hsr_slave_0: entered promiscuous mode [ 204.145564][T21114] hsr_slave_1: entered promiscuous mode [ 204.160224][T20939] veth1_vlan: entered promiscuous mode [ 204.192339][T20939] veth0_macvtap: entered promiscuous mode [ 204.214210][T20939] veth1_macvtap: entered promiscuous mode [ 204.231925][T21190] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7426'. [ 204.252687][T21192] loop5: detected capacity change from 0 to 512 [ 204.268621][T20939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.273915][T21194] loop0: detected capacity change from 0 to 1024 [ 204.281580][T21192] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 204.283241][T21194] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.301536][T21194] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.306624][T21114] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 204.318822][T21192] EXT4-fs (loop5): invalid journal inode [ 204.320072][T21194] JBD2: no valid journal superblock found [ 204.330275][T21194] EXT4-fs (loop0): Could not load journal inode [ 204.334080][T21114] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 204.343353][T21192] EXT4-fs (loop5): can't get journal size [ 204.352512][T20939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.360988][T21114] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 204.368308][T21192] EXT4-fs (loop5): 1 truncate cleaned up [ 204.371098][T21194] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 204.376140][T21192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.386823][T21114] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 204.415615][T20199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.428102][T20199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.440446][T20199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.449897][T20199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.459411][T21192] loop5: detected capacity change from 512 to 0 [ 204.466338][T21205] bio_check_eod: 73 callbacks suppressed [ 204.466353][T21205] syz.5.7428: attempt to access beyond end of device [ 204.466353][T21205] loop5: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 204.527172][T21205] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.7428: reading directory lblock 0 [ 204.562463][T21114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.584841][T21205] syz.5.7428: attempt to access beyond end of device [ 204.584841][T21205] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 204.598192][T21205] buffer_io_error: 10 callbacks suppressed [ 204.598208][T21205] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 204.623211][T21114] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.638708][T20222] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.645864][T20222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.660897][T21205] EXT4-fs (loop5): I/O error while writing superblock [ 204.672479][T20222] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.679662][T20222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.701106][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 204.701124][ T29] audit: type=1326 audit(1755774629.830:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f023fb45ba7 code=0x7ffc0000 [ 204.702065][T21114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.707304][ T29] audit: type=1326 audit(1755774629.830:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f023faeadd9 code=0x7ffc0000 [ 204.730744][T21114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.778358][T15657] syz-executor: attempt to access beyond end of device [ 204.778358][T15657] loop5: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 204.782945][ T29] audit: type=1326 audit(1755774629.830:9121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f023fb45ba7 code=0x7ffc0000 [ 204.815366][ T29] audit: type=1326 audit(1755774629.895:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f023faeadd9 code=0x7ffc0000 [ 204.838973][ T29] audit: type=1326 audit(1755774629.895:9123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023fb4ebe9 code=0x7ffc0000 [ 204.843735][T15657] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 204.862606][ T29] audit: type=1326 audit(1755774629.895:9124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023fb4ebe9 code=0x7ffc0000 [ 204.862638][ T29] audit: type=1326 audit(1755774629.895:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f023fb4ebe9 code=0x7ffc0000 [ 204.862735][ T29] audit: type=1326 audit(1755774629.895:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023fb4ebe9 code=0x7ffc0000 [ 204.878478][T15657] syz-executor: attempt to access beyond end of device [ 204.878478][T15657] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 204.900065][ T29] audit: type=1326 audit(1755774629.895:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023fb4ebe9 code=0x7ffc0000 [ 204.938062][T15657] syz-executor: attempt to access beyond end of device [ 204.938062][T15657] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 204.947082][ T29] audit: type=1326 audit(1755774629.895:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f023fb4ebe9 code=0x7ffc0000 [ 204.962219][T15657] syz-executor: attempt to access beyond end of device [ 204.962219][T15657] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 205.043943][T15657] syz-executor: attempt to access beyond end of device [ 205.043943][T15657] loop5: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 205.065285][T15657] syz-executor: attempt to access beyond end of device [ 205.065285][T15657] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 205.081942][T15657] syz-executor: attempt to access beyond end of device [ 205.081942][T15657] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 205.106415][T15657] syz-executor: attempt to access beyond end of device [ 