last executing test programs: 1m22.711087735s ago: executing program 0 (id=506): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0x1b8, 0x4, 0x2}]}, 0x78) 1m22.695588136s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m22.601695864s ago: executing program 0 (id=509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1m22.583826935s ago: executing program 0 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m22.555973058s ago: executing program 0 (id=513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1m22.27663785s ago: executing program 0 (id=520): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) 1m22.27654097s ago: executing program 32 (id=520): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) 1m13.237331908s ago: executing program 3 (id=807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x18, 0x0) 1m13.195329702s ago: executing program 3 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 1m13.122832418s ago: executing program 3 (id=813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 1m13.072879462s ago: executing program 3 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.909016715s ago: executing program 3 (id=823): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1m12.866979518s ago: executing program 3 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 1m12.841995011s ago: executing program 33 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 47.038981809s ago: executing program 5 (id=1830): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007119b30000000000850000007500000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 46.987576734s ago: executing program 5 (id=1833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 46.960091766s ago: executing program 5 (id=1836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 46.90874301s ago: executing program 5 (id=1838): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 46.835504086s ago: executing program 5 (id=1843): open$dir(&(0x7f0000000080)='./file0\x00', 0x20040, 0x0) r0 = inotify_init() r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x4000140) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40) 46.364746764s ago: executing program 5 (id=1858): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 46.364622814s ago: executing program 34 (id=1858): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 45.112945924s ago: executing program 2 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x5, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 45.039063171s ago: executing program 2 (id=1889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108520800072a", 0x2a}, {0x0}], 0x2) read(r1, 0x0, 0x0) 44.942930518s ago: executing program 2 (id=1892): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x24044000) 44.717597387s ago: executing program 2 (id=1895): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 44.582980657s ago: executing program 2 (id=1898): r0 = socket(0x1d, 0x2, 0x6) io_uring_setup(0x7d80, &(0x7f00000000c0)={0x0, 0x72f, 0x10000, 0x2, 0x2c0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x3, {0x1, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 43.833944158s ago: executing program 2 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 43.79714896s ago: executing program 35 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 41.928739821s ago: executing program 1 (id=2005): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendto$inet6(r0, &(0x7f0000000080)="fb", 0x1, 0x4000001, 0x0, 0x0) 41.367263157s ago: executing program 1 (id=2031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) 41.366944867s ago: executing program 1 (id=2033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 40.475208058s ago: executing program 1 (id=2078): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 40.431812792s ago: executing program 1 (id=2079): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x2, 0x3, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 40.266822155s ago: executing program 1 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 40.266713545s ago: executing program 36 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 530.634966ms ago: executing program 8 (id=3731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 467.074002ms ago: executing program 8 (id=3734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000230040000000000000004d02000000000000f6ffffff000038000100fdff7f000800030000000400000007000000000000b1f200000000000000010100000000000006"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x828000, &(0x7f0000001800)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@permit_directio}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x581, &(0x7f0000001240)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 466.853952ms ago: executing program 9 (id=3737): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) lseek(r2, 0x1000000, 0x3) 451.834143ms ago: executing program 7 (id=3738): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106) 436.158814ms ago: executing program 8 (id=3740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 432.856155ms ago: executing program 9 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14040080}, 0x2000081) sendmsg$tipc(r2, &(0x7f0000000740)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000084}, 0x4000) 407.745936ms ago: executing program 4 (id=3743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 403.940427ms ago: executing program 7 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 374.423669ms ago: executing program 9 (id=3745): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 371.807869ms ago: executing program 4 (id=3746): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 371.364379ms ago: executing program 8 (id=3747): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 348.550981ms ago: executing program 9 (id=3748): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x65d, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x1000005, 0x100000, 0x75f, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xfffffff9, 0x8, 0xbed4, 0x8, 0x8000100, 0x61, 0x0, 0x11000, 0x1008, 0x1, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x400, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x5, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x82, 0xd, 0x6, 0x6, 0xa, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x15f, 0x84ac, 0xd9a, 0x5, 0x82a2, 0xfff, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x7, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) dup2(r1, r2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 348.461061ms ago: executing program 4 (id=3749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 348.227061ms ago: executing program 7 (id=3750): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6, 0x5, 0x5}) 332.589503ms ago: executing program 6 (id=3751): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000230040000000000000004d02000000000000f6ffffff000038000100fdff7f000800030000000400000007000000000000b1f200000000000000010100000000000006"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x828000, &(0x7f0000001800)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@permit_directio}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x581, &(0x7f0000001240)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 321.316633ms ago: executing program 9 (id=3752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getrusage(0x1, &(0x7f00000007c0)) 284.232956ms ago: executing program 9 (id=3753): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c", 0x29) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 283.789647ms ago: executing program 4 (id=3763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 258.253219ms ago: executing program 7 (id=3754): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0x800, 0x1fff, 0xffff, 0xc, "a8dff370f0fff7fd"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)='7', 0x1}], 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) 256.920559ms ago: executing program 6 (id=3755): sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x8, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8000) io_uring_setup(0x5e90, &(0x7f0000000040)={0x0, 0x40cba0, 0x10, 0x3, 0x3ce}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17a, @time={0x5, 0x1000000}, 0x0, {0x0, 0x5}}) 245.080229ms ago: executing program 4 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 176.764555ms ago: executing program 8 (id=3757): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20020000000000000000280080000000"}}}}}}, 0x0) 176.568725ms ago: executing program 6 (id=3758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 116.48511ms ago: executing program 4 (id=3759): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write(r0, 0x0, 0x0) 107.280721ms ago: executing program 7 (id=3760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) 86.486442ms ago: executing program 8 (id=3761): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 64.531254ms ago: executing program 6 (id=3772): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe000000a}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)) 