205.106415][T15657] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 205.123765][T15657] EXT4-fs error (device loop5): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 205.145320][T15657] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 205.155310][T15657] EXT4-fs (loop5): I/O error while writing superblock [ 205.162125][T15657] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: IO failure [ 205.211721][T15657] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 205.233646][T21225] loop8: detected capacity change from 0 to 128 [ 205.246140][T21114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.264627][T21225] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.282306][T15657] EXT4-fs (loop5): I/O error while writing superblock [ 205.289162][T15657] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 205.302821][T15657] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 205.314992][T15657] EXT4-fs (loop5): I/O error while writing superblock [ 205.318414][T21225] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.361857][T20185] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:31: unable to read itable block [ 205.375926][T20185] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 205.391180][T20185] EXT4-fs (loop5): I/O error while writing superblock [ 205.428353][T19047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.463443][T19047] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 205.484567][T19047] EXT4-fs (loop5): I/O error while writing superblock [ 205.600321][T21261] loop8: detected capacity change from 0 to 164 [ 205.607198][T21114] veth0_vlan: entered promiscuous mode [ 205.623552][T21261] rock: directory entry would overflow storage [ 205.629808][T21261] rock: sig=0x66, size=4, remaining=3 [ 205.637209][T21114] veth1_vlan: entered promiscuous mode [ 205.690518][T21114] veth0_macvtap: entered promiscuous mode [ 205.705102][T21114] veth1_macvtap: entered promiscuous mode [ 205.722686][T21114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.739051][T21114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.758325][T21269] loop8: detected capacity change from 0 to 128 [ 205.767842][ T408] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.795027][ T408] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.855720][T21235] dummy0: left allmulticast mode [ 205.872944][T21235] bridge0: port 4(dummy0) entered disabled state [ 205.905193][T21235] batadv0: left allmulticast mode [ 205.910522][T21235] batadv0: left promiscuous mode [ 205.915821][T21235] bridge0: port 3(batadv0) entered disabled state [ 205.927837][T21283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7454'. [ 205.945894][T21235] bridge_slave_1: left allmulticast mode [ 205.947292][T21283] x_tables: ip_tables: udp match: only valid for protocol 17 [ 205.951681][T21235] bridge_slave_1: left promiscuous mode [ 205.964849][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.982921][T21235] bridge_slave_0: left allmulticast mode [ 205.988728][T21235] bridge_slave_0: left promiscuous mode [ 205.994523][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.041657][T21292] loop3: detected capacity change from 0 to 512 [ 206.048769][T21292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.060991][T21292] EXT4-fs (loop3): 1 truncate cleaned up [ 206.068993][T21235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.078117][T21292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.094170][T21235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.104713][T21235] bond0 (unregistering): Released all slaves [ 206.114391][T21235] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 206.123745][T21235] vxcan3: left promiscuous mode [ 206.141192][T21235] bond1 (unregistering): Released all slaves [ 206.149477][ T408] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.164482][ T408] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.182208][T21288] IPVS: stopping master sync thread 21300 ... [ 206.189105][T21300] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 206.205717][T20939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.230966][T21235] tipc: Disabling bearer [ 206.235968][T21235] tipc: Left network mode [ 206.264109][T21235] hsr_slave_0: left promiscuous mode [ 206.270095][T21235] hsr_slave_1: left promiscuous mode [ 206.308731][T21235] team0 (unregistering): Port device team_slave_1 removed [ 206.319687][T21235] team0 (unregistering): Port device team_slave_0 removed [ 206.404530][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7466'. [ 206.413558][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7466'. [ 206.533415][T21265] chnl_net:caif_netlink_parms(): no params data found [ 206.596425][T21265] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.603646][T21265] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.611033][T21265] bridge_slave_0: entered allmulticast mode [ 206.617750][T21265] bridge_slave_0: entered promiscuous mode [ 206.624467][T21265] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.631618][T21265] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.640854][T21265] bridge_slave_1: entered allmulticast mode [ 206.647300][T21265] bridge_slave_1: entered promiscuous mode [ 206.674546][T21235] IPVS: stop unused estimator thread 0... [ 206.683212][T21265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.700486][T21265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.731888][T21265] team0: Port device team_slave_0 added [ 206.739339][T21265] team0: Port device team_slave_1 added [ 206.762531][T21235] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.779968][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7478'. [ 206.790431][T21265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.797455][T21265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.823532][T21265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.843090][T21265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.850061][T21265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.876038][T21265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.889030][T21235] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.924848][T21265] hsr_slave_0: entered promiscuous mode [ 206.931055][T21265] hsr_slave_1: entered promiscuous mode [ 206.937174][T21265] debugfs: 'hsr0' already exists in 'hsr' [ 206.942988][T21265] Cannot create hsr debugfs directory [ 206.961317][T21235] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.022347][T21235] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.067222][T21332] chnl_net:caif_netlink_parms(): no params data found [ 207.104556][T21332] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.111675][T21332] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.119128][T21332] bridge_slave_0: entered allmulticast mode [ 207.125577][T21332] bridge_slave_0: entered promiscuous mode [ 207.132319][T21332] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.139397][T21332] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.147124][T21332] bridge_slave_1: entered allmulticast mode [ 207.153713][T21332] bridge_slave_1: entered promiscuous mode [ 207.183959][T21235] bridge_slave_1: left allmulticast mode [ 207.189789][T21235] bridge_slave_1: left promiscuous mode [ 207.195422][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.204610][T21235] bridge_slave_0: left allmulticast mode [ 207.210321][T21235] bridge_slave_0: left promiscuous mode [ 207.216121][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.354588][T21235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.364492][T21235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.373965][T21235] bond0 (unregistering): Released all slaves [ 207.383631][T21332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.399299][T21332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.420117][T21332] team0: Port device team_slave_0 added [ 207.426974][T21332] team0: Port device team_slave_1 added [ 207.442749][T21235] hsr_slave_0: left promiscuous mode [ 207.448654][T21235] hsr_slave_1: left promiscuous mode [ 207.452053][T21359] loop0: detected capacity change from 0 to 164 [ 207.454629][T21235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.467653][T21235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.467900][T21359] rock: directory entry would overflow storage [ 207.481054][T21359] rock: sig=0x66, size=4, remaining=3 [ 207.487167][T21235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.494678][T21235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.509434][T21235] veth1_macvtap: left promiscuous mode [ 207.522363][T21235] veth0_macvtap: left promiscuous mode [ 207.539140][T21235] veth1_vlan: left promiscuous mode [ 207.549630][T21235] veth0_vlan: left promiscuous mode [ 207.627765][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7484'. [ 207.665102][T21235] team0 (unregistering): Port device team_slave_1 removed [ 207.675875][T21235] team0 (unregistering): Port device team_slave_0 removed [ 207.718417][T21369] bridge_slave_1: left allmulticast mode [ 207.724294][T21369] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.732476][T21369] bridge_slave_0: left allmulticast mode [ 207.738204][T21369] bridge_slave_0: left promiscuous mode [ 207.743900][T21369] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.831313][T21332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.838286][T21332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.864368][T21332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.875738][T21332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.882715][T21332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.908739][T21332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.951034][T21376] IPVS: Error connecting to the multicast addr [ 207.959640][T21332] hsr_slave_0: entered promiscuous mode [ 207.965670][T21332] hsr_slave_1: entered promiscuous mode [ 207.971577][T21332] debugfs: 'hsr0' already exists in 'hsr' [ 207.977340][T21332] Cannot create hsr debugfs directory [ 207.983758][T21375] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.7486'. [ 208.037423][T21265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.057109][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7491'. [ 208.063449][T21265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.066835][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7491'. [ 208.090421][T21265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.105155][T21385] ref_ctr_offset mismatch. inode: 0x1e44 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0x0 [ 208.125471][T21265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.172577][T21265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.186164][T21265] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.198191][T20203] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.205406][T20203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.220084][T20203] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.227275][T20203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.318055][T21265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.430113][T21265] veth0_vlan: entered promiscuous mode [ 208.450561][T21332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.451044][T21433] loop0: detected capacity change from 0 to 512 [ 208.466142][T21332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.477158][T21265] veth1_vlan: entered promiscuous mode [ 208.479021][T21433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.483418][T21332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.502715][T21433] ext4 filesystem being mounted at /1516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.512599][T21332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.537900][T21265] veth0_macvtap: entered promiscuous mode [ 208.553764][T21265] veth1_macvtap: entered promiscuous mode [ 208.585508][T16261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.597567][T21265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.609120][T21449] loop3: detected capacity change from 0 to 164 [ 208.613566][T21265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.621645][T21449] rock: directory entry would overflow storage [ 208.628848][T21449] rock: sig=0x66, size=4, remaining=3 [ 208.641866][ T408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.664926][ T408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.680184][ T408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.693557][T21332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.704512][T21235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.723138][T21332] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.733151][T21235] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.740297][T21235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.761679][T20203] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.768912][T20203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.809070][T21459] loop2: detected capacity change from 0 to 1024 [ 208.817417][T21459] EXT4-fs: inline encryption not supported [ 208.827118][T21459] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 208.914476][T21332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.954869][T20174] dvmrp8 (unregistering): left allmulticast mode [ 208.994001][T20174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.003816][T20174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.013438][T20174] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 209.022484][T20174] bond0 (unregistering): Released all slaves [ 209.057404][T20174] tipc: Disabling bearer [ 209.062410][T20174] tipc: Left network mode [ 209.093196][T20174] hsr_slave_0: left promiscuous mode [ 209.105893][T20174] hsr_slave_1: left promiscuous mode [ 209.111993][T20174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.119782][T20174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.135574][T21489] loop2: detected capacity change from 0 to 512 [ 209.150116][T21491] loop9: detected capacity change from 0 to 512 [ 209.161246][T21489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.174423][T20174] team0 (unregistering): Port device team_slave_1 removed [ 209.176080][T21489] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.192186][T20174] team0 (unregistering): Port device team_slave_0 removed [ 209.200601][T21491] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 209.211630][T21491] EXT4-fs (loop9): orphan cleanup on readonly fs [ 209.219636][T21491] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7522: corrupted inode contents [ 209.233397][T21491] EXT4-fs (loop9): Remounting filesystem read-only [ 209.240126][T21491] EXT4-fs (loop9): 1 truncate cleaned up [ 209.246048][ T8586] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.256993][ T8586] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.275641][ T8586] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 209.286488][T21491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.300222][T21265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.320392][T21491] tipc: Started in network mode [ 209.325441][T21491] tipc: Node identity ac14140f, cluster identity 4711 [ 209.333165][T21491] tipc: New replicast peer: 255.255.255.83 [ 209.339167][T21491] tipc: Enabled bearer , priority 10 [ 209.347022][T21456] chnl_net:caif_netlink_parms(): no params data found [ 209.394034][T21456] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.401378][T21456] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.414007][T21456] bridge_slave_0: entered allmulticast mode [ 209.420794][T21456] bridge_slave_0: entered promiscuous mode [ 209.432663][T21456] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.439796][T21456] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.449291][T21456] bridge_slave_1: entered allmulticast mode [ 209.457765][T21456] bridge_slave_1: entered promiscuous mode [ 209.474834][T21332] veth0_vlan: entered promiscuous mode [ 209.475067][T21114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.500714][T20174] IPVS: stop unused estimator thread 0... [ 209.506827][T21332] veth1_vlan: entered promiscuous mode [ 209.515081][T21456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.548969][T21332] veth0_macvtap: entered promiscuous mode [ 209.567305][T21332] veth1_macvtap: entered promiscuous mode [ 209.581605][T21456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.620725][T21519] loop9: detected capacity change from 0 to 1024 [ 209.640203][T21456] team0: Port device team_slave_0 added [ 209.647274][T21456] team0: Port device team_slave_1 added [ 209.663468][T21519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.667109][T21332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.694802][T21519] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 209.712560][T21525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21525 comm=syz.3.7530 [ 209.725200][T21525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21525 comm=syz.3.7530 [ 209.726948][T21519] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 209.750203][T21519] EXT4-fs (loop9): This should not happen!! Data will be lost [ 209.750203][T21519] [ 209.759884][T21519] EXT4-fs (loop9): Total free blocks count 0 [ 209.765888][T21519] EXT4-fs (loop9): Free/Dirty block details [ 209.771932][T21519] EXT4-fs (loop9): free_blocks=20480 [ 209.777265][T21519] EXT4-fs (loop9): dirty_blocks=96 [ 209.782446][T21519] EXT4-fs (loop9): Block reservation details [ 209.788454][T21519] EXT4-fs (loop9): i_reserved_data_blocks=6 [ 209.809026][T21332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.818217][T21456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.825253][T21456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.851307][T21456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.870940][ T408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.904410][T20174] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 209.909063][ T408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.928686][T21456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.935827][T21456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.961879][T21456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.996407][ T408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.017925][ T408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.032987][T21538] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7473'. [ 210.035947][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7533'. [ 210.061692][T21538] batadv1: entered promiscuous mode [ 210.066983][T21538] batadv1: entered allmulticast mode [ 210.079296][T21456] hsr_slave_0: entered promiscuous mode [ 210.102895][T21456] hsr_slave_1: entered promiscuous mode [ 210.109246][T21456] debugfs: 'hsr0' already exists in 'hsr' [ 210.115130][T21456] Cannot create hsr debugfs directory [ 210.161508][T21548] loop2: detected capacity change from 0 to 1024 [ 210.182408][T21548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.211009][T21548] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.225214][T21553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21553 comm=syz.4.7541 [ 210.237863][T21553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21553 comm=syz.4.7541 [ 210.255323][T21555] netlink: 428 bytes leftover after parsing attributes in process `+}[@'. [ 210.312830][T20174] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.334128][T20174] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.352019][T20174] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.361277][T20174] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.396242][T21265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.418376][ T1035] tipc: Node number set to 2886997007 [ 210.434113][T21566] SELinux: ebitmap: truncated map [ 210.441236][T21566] SELinux: failed to load policy [ 210.473992][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 210.474007][ T29] audit: type=1326 audit(1755774635.165:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.506555][ T29] audit: type=1326 audit(1755774635.165:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.530229][ T29] audit: type=1326 audit(1755774635.165:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.535513][T21456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.553973][ T29] audit: type=1326 audit(1755774635.165:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.584188][ T29] audit: type=1326 audit(1755774635.165:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.608053][ T29] audit: type=1326 audit(1755774635.165:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.631627][ T29] audit: type=1326 audit(1755774635.165:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.655380][ T29] audit: type=1326 audit(1755774635.165:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.678975][ T29] audit: type=1326 audit(1755774635.165:9233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.702482][ T29] audit: type=1326 audit(1755774635.165:9234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21573 comm="syz.4.7549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ece80ebe9 code=0x7ffc0000 [ 210.735621][T21456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.749429][T21456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.762416][T21456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.789954][T21586] vhci_hcd: invalid port number 96 [ 210.795258][T21586] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 210.880305][T21456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.893179][T21456] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.909772][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.916885][ T8586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.932095][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.939296][ T8586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.974257][T21456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.984761][T21456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.102944][T21456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.325990][T21456] veth0_vlan: entered promiscuous mode [ 211.342046][T21664] vhci_hcd: invalid port number 96 [ 211.347213][T21664] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 211.361789][T21668] program syz.2.7586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.372592][T21456] veth1_vlan: entered promiscuous mode [ 211.421995][T21456] veth0_macvtap: entered promiscuous mode [ 211.433320][T21674] loop2: detected capacity change from 0 to 1024 [ 211.456823][T21456] veth1_macvtap: entered promiscuous mode [ 211.479756][T21674] EXT4-fs: Ignoring removed orlov option [ 211.485626][T21674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.497830][T21456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.531075][T21674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.546924][T21456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.582213][ T408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.625459][T21265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.629036][ T408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.646932][T21235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.679354][T21235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.863356][T21714] loop9: detected