43.359126ms ago: executing program 6 (id=3773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 764.169µs ago: executing program 6 (id=3774): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 0s ago: executing program 7 (id=3775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x10, {[@eol]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 07][ T36] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 72.312263][ T7871] loop2: detected capacity change from 0 to 1024 [ 72.319022][ T7871] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.325569][ T7871] EXT4-fs: Ignoring removed bh option [ 72.356790][ T7871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.384503][ T7883] loop4: detected capacity change from 0 to 1024 [ 72.397583][ T7883] EXT4-fs: Ignoring removed bh option [ 72.419128][ T7883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.444410][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.462066][ T7891] loop6: detected capacity change from 0 to 1024 [ 72.475344][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.487732][ T7891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.518147][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.533518][ T36] IPVS: starting estimator thread 0... [ 72.640690][ T7900] IPVS: using max 2928 ests per chain, 146400 per kthread [ 72.716651][ T7939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7939 comm=syz.2.1803 [ 72.730863][ T36] kernel write not supported for file /834/clear_refs (pid: 36 comm: kworker/1:1) [ 72.971187][ T7965] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 73.078441][ T7975] loop5: detected capacity change from 0 to 1024 [ 73.085565][ T7975] EXT4-fs: Ignoring removed bh option [ 73.107085][ T7975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.138263][ T4780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.181466][ T7991] loop6: detected capacity change from 0 to 1024 [ 73.189106][ T7991] EXT4-fs: Ignoring removed oldalloc option [ 73.195510][ T7991] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 73.216695][ T7991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.369882][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.398953][ T8029] __nla_validate_parse: 9 callbacks suppressed [ 73.398967][ T8029] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1837'. [ 73.427462][ T8032] loop5: detected capacity change from 0 to 128 [ 73.447604][ T8032] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.448266][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 73.477990][ T8041] pim6reg: entered allmulticast mode [ 73.485247][ T8041] pim6reg: left allmulticast mode [ 73.490759][ T4780] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /318/mnt/lost+found: directory fails checksum at offset 1024 [ 73.509247][ T4780] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 73.523690][ T4780] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /318/mnt/lost+found: directory fails checksum at offset 1024 [ 73.539004][ T4780] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 73.552367][ T4780] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /318/mnt/lost+found: directory fails checksum at offset 1024 [ 73.568751][ T4780] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 73.583207][ T4780] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /318/mnt/lost+found: directory fails checksum at offset 1024 [ 73.583399][ T8046] loop4: detected capacity change from 0 to 1024 [ 73.598540][ T4780] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 73.618067][ T4780] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /318/mnt/lost+found: directory fails checksum at offset 1024 [ 73.624921][ T8046] EXT4-fs: Ignoring removed oldalloc option [ 73.634542][ T4780] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 73.652987][ T8046] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 73.667326][ T8048] ip6gre1: entered allmulticast mode [ 73.693238][ T8050] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 73.693238][ T8050] program syz.6.1847 not setting count and/or reply_len properly [ 73.719498][ T8046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.789865][ T8056] netlink: 'syz.6.1849': attribute type 1 has an invalid length. [ 73.868742][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.915148][ T4780] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.926625][ T1844] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.939683][ T8075] loop4: detected capacity change from 0 to 128 [ 73.956504][ T8075] bio_check_eod: 39 callbacks suppressed [ 73.956518][ T8075] syz.4.1856: attempt to access beyond end of device [ 73.956518][ T8075] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 73.986863][ T1844] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.030126][ T8078] loop4: detected capacity change from 0 to 1024 [ 74.052194][ T1844] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.065843][ T8078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.096165][ T1844] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.108488][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.110089][ T8093] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 74.129111][ T8093] bridge0: port 4(dummy0) entered disabled state [ 74.135508][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.142738][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.198720][ T1844] batadv1: left allmulticast mode [ 74.203919][ T1844] batadv1: left promiscuous mode [ 74.208972][ T1844] bridge0: port 3(batadv1) entered disabled state [ 74.217729][ T1844] bridge_slave_1: left allmulticast mode [ 74.223422][ T1844] bridge_slave_1: left promiscuous mode [ 74.229333][ T1844] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.240829][ T1844] bridge_slave_0: left promiscuous mode [ 74.246614][ T1844] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.342613][ T1844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.352394][ T1844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.361988][ T1844] bond0 (unregistering): Released all slaves [ 74.398583][ T1844] hsr_slave_0: left promiscuous mode [ 74.410605][ T1844] hsr_slave_1: left promiscuous mode [ 74.417737][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.425206][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.433133][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.440637][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.451025][ T1844] veth1_macvtap: left promiscuous mode [ 74.456806][ T1844] veth0_macvtap: left promiscuous mode [ 74.465780][ T1844] veth1_vlan: left promiscuous mode [ 74.471042][ T1844] veth0_vlan: left promiscuous mode [ 74.478657][ T8125] loop2: detected capacity change from 0 to 1024 [ 74.503100][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.530707][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.565012][ T1844] team0 (unregistering): Port device team_slave_1 removed [ 74.575005][ T1844] team0 (unregistering): Port device team_slave_0 removed [ 74.629084][ T295] batman_adv: batadv1: IGMP Querier appeared [ 74.635095][ T295] batman_adv: batadv1: MLD Querier appeared [ 74.691631][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 74.730298][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.737393][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.744605][ T8079] bridge_slave_0: entered allmulticast mode [ 74.750954][ T8079] bridge_slave_0: entered promiscuous mode [ 74.757654][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.764867][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.772174][ T8079] bridge_slave_1: entered allmulticast mode [ 74.778616][ T8079] bridge_slave_1: entered promiscuous mode [ 74.795680][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.806253][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.824684][ T8079] team0: Port device team_slave_0 added [ 74.830985][ T8079] team0: Port device team_slave_1 added [ 74.846621][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.853589][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.879770][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.890933][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.898024][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.924052][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.951242][ T8079] hsr_slave_0: entered promiscuous mode [ 74.957061][ T8079] hsr_slave_1: entered promiscuous mode [ 75.023437][ T8079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.032061][ T8079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.040607][ T8079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.049129][ T8079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.082074][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.094128][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.103420][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.110497][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.121249][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.128382][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.192177][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.266471][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 