capacity change from 0 to 2048 [ 211.864042][T21717] loop2: detected capacity change from 0 to 1024 [ 211.881057][T21717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.901642][T21717] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.924518][T21714] loop9: p1 < > p4 [ 211.933411][T21265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.943269][T21714] loop9: p4 size 8388608 extends beyond EOD, truncated [ 212.050297][T21731] Falling back ldisc for ptm0. [ 212.104288][T21740] loop9: detected capacity change from 0 to 512 [ 212.122621][T21235] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 212.132918][T21740] EXT4-fs: Ignoring removed i_version option [ 212.138958][T21740] EXT4-fs: Ignoring removed nobh option [ 212.173887][T21740] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 212.198429][T21740] EXT4-fs (loop9): 1 truncate cleaned up [ 212.204563][T21740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.244732][T21752] option changes via remount are deprecated (pid=21751 comm=syz.2.7621) [ 212.341614][T21758] loop1: detected capacity change from 0 to 1024 [ 212.374074][T21758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 212.383120][T21758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.412464][T21758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 88: padding at end of block bitmap is not set [ 212.446459][T21114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.449051][T21770] __nla_validate_parse: 7 callbacks suppressed [ 212.449070][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7628'. [ 212.474327][T21456] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.572439][T21781] loop2: detected capacity change from 0 to 764 [ 212.587706][T21783] loop1: detected capacity change from 0 to 512 [ 212.606968][T21783] journal_path: Non-blockdev passed as './bus' [ 212.613234][T21783] EXT4-fs: error: could not find journal device path [ 212.680450][T21798] netlink: 'syz.9.7641': attribute type 21 has an invalid length. [ 212.723906][T21806] loop9: detected capacity change from 0 to 512 [ 212.733192][T21806] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.7645: iget: bad i_size value: 38620345925642 [ 212.746772][T21806] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.7645: couldn't read orphan inode 15 (err -117) [ 212.761107][T21806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.776751][T21806] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.7645: bg 0: block 5: invalid block bitmap [ 212.817778][T21114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.830343][T21814] loop3: detected capacity change from 0 to 512 [ 212.839058][T21814] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.7649: corrupted in-inode xattr: invalid ea_ino [ 212.853962][T21814] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7649: couldn't read orphan inode 15 (err -117) [ 212.867470][T21814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.901634][T20939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.996736][T21829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7654'. [ 213.011417][T21829] netem: change failed [ 213.180764][T21848] loop4: detected capacity change from 0 to 4096 [ 213.211286][T21848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.345712][T21332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.375612][T21884] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 213.428504][T21888] SELinux: failed to load policy [ 213.693616][T21939] bridge0: port 3(batadv1) entered blocking state [ 213.700158][T21939] bridge0: port 3(batadv1) entered disabled state [ 213.709256][T21939] batadv1: entered allmulticast mode [ 213.715547][T21939] batadv1: entered promiscuous mode [ 214.014788][T21989] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 214.014893][T21987] IPVS: stopping master sync thread 21989 ... [ 214.232471][T20192] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 214.241866][T20192] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 214.329623][T22026] netlink: 264 bytes leftover after parsing attributes in process `syz.9.7743'. [ 214.338803][T22026] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7743'. [ 214.370180][T22028] loop3: detected capacity change from 0 to 1024 [ 214.403835][T22028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.428679][T22034] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7746'. [ 214.428741][T22028] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.460718][T22028] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 214.477141][T22028] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 214.489583][T22028] EXT4-fs (loop3): This should not happen!! Data will be lost [ 214.489583][T22028] [ 214.499264][T22028] EXT4-fs (loop3): Total free blocks count 0 [ 214.505274][T22028] EXT4-fs (loop3): Free/Dirty block details [ 214.511178][T22028] EXT4-fs (loop3): free_blocks=4293918720 [ 214.516926][T22028] EXT4-fs (loop3): dirty_blocks=16 [ 214.522142][T22028] EXT4-fs (loop3): Block reservation details [ 214.528270][T22028] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 214.566776][T20939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.671560][T22055] loop9: detected capacity change from 0 to 764 [ 214.798279][T22071] netlink: 'syz.2.7763': attribute type 298 has an invalid length. [ 214.931263][T22089] program syz.1.7770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.947800][T22089] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.096135][T22104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7777'. [ 215.349203][T22145] netlink: 'syz.1.7798': attribute type 3 has an invalid length. [ 215.471055][T22167] program syz.3.7806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.480714][T22167] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.565994][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7816'. [ 215.577241][T22185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7816'. [ 215.623072][T22189] loop4: detected capacity change from 0 to 1024 [ 215.642878][T22189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.671852][T22189] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 215.692000][T22189] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 215.704467][T22189] EXT4-fs (loop4): This should not happen!! Data will be lost [ 215.704467][T22189] [ 215.714159][T22189] EXT4-fs (loop4): Total free blocks count 0 [ 215.720192][T22189] EXT4-fs (loop4): Free/Dirty block details [ 215.726258][T22189] EXT4-fs (loop4): free_blocks=4293918720 [ 215.732031][T22189] EXT4-fs (loop4): dirty_blocks=16 [ 215.737160][T22189] EXT4-fs (loop4): Block reservation details [ 215.743407][T22189] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 215.773705][T21332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.829430][T22223] loop4: detected capacity change from 0 to 1024 [ 215.837759][T22222] 9pnet_fd: Insufficient options for proto=fd [ 215.853727][T22223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.890111][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 215.890183][ T29] audit: type=1400 audit(212.970:9597): avc: denied { name_bind } for pid=22227 comm="syz.9.7833" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 215.941960][ T29] audit: type=1400 audit(212.970:9598): avc: denied { node_bind } for pid=22227 comm="syz.9.7833" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 215.962255][ T29] audit: type=1400 audit(213.017:9599): avc: denied { map } for pid=22221 comm="syz.4.7830" path="/46/file0/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.962279][T22235] netlink: 'syz.9.7835': attribute type 12 has an invalid length. [ 215.993518][ T29] audit: type=1400 audit(213.017:9600): avc: denied { write } for pid=22221 comm="syz.4.7830" path="/46/file0/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 216.027447][ T29] audit: type=1400 audit(213.017:9601): avc: denied { module_request } for pid=22231 comm="syz.2.7834" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 216.067304][ T29] audit: type=1400 audit(213.138:9602): avc: denied { map_create } for pid=22241 comm="syz.2.7837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.086088][ T29] audit: type=1400 audit(213.138:9603): avc: denied { map_read map_write } for pid=22241 comm="syz.2.7837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.105418][ T29] audit: type=1400 audit(213.138:9604): avc: denied { unmount } for pid=21332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 216.129223][T21332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.131158][ T29] audit: type=1400 audit(213.138:9605): avc: denied { prog_load } for pid=22241 comm="syz.2.7837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.153811][T22242] loop2: detected capacity change from 0 to 512 [ 216.156915][ T29] audit: type=1400 audit(213.138:9606): avc: denied { bpf } for pid=22241 comm="syz.2.7837" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.188506][T22242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.7837: error while reading EA inode 32 err=-116 [ 216.203660][T22242] EXT4-fs (loop2): Remounting filesystem read-only [ 216.210364][T22242] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 216.222225][T22242] EXT4-fs (loop2): 1 orphan inode deleted [ 216.237120][T22242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.251502][T22242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.340910][T22267] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 216.352148][T22266] IPVS: stopping master sync thread 22267 ... [ 216.390283][T22271] netlink: 'syz.1.7849': attribute type 10 has an invalid length. [ 216.414194][T22271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.425954][T22271] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 216.529112][T22291] netlink: 'syz.2.7858': attribute type 1 has an invalid length. [ 216.565620][T22297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.574327][T22297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.623407][T22295] ================================================================== [ 216.631646][T22295] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 216.640262][T22295] [ 216.642601][T22295] write to 0xffff8881137a42e8 of 8 bytes by task 22300 on cpu 0: [ 216.650332][T22295] shmem_file_splice_read+0x470/0x600 [ 216.655736][T22295] splice_direct_to_actor+0x26f/0x680 [ 216.661128][T22295] do_splice_direct+0xda/0x150 [ 216.665921][T22295] do_sendfile+0x380/0x650 [ 216.670359][T22295] __x64_sys_sendfile64+0x105/0x150 [ 216.675589][T22295] x64_sys_call+0x2bb0/0x2ff0 [ 216.680288][T22295] do_syscall_64+0xd2/0x200 [ 216.684823][T22295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.690743][T22295] [ 216.693078][T22295] write to 0xffff8881137a42e8 of 8 bytes by task 22295 on cpu 1: [ 216.700810][T22295] shmem_file_splice_read+0x470/0x600 [ 216.706215][T22295] splice_direct_to_actor+0x26f/0x680 [ 216.711609][T22295] do_splice_direct+0xda/0x150 [ 216.716399][T22295] do_sendfile+0x380/0x650 [ 216.720834][T22295] __x64_sys_sendfile64+0x105/0x150 [ 216.726052][T22295] x64_sys_call+0x2bb0/0x2ff0 [ 216.730761][T22295] do_syscall_64+0xd2/0x200 [ 216.735283][T22295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.741199][T22295] [ 216.743534][T22295] value changed: 0x000000000000c2e6 -> 0x000000000000c327 [ 216.750641][T22295] [ 216.752980][T22295] Reported by Kernel Concurrency Sanitizer on: [ 216.759152][T22295] CPU: 1 UID: 0 PID: 22295 Comm: syz.1.7860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.768971][T22295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.779048][T22295] ==================================================================