75.266485][ T29] audit: type=1326 audit(72.229:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.295418][ T29] audit: type=1326 audit(72.229:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.335170][ T29] audit: type=1326 audit(72.257:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.358019][ T29] audit: type=1326 audit(72.257:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.380912][ T29] audit: type=1326 audit(72.257:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.385559][ T8079] veth0_vlan: entered promiscuous mode [ 75.403610][ T29] audit: type=1326 audit(72.257:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.412055][ T8186] loop6: detected capacity change from 0 to 128 [ 75.431966][ T29] audit: type=1326 audit(72.257:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.448630][ T8079] veth1_vlan: entered promiscuous mode [ 75.461004][ T29] audit: type=1326 audit(72.257:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.479595][ T8079] veth0_macvtap: entered promiscuous mode [ 75.489030][ T29] audit: type=1326 audit(72.257:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.499317][ T8079] veth1_macvtap: entered promiscuous mode [ 75.517539][ T29] audit: type=1326 audit(72.257:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 75.532321][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.550245][ T8195] syz.4.1890: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 75.567661][ T8195] CPU: 0 UID: 0 PID: 8195 Comm: syz.4.1890 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.567746][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.567756][ T8195] Call Trace: [ 75.567766][ T8195] [ 75.567773][ T8195] __dump_stack+0x1d/0x30 [ 75.567792][ T8195] dump_stack_lvl+0xe8/0x140 [ 75.567811][ T8195] dump_stack+0x15/0x1b [ 75.567857][ T8195] warn_alloc+0x12b/0x1a0 [ 75.568001][ T8195] ? audit_log_end+0x1d7/0x1f0 [ 75.568040][ T8195] ? audit_log_end+0x1d7/0x1f0 [ 75.568101][ T8195] __vmalloc_node_range_noprof+0x9c/0xe00 [ 75.568131][ T8195] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 75.568204][ T8195] ? __rcu_read_unlock+0x4f/0x70 [ 75.568221][ T8195] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 75.568238][ T8195] ? xfd_validate_state+0x45/0xf0 [ 75.568267][ T8195] ? save_fpregs_to_fpstate+0x100/0x160 [ 75.568452][ T8195] ? should_fail_ex+0x30/0x280 [ 75.568514][ T8195] ? xskq_create+0x36/0xe0 [ 75.568541][ T8195] vmalloc_user_noprof+0x7d/0xb0 [ 75.568571][ T8195] ? xskq_create+0x80/0xe0 [ 75.568656][ T8195] xskq_create+0x80/0xe0 [ 75.568679][ T8195] xsk_init_queue+0x95/0xf0 [ 75.568782][ T8195] xsk_setsockopt+0x477/0x640 [ 75.568808][ T8195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 75.568904][ T8195] __sys_setsockopt+0x181/0x200 [ 75.568924][ T8195] __x64_sys_setsockopt+0x64/0x80 [ 75.568939][ T8195] x64_sys_call+0x20ec/0x2ff0 [ 75.568972][ T8195] do_syscall_64+0xd2/0x200 [ 75.568991][ T8195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.569056][ T8195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.569120][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.569137][ T8195] RIP: 0033:0x7f125a26ebe9 [ 75.569150][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.569163][ T8195] RSP: 002b:00007f1258cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.569178][ T8195] RAX: ffffffffffffffda RBX: 00007f125a495fa0 RCX: 00007f125a26ebe9 [ 75.569188][ T8195] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 75.569198][ T8195] RBP: 00007f125a2f1e19 R08: 0000000000000004 R09: 0000000000000000 [ 75.569235][ T8195] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 75.569245][ T8195] R13: 00007f125a496038 R14: 00007f125a495fa0 R15: 00007fff3850ffc8 [ 75.569259][ T8195] [ 75.569286][ T8195] Mem-Info: [ 75.570292][ T8186] syz.6.1891: attempt to access beyond end of device [ 75.570292][ T8186] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 75.579192][ T8195] active_anon:4115 inactive_anon:16 isolated_anon:0 [ 75.579192][ T8195] active_file:20924 inactive_file:2402 isolated_file:0 [ 75.579192][ T8195] unevictable:0 dirty:146 writeback:0 [ 75.579192][ T8195] slab_reclaimable:3279 slab_unreclaimable:14395 [ 75.579192][ T8195] mapped:28929 shmem:325 pagetables:1322 [ 75.579192][ T8195] sec_pagetables:0 bounce:0 [ 75.579192][ T8195] kernel_misc_reclaimable:0 [ 75.579192][ T8195] free:1885406 free_pcp:6380 free_cma:0 [ 75.653493][ T8199] loop2: detected capacity change from 0 to 128 [ 75.656600][ T8195] Node 0 active_anon:16344kB inactive_anon:64kB active_file:83696kB inactive_file:9608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115716kB dirty:584kB writeback:0kB shmem:1300kB kernel_stack:3344kB pagetables:5288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 75.690223][ T8199] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.693834][ T8195] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.711595][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.713046][ T8195] lowmem_reserve[]: [ 75.722332][ T295] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.724784][ T8195] 0 [ 75.750213][ T295] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.754679][ T8195] 2883 7862 7862 [ 75.768874][ T3311] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /355/mnt/lost+found: directory fails checksum at offset 1024 [ 75.771211][ T8195] [ 75.779803][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 75.787181][ T8195] Node 0 DMA32 free:2948584kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:4256kB local_pcp:724kB free_cma:0kB [ 75.796786][ T3311] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /355/mnt/lost+found: directory fails checksum at offset 1024 [ 75.803120][ T8195] lowmem_reserve[]: 0 0 4978 [ 75.806491][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 75.809260][ T8195] 4978 [ 75.809273][ T8195] Node 0 Normal free:4573584kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16344kB inactive_anon:64kB active_file:83696kB inactive_file:9608kB unevictable:0kB writepending:584kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:21160kB local_pcp:16984kB free_cma:0kB [ 75.824209][ T3311] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /355/mnt/lost+found: directory fails checksum at offset 1024 [ 75.867392][ T8195] lowmem_reserve[]: 0 0 0 0 [ 75.867437][ T8195] Node 0 [ 75.875734][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 75.900864][ T8195] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 75.914926][ T3311] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /355/mnt/lost+found: directory fails checksum at offset 1024 [ 75.941397][ T8195] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.941441][ T8195] Node 0 DMA32: 4*4kB (M) 3*8kB (M) [ 75.950077][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 75.952434][ T8195] 2*16kB (M) 3*32kB [ 75.961494][ T3311] EXT4-fs error (device loop2): ext4_readdir:224: inode #11: comm syz-executor: path /355/mnt/lost+found: directory fails checksum at offset 1024 [ 75.963601][ T8195] (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 4*512kB [ 75.973638][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 75.975938][ T8195] (M) 4*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2948584kB [ 76.230271][ T8195] Node 0 Normal: 784*4kB (M) 158*8kB (UM) 37*16kB (UME) 240*32kB (ME) 158*64kB (ME) 93*128kB (UME) 60*256kB (UM) 53*512kB (UM) 41*1024kB (UM) 21*2048kB (UME) 1077*4096kB (UM) = 4573568kB [ 76.248816][ T8195] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 76.258093][ T8195] 23685 total pagecache pages [ 76.262740][ T8195] 43 pages in swap cache [ 76.266990][ T8195] Free swap = 124824kB [ 76.271127][ T8195] Total swap = 124996kB [ 76.275255][ T8195] 2097051 pages RAM [ 76.279210][ T8195] 0 pages HighMem/MovableOnly [ 76.283880][ T8195] 80441 pages reserved [ 76.298663][ T295] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.312073][ T5280] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.346911][ T295] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369596][ T8211] netem: incorrect gi model size [ 76.374655][ T8211] netem: change failed [ 76.405790][ T8219] loop6: detected capacity change from 0 to 128 [ 76.418888][ T8219] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.464740][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.515707][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.534601][ T8238] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1913'. [ 76.543684][ T8238] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1913'. [ 76.576113][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.619085][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.693666][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.759311][ T8273] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1926'. [ 76.815218][ T12] dummy0: left allmulticast mode [ 76.824470][ T12] bridge0: port 4(dummy0) entered disabled state [ 76.835616][ T12] batadv1: left allmulticast mode [ 76.840667][ T12] batadv1: left promiscuous mode [ 76.845859][ T12] bridge0: port 3(batadv1) entered disabled state [ 76.863580][ T12] bridge_slave_1: left allmulticast mode [ 76.869335][ T12] bridge_slave_1: left promiscuous mode [ 76.875055][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.886471][ T12] bridge_slave_0: left promiscuous mode [ 76.892150][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.068840][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.085108][ T12] bond0 (unregistering): Released all slaves [ 77.095837][ T12] bond1 (unregistering): Released all slaves [ 77.107563][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 77.135676][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 77.154101][ T8315] IPVS: Error joining to the multicast group [ 77.171237][ T12] hsr_slave_0: left promiscuous mode [ 77.183345][ T12] hsr_slave_1: left promiscuous mode [ 77.193030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.200495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.216865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.224269][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.240360][ T12] veth1_macvtap: left promiscuous mode [ 77.245864][ T12] veth0_macvtap: left promiscuous mode [ 77.255599][ T12] veth1_vlan: left promiscuous mode [ 77.266395][ T12] veth0_vlan: left promiscuous mode [ 77.354107][ T12] team0 (unregistering): Port device team_slave_1 removed [ 77.363519][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.423507][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.430667][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.460784][ T8247] bridge_slave_0: entered allmulticast mode [ 77.470675][ T8247] bridge_slave_0: entered promiscuous mode [ 77.481834][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.489038][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.496400][ T8247] bridge_slave_1: entered allmulticast mode [ 77.502742][ T8247] bridge_slave_1: entered promiscuous mode [ 77.531200][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.596276][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.610677][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 77.619624][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 77.639935][ T8247] team0: Port device team_slave_0 added [ 77.656289][ T8247] team0: Port device team_slave_1 added [ 77.663443][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 77.697016][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.704160][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.730193][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.742430][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 77.753037][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.760000][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.786066][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.838462][ T8247] hsr_slave_0: entered promiscuous mode [ 77.844472][ T8247] hsr_slave_1: entered promiscuous mode [ 77.872456][ T8247] debugfs: 'hsr0' already exists in 'hsr' [ 77.878194][ T8247] Cannot create hsr debugfs directory [ 77.887282][ T12] IPVS: stop unused estimator thread 0... [ 77.901182][ T8399] loop4: detected capacity change from 0 to 128 [ 77.908517][ T8399] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.924743][ T8399] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.070056][ T8247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.080895][ T8247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.089730][ T8247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.094885][ T8418] tls_set_device_offload_rx: netdev not found [ 78.105598][ T8247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.170396][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.177568][ T8247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.239461][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.250702][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.281439][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.293521][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.300605][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.328560][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.335631][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.368533][ T8462] syz_tun: entered allmulticast mode [ 78.374151][ T8462] syz_tun: left allmulticast mode [ 78.390064][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.398866][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.438700][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.556608][ T8247] veth0_vlan: entered promiscuous mode [ 78.564882][ T8247] veth1_vlan: entered promiscuous mode [ 78.578856][ T8247] veth0_macvtap: entered promiscuous mode [ 78.586261][ T8247] veth1_macvtap: entered promiscuous mode [ 78.595802][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.606490][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.616961][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625675][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.635125][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.645986][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.672052][ T8501] ALSA: seq fatal error: cannot create timer (-19) [ 78.774685][ T8525] __nla_validate_parse: 7 callbacks suppressed [ 78.774700][ T8525] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 78.803212][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2026'. [ 78.812379][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 78.821592][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2026'. [ 78.831098][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 78.840039][ T8527] netlink: 'syz.6.2026': attribute type 6 has an invalid length. [ 78.969752][ T8540] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 78.976871][ T8540] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.984436][ T8540] vhci_hcd vhci_hcd.0: Device attached [ 78.990579][ T8541] vhci_hcd: connection closed [ 78.990758][ T51] vhci_hcd: stop threads [ 78.999765][ T51] vhci_hcd: release socket [ 79.004191][ T51] vhci_hcd: disconnect device [ 79.618573][ T8603] atomic_op ffff888115a71128 conn xmit_atomic 0000000000000000 [ 79.823264][ T8631] netlink: '+}[@': attribute type 10 has an invalid length. [ 79.834133][ T8631] team0: Device hsr_slave_0 failed to register rx_handler [ 79.891886][ T8636] loop8: detected capacity change from 0 to 8192 [ 79.955728][ T8648] rdma_op ffff888115a71180 conn xmit_rdma 0000000000000000 [ 80.062798][ T57] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.104361][ T57] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.168349][ T57] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.232892][ T57] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.367039][ T57] bridge_slave_1: left allmulticast mode [ 80.373031][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.389740][ T57] bridge_slave_0: left promiscuous mode [ 80.395527][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.395733][ T8709] loop4: detected capacity change from 0 to 512 [ 80.426585][ T8709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.452456][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.522626][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.532437][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.542077][ T57] bond0 (unregistering): Released all slaves [ 80.563609][ T8673] chnl_net:caif_netlink_parms(): no params data found [ 80.607372][ T57] hsr_slave_0: left promiscuous mode [ 80.609957][ T8730] loop4: detected capacity change from 0 to 512 [ 80.619633][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 80.619656][ T29] audit: type=1326 audit(77.234:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.4.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f125a26d84a code=0x7ffc0000 [ 80.620499][ T57] hsr_slave_1: left promiscuous mode [ 80.654214][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.661753][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.669530][ T29] audit: type=1326 audit(77.234:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.4.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f125a26d84a code=0x7ffc0000 [ 80.692108][ T29] audit: type=1326 audit(77.234:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.4.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f125a26d457 code=0x7ffc0000 [ 80.714981][ T29] audit: type=1326 audit(77.234:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.4.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f125a27038a code=0x7ffc0000 [ 80.738392][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.740689][ T8730] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.745795][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.754015][ T8730] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.768658][ T8730] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 80.779372][ T8730] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.795840][ T8730] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 80.803468][ T29] audit: type=1326 audit(77.402:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.7.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 80.804771][ T8730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2117: bg 0: block 40: padding at end of block bitmap is not set [ 80.826770][ T29] audit: type=1326 audit(77.402:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.7.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 80.863700][ T29] audit: type=1326 audit(77.402:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.7.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 80.865146][ T8730] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 80.886561][ T29] audit: type=1326 audit(77.402:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.7.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 80.895680][ T8730] EXT4-fs (loop4): 1 truncate cleaned up [ 80.917832][ T29] audit: type=1326 audit(77.402:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.7.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 80.923972][ T8730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.963052][ T57] veth1_vlan: left promiscuous mode [ 80.975102][ T57] veth0_vlan: left promiscuous mode [ 81.060237][ T57] team0 (unregistering): Port device team_slave_1 removed [ 81.073604][ T57] team0 (unregistering): Port device team_slave_0 removed [ 81.084678][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.166730][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.173874][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.206215][ T8673] bridge_slave_0: entered allmulticast mode [ 81.211486][ T8768] tls_set_device_offload_rx: netdev not found [ 81.223950][ T8673] bridge_slave_0: entered promiscuous mode [ 81.244557][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.251794][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.260312][ T8673] bridge_slave_1: entered allmulticast mode [ 81.279090][ T8673] bridge_slave_1: entered promiscuous mode [ 81.324917][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.338693][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.391916][ T8673] team0: Port device team_slave_0 added [ 81.405423][ T8673] team0: Port device team_slave_1 added [ 81.422313][ T3383] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 81.429792][ T3383] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 81.437224][ T3383] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 81.446299][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.453328][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.479288][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.514073][ T3383] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 81.514747][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.531087][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.557014][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.648260][ T8673] hsr_slave_0: entered promiscuous mode [ 81.664853][ T8673] hsr_slave_1: entered promiscuous mode [ 81.672175][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 81.673091][ T8673] debugfs: 'hsr0' already exists in 'hsr' [ 81.686805][ T8673] Cannot create hsr debugfs directory [ 81.691665][ T8828] loop4: detected capacity change from 0 to 512 [ 81.711428][ T8828] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 81.740413][ T8828] SELinux: Context system_u:object is not valid (left unmapped). [ 81.795234][ T8841] loop4: detected capacity change from 0 to 128 [ 81.814677][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2168'. [ 81.823561][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 81.849904][ T8673] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 81.865756][ T8673] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 81.874451][ T8853] netlink: 'syz.6.2171': attribute type 1 has an invalid length. [ 81.890305][ T8673] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 81.911424][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 81.918876][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 81.924470][ T8862] netlink: 'syz.6.2173': attribute type 3 has an invalid length. [ 81.926434][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 81.941480][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 81.949031][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 81.956479][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 81.963948][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 81.972407][ T3411] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 81.973492][ T8673] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 82.015983][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.023076][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.030386][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.037443][ T8673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.061526][ T8877] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 82.069269][ T8877] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.2179'. [ 82.074319][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.104931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.112928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.143203][ T8673] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.172117][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.179351][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.190979][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.198045][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.248923][ T8900] netlink: 'syz.8.2190': attribute type 10 has an invalid length. [ 82.317654][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.371428][ T8917] loop7: detected capacity change from 0 to 1024 [ 82.392502][ T8917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.460147][ T8917] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2195: Allocating blocks 449-513 which overlap fs metadata [ 82.477873][ T8916] EXT4-fs (loop7): pa ffff888106d66230: logic 48, phys. 177, len 21 [ 82.485983][ T8916] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 82.513394][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.553286][ T8673] veth0_vlan: entered promiscuous mode [ 82.569114][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2202'. [ 82.576143][ T8673] veth1_vlan: entered promiscuous mode [ 82.601433][ T8673] veth0_macvtap: entered promiscuous mode [ 82.610311][ T8673] veth1_macvtap: entered promiscuous mode [ 82.627245][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.645419][ T8953] loop7: detected capacity change from 0 to 1024 [ 82.646014][ T8948] vlan2: entered allmulticast mode [ 82.657165][ T8948] bridge_slave_0: entered allmulticast mode [ 82.671232][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.681056][ T8953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.696101][ T1844] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.706703][ T8953] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.2206: lblock 0 mapped to illegal pblock 0 (length 6) [ 82.720687][ T8953] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.2206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 82.740983][ T8953] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.2206: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.755402][ T8953] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.2206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 82.773778][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.782878][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.792133][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826045][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.852801][ T3397] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.855382][ T8972] loop8: detected capacity change from 0 to 128 [ 82.898861][ T8974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.906280][ T8974] IPv6: NLM_F_CREATE should be set when creating new route [ 83.016606][ T8992] syzkaller1: entered promiscuous mode [ 83.022171][ T8992] syzkaller1: entered allmulticast mode [ 83.147213][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2229'. [ 83.239872][ T9023] loop6: detected capacity change from 0 to 512 [ 83.247433][ T9023] EXT4-fs (loop6): bad s_min_extra_isize: 65528 [ 83.250737][ T9027] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 83.504421][ T9063] loop8: detected capacity change from 0 to 512 [ 83.511302][ T9063] EXT4-fs (loop8): bad s_min_extra_isize: 65528 [ 83.535600][ T9062] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 84.173563][ T9137] __nla_validate_parse: 22 callbacks suppressed [ 84.173578][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2282'. [ 84.198711][ T9137] IPVS: Error joining to the multicast group [ 84.320024][ T9151] netlink: 'syz.6.2289': attribute type 13 has an invalid length. [ 84.327892][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 84.400695][ T9151] netlink: 'syz.6.2289': attribute type 13 has an invalid length. [ 84.408523][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 84.532642][ T9163] loop8: detected capacity change from 0 to 128 [ 84.576900][ T9163] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.585055][ T9170] loop9: detected capacity change from 0 to 1024 [ 84.605330][ T9170] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.621695][ T9174] tls_set_device_offload_rx: netdev not found [ 84.631752][ T8247] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.665549][ T9170] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.2296: Allocating blocks 449-513 which overlap fs metadata [ 84.690429][ T9169] EXT4-fs (loop9): pa ffff888106d66230: logic 48, phys. 177, len 21 [ 84.698599][ T9169] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 84.723948][ T8673] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.893469][ T9203] ALSA: seq fatal error: cannot create timer (-19) [ 84.991112][ T9214] infiniband syz!: set active [ 84.995840][ T9214] infiniband syz!: added team_slave_0 [ 85.006141][ T9220] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2321'. [ 85.015453][ T9222] loop8: detected capacity change from 0 to 1024 [ 85.021747][ T9214] RDS/IB: syz!: added [ 85.025848][ T9214] smc: adding ib device syz! with port count 1 [ 85.032543][ T9214] smc: ib device syz! port 1 has pnetid [ 85.056028][ T9222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.123006][ T9222] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.2320: lblock 0 mapped to illegal pblock 0 (length 6) [ 85.137173][ T9234] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2325'. [ 85.154691][ T9222] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.2320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 85.189254][ T9222] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.2320: lblock 0 mapped to illegal pblock 0 (length 1) [ 85.230715][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2329'. [ 85.239711][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2329'. [ 85.248701][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2329'. [ 85.258151][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2329'. [ 85.267216][ T9241] netlink: 'syz.9.2329': attribute type 6 has an invalid length. [ 85.276413][ T9222] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.2320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 85.324513][ T8247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.400128][ T9260] netlink: 'syz.9.2345': attribute type 10 has an invalid length. [ 85.533042][ T9271] atomic_op ffff88811a576128 conn xmit_atomic 0000000000000000 [ 85.744600][ T9297] SELinux: failed to load policy [ 85.783946][ T9304] atomic_op ffff8881048bb928 conn xmit_atomic 0000000000000000 [ 85.814890][ T9307] ALSA: seq fatal error: cannot create timer (-19) [ 85.856521][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'. [ 86.182774][ T9348] loop8: detected capacity change from 0 to 1024 [ 86.209469][ T9348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.238189][ T9348] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2376: Allocating blocks 449-513 which overlap fs metadata [ 86.258484][ T9346] EXT4-fs (loop8): pa ffff888106e768c0: logic 48, phys. 177, len 21 [ 86.266550][ T9346] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 86.284836][ T8247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.320862][ T9360] loop7: detected capacity change from 0 to 256 [ 86.328760][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 86.328774][ T29] audit: type=1326 audit(82.575:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.8.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.363652][ T29] audit: type=1326 audit(82.575:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.8.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.386458][ T29] audit: type=1326 audit(82.575:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.8.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.409217][ T29] audit: type=1326 audit(82.575:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.8.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.431955][ T29] audit: type=1326 audit(82.575:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.8.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.468957][ T29] audit: type=1326 audit(82.706:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.8.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.491737][ T29] audit: type=1326 audit(82.706:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.8.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.514589][ T29] audit: type=1326 audit(82.706:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.8.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.537354][ T29] audit: type=1326 audit(82.706:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.8.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.561030][ T29] audit: type=1326 audit(82.724:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.8.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 86.871406][ T9401] netlink: 'syz.6.2396': attribute type 10 has an invalid length. [ 87.162224][ T9445] loop8: detected capacity change from 0 to 512 [ 87.201474][ T9445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.252230][ T8247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.565850][ T9454] netlink: 'syz.7.2420': attribute type 10 has an invalid length. [ 87.667007][ T9465] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 87.667714][ T9468] loop7: detected capacity change from 0 to 128 [ 87.685454][ T9468] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.733511][ T8079] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.774767][ T9480] netlink: 'syz.8.2434': attribute type 1 has an invalid length. [ 87.803051][ T9486] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 87.848491][ T9494] loop8: detected capacity change from 0 to 128 [ 87.855947][ T9494] vfat: Unknown parameter '@' [ 87.949643][ T9508] tls_set_device_offload_rx: netdev not found [ 88.003790][ T9512] loop6: detected capacity change from 0 to 1024 [ 88.015411][ T9512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.034891][ T9512] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.2448: bit already cleared for inode 14 [ 88.063659][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.219729][ T9538] loop6: detected capacity change from 0 to 1024 [ 89.233696][ T9537] loop9: detected capacity change from 0 to 512 [ 89.242364][ T9538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.267304][ T9537] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.294598][ T9537] EXT4-fs (loop9): mount failed [ 89.303211][ T9538] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2456: Allocating blocks 449-513 which overlap fs metadata [ 89.340379][ T9533] EXT4-fs (loop6): pa ffff888106e76930: logic 48, phys. 177, len 21 [ 89.348430][ T9533] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 89.408131][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.437732][ T9558] IPv6: Can't replace route, no match found [ 89.471103][ T9562] loop9: detected capacity change from 0 to 512 [ 89.490069][ T9562] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 89.512989][ T9562] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.2469: invalid indirect mapped block 83886080 (level 1) [ 89.538782][ T9562] EXT4-fs (loop9): Remounting filesystem read-only [ 89.553203][ T9562] EXT4-fs (loop9): 1 orphan inode deleted [ 89.558968][ T9562] EXT4-fs (loop9): 1 truncate cleaned up [ 89.604903][ T9562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.619020][ T9575] loop7: detected capacity change from 0 to 2048 [ 89.642887][ T9577] openvswitch: netlink: Message has 6 unknown bytes. [ 89.651201][ T8673] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.671697][ T9575] loop7: p1 < > p4 [ 89.675942][ T9575] loop7: p4 size 8388608 extends beyond EOD, truncated [ 89.841975][ T9592] netlink: 'syz.4.2481': attribute type 10 has an invalid length. [ 90.016775][ T9607] netlink: 'syz.7.2490': attribute type 10 has an invalid length. [ 90.036162][ T9607] team0: Port device dummy0 added [ 90.068941][ T9607] netlink: 'syz.7.2490': attribute type 10 has an invalid length. [ 90.090142][ T9607] team0: Port device dummy0 removed [ 90.097964][ T9607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.133423][ T9619] __nla_validate_parse: 12 callbacks suppressed [ 90.133441][ T9619] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 90.163450][ T9619] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 90.182909][ T9619] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 90.206514][ T9619] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 90.348824][ T9638] loop7: detected capacity change from 0 to 1024 [ 90.363606][ T9638] EXT4-fs: Ignoring removed bh option [ 90.372701][ T9638] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.387967][ T9638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.399826][ T9638] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm wÞ£ÿ: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.418051][ T9638] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm wÞ£ÿ: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.433763][ T9638] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 90.444962][ T9638] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 90.461946][ T9638] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm wÞ£ÿ: mark_inode_dirty error [ 90.483353][ T9638] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 90.494491][ T9638] EXT4-fs (loop7): 1 orphan inode deleted [ 90.501895][ T9638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.515352][ T1000] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.533237][ T1000] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 90.559417][ T9638] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm wÞ£ÿ: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.594960][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.842852][ T9677] loop7: detected capacity change from 0 to 512 [ 90.851823][ T9678] loop6: detected capacity change from 0 to 2048 [ 90.857020][ T9677] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 90.869723][ T9677] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2530: invalid indirect mapped block 83886080 (level 1) [ 90.883832][ T9677] EXT4-fs (loop7): Remounting filesystem read-only [ 90.890611][ T9677] EXT4-fs (loop7): 1 orphan inode deleted [ 90.896354][ T9677] EXT4-fs (loop7): 1 truncate cleaned up [ 90.902327][ T9677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.922196][ T9678] loop6: p1 < > p4 [ 90.926760][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.936212][ T9678] loop6: p4 size 8388608 extends beyond EOD, truncated [ 91.047278][ T9698] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 91.065117][ T9698] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 91.074087][ T9698] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 91.082581][ T9698] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 91.089474][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2532'. [ 91.173221][ T9713] loop4: detected capacity change from 0 to 256 [ 91.460644][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2542'. [ 91.681620][ T9772] SELinux: failed to load policy [ 91.705993][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 91.706008][ T29] audit: type=1400 audit(87.607:3191): avc: denied { allowed } for pid=9773 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.730863][ T29] audit: type=1400 audit(87.607:3192): avc: denied { create } for pid=9773 comm="syz.4.2575" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.751444][ T29] audit: type=1400 audit(87.607:3193): avc: denied { map } for pid=9773 comm="syz.4.2575" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.774988][ T29] audit: type=1400 audit(87.607:3194): avc: denied { read write } for pid=9773 comm="syz.4.2575" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.799455][ T29] audit: type=1400 audit(87.635:3195): avc: denied { execmem } for pid=9773 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.836443][ T29] audit: type=1400 audit(87.691:3196): avc: denied { tracepoint } for pid=9769 comm="syz.8.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.877387][ T9779] loop8: detected capacity change from 0 to 512 [ 91.888421][ T29] audit: type=1400 audit(87.775:3197): avc: denied { mounton } for pid=9778 comm="syz.8.2565" path="/141/file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.918649][ T9779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.919074][ T29] audit: type=1400 audit(87.804:3198): avc: denied { create } for pid=9782 comm="syz.9.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.967713][ T29] audit: type=1400 audit(87.822:3199): avc: denied { mount } for pid=9778 comm="syz.8.2565" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.988874][ T29] audit: type=1400 audit(87.841:3200): avc: denied { setopt } for pid=9782 comm="syz.9.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.021553][ T8247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.226695][ T9826] bridge0: port 3(macsec0) entered blocking state [ 92.233169][ T9826] bridge0: port 3(macsec0) entered disabled state [ 92.240601][ T9826] macsec0: entered allmulticast mode [ 92.246421][ T9826] macsec0: left allmulticast mode [ 92.254957][ T9827] netlink: 'syz.9.2589': attribute type 12 has an invalid length. [ 92.368961][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a4e1200: rx timeout, send abort [ 92.457016][ T9857] veth1_to_bridge: entered promiscuous mode [ 92.464969][ T9857] veth1_to_bridge: left promiscuous mode [ 92.560268][ T9878] netlink: 'syz.8.2612': attribute type 19 has an invalid length. [ 92.572971][ T1000] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.590685][ T1000] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.604989][ T1000] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.613855][ T1000] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.638560][ T9886] loop8: detected capacity change from 0 to 512 [ 92.645496][ T9886] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 92.656666][ T9886] EXT4-fs (loop8): 1 truncate cleaned up [ 92.687337][ T9890] SELinux: policydb version 0 does not match my version range 15-35 [ 92.695677][ T9890] SELinux: failed to load policy [ 92.731912][ T9892] loop8: detected capacity change from 0 to 4096 [ 92.903477][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a4e1000: rx timeout, send abort [ 92.911742][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a4e1200: abort rx timeout. Force session deactivation [ 93.253581][ T9919] loop9: detected capacity change from 0 to 512 [ 93.260561][ T9919] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 93.272267][ T9919] EXT4-fs (loop9): 1 truncate cleaned up [ 93.311199][ T9927] netlink: 'syz.9.2631': attribute type 27 has an invalid length. [ 93.330537][ T9929] loop7: detected capacity change from 0 to 1024 [ 93.338314][ T9929] EXT4-fs: Ignoring removed bh option [ 93.344991][ T9929] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 93.358761][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.365990][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.414569][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.425871][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.446253][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a4e1000: abort rx timeout. Force session deactivation [ 93.510849][ T9930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.520744][ T9930] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.536291][ T9930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.557914][ T41] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.584372][ T41] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.597323][ T41] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.607634][ T41] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.776389][ T9972] SELinux: policydb version 0 does not match my version range 15-35 [ 93.792967][ T9972] SELinux: failed to load policy [ 94.076785][ T9977] loop6: detected capacity change from 0 to 32768 [ 94.105492][ T9997] netlink: 'syz.7.2661': attribute type 2 has an invalid length. [ 94.113347][ T9997] netlink: 'syz.7.2661': attribute type 1 has an invalid length. [ 94.140070][ T9977] loop6: p1 p2 p3 < > [ 94.144250][ T9977] loop6: p1 size 242222080 extends beyond EOD, truncated [ 94.178322][ T9977] loop6: p2 start 4294967295 is beyond EOD, truncated [ 94.409680][T10040] batadv1: entered promiscuous mode [ 94.460371][T10046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10046 comm=syz.7.2674 [ 94.472932][T10046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10046 comm=syz.7.2674 [ 94.783615][T10105] loop6: detected capacity change from 0 to 164 [ 94.790936][T10105] rock: directory entry would overflow storage [ 94.797161][T10105] rock: sig=0x66, size=4, remaining=3 [ 94.866617][T10115] syzkaller1: entered promiscuous mode [ 94.872117][T10115] syzkaller1: entered allmulticast mode [ 95.210045][T10172] netlink: 'syz.4.2719': attribute type 21 has an invalid length. [ 95.509781][T10207] netlink: 'syz.7.2735': attribute type 27 has an invalid length. [ 95.568069][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.575269][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.607039][T10217] netlink: 'syz.8.2740': attribute type 2 has an invalid length. [ 95.614797][T10217] netlink: 'syz.8.2740': attribute type 1 has an invalid length. [ 95.622524][T10217] __nla_validate_parse: 26 callbacks suppressed [ 95.622604][T10217] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.2740'. [ 95.675521][T10207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.700726][T10207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.724901][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2745'. [ 95.781257][T10213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.809780][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.822356][T10213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.845447][T10226] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 95.856505][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.863723][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.881407][ T41] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.903385][ T41] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.912370][ T41] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.925165][ T41] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.122681][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 96.187058][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2759'. [ 96.196377][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2759'. [ 96.208662][T10264] bridge0: port 3(vlan2) entered blocking state [ 96.215105][T10264] bridge0: port 3(vlan2) entered disabled state [ 96.221917][T10264] vlan2: entered allmulticast mode [ 96.227121][T10264] bridge0: entered allmulticast mode [ 96.235005][T10264] vlan2: left allmulticast mode [ 96.240217][T10264] bridge0: left allmulticast mode [ 96.264151][T10272] netlink: 'syz.4.2763': attribute type 27 has an invalid length. [ 96.282571][T10272] 0ªî{X¹¦: left allmulticast mode [ 96.346995][T10272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.357635][T10272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.395522][T10272] vxlan0: left promiscuous mode [ 96.434720][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.456218][T10275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.471879][ T31] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.480653][ T31] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.491955][ T31] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.500327][ T31] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.509535][ T31] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.518000][ T31] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.534285][ T31] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.542667][ T31] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.650726][T10270] loop8: detected capacity change from 0 to 32768 [ 96.727285][T10270] loop8: p1 p2 p3 < > [ 96.731772][T10270] loop8: p1 size 242222080 extends beyond EOD, truncated [ 96.742580][T10270] loop8: p2 start 4294967295 is beyond EOD, truncated [ 96.775424][T10310] program syz.4.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.901501][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2787'. [ 97.125845][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 97.125859][ T29] audit: type=1326 audit(92.677:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.8.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 97.186713][ T29] audit: type=1326 audit(92.677:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.8.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 97.209608][ T29] audit: type=1326 audit(92.677:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.8.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 97.232434][ T29] audit: type=1326 audit(92.677:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.8.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 97.255320][ T29] audit: type=1326 audit(92.677:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.8.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 97.278322][ T29] audit: type=1326 audit(92.705:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.8.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 97.281260][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2802'. [ 97.301650][ T29] audit: type=1326 audit(92.780:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 97.332958][ T29] audit: type=1326 audit(92.780:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 97.355799][ T29] audit: type=1326 audit(92.780:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 97.378677][ T29] audit: type=1326 audit(92.780:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 97.425276][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.433858][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.493138][T10375] program syz.4.2810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.542756][T10378] SELinux: failed to load policy [ 97.760921][T10413] ref_ctr_offset mismatch. inode: 0x428 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 97.897514][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2840'. [ 97.930246][T10444] loop7: detected capacity change from 0 to 128 [ 97.931017][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2840'. [ 97.950481][T10444] FAT-fs (loop7): bogus sectors per cluster 7 [ 97.956598][T10444] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 97.965860][T10444] FAT-fs (loop7): Can't find a valid FAT filesystem [ 98.057381][T10464] loop7: detected capacity change from 0 to 512 [ 98.077582][T10468] IPv6: Can't replace route, no match found [ 98.126222][T10477] syzkaller1: entered promiscuous mode [ 98.132053][T10477] syzkaller1: entered allmulticast mode [ 98.141220][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2862'. [ 98.372061][T10518] program syz.7.2879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.430011][T10526] smc: net device bond0 erased user defined pnetid SYZ0 [ 98.456683][T10530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10530 comm=syz.6.2886 [ 98.469693][T10530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10530 comm=syz.6.2886 [ 98.562023][T10546] program syz.8.2894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.649768][T10555] program syz.6.2906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.873205][T10588] bridge0: port 3(vlan0) entered blocking state [ 98.879584][T10588] bridge0: port 3(vlan0) entered disabled state [ 98.887472][T10588] vlan0: entered allmulticast mode [ 98.892624][T10588] bridge0: entered allmulticast mode [ 98.899529][T10588] vlan0: left allmulticast mode [ 98.904422][T10588] bridge0: left allmulticast mode [ 99.464504][T10683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10683 comm=syz.9.2914 [ 99.477191][T10683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10683 comm=syz.9.2914 [ 99.591342][T10709] bridge0: entered promiscuous mode [ 99.598508][T10709] bridge0: port 3(macsec0) entered blocking state [ 99.605154][T10709] bridge0: port 3(macsec0) entered disabled state [ 99.612138][T10709] macsec0: entered allmulticast mode [ 99.617490][T10709] bridge0: entered allmulticast mode [ 99.633101][T10709] macsec0: left allmulticast mode [ 99.638293][T10709] bridge0: left allmulticast mode [ 99.644214][T10709] bridge0: left promiscuous mode [ 99.723798][T10729] loop6: detected capacity change from 0 to 512 [ 99.782180][T10729] syz.6.2930 (10729) used greatest stack depth: 8960 bytes left [ 99.878411][T10764] loop9: detected capacity change from 0 to 1024 [ 99.889551][T10764] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.900548][T10764] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.925258][T10764] JBD2: no valid journal superblock found [ 99.931018][T10764] EXT4-fs (loop9): Could not load journal inode [ 99.963047][T10764] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 99.997465][T10778] loop9: detected capacity change from 0 to 512 [ 100.049725][T10786] rdma_op ffff88811a54c580 conn xmit_rdma 0000000000000000 [ 100.111258][T10797] loop9: detected capacity change from 0 to 2048 [ 100.169340][T10797] loop9: detected capacity change from 2048 to 64 [ 100.220918][T10800] kmmpd-loop9: attempt to access beyond end of device [ 100.220918][T10800] loop9: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 100.234535][T10800] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 100.323075][T10824] loop8: detected capacity change from 0 to 512 [ 100.409055][T10837] dummy0: entered promiscuous mode [ 100.414603][T10837] macsec0: entered allmulticast mode [ 100.419940][T10837] bond0: entered allmulticast mode [ 100.425083][T10837] bond_slave_0: entered allmulticast mode [ 100.430909][T10837] bond_slave_1: entered allmulticast mode [ 100.444487][T10837] dummy0: entered allmulticast mode [ 100.451616][T10837] bond0: left allmulticast mode [ 100.456538][T10837] bond_slave_0: left allmulticast mode [ 100.462029][T10837] bond_slave_1: left allmulticast mode [ 100.467692][T10837] dummy0: left allmulticast mode [ 100.472743][T10837] dummy0: left promiscuous mode [ 100.550732][ T3383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3383 comm=kworker/1:3 [ 100.563761][T10849] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 100.640049][T10831] chnl_net:caif_netlink_parms(): no params data found [ 100.690608][T10831] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.697687][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.707883][T10831] bridge_slave_0: entered allmulticast mode [ 100.714399][T10831] bridge_slave_0: entered promiscuous mode [ 100.715251][T10865] netlink: 'syz.6.2984': attribute type 27 has an invalid length. [ 100.721405][T10831] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.735263][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.742440][T10831] bridge_slave_1: entered allmulticast mode [ 100.748955][T10831] bridge_slave_1: entered promiscuous mode [ 100.761425][T10865] 0ªî{X¹¦: left allmulticast mode [ 100.778913][T10865] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.786113][T10865] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.817262][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.827483][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.845676][T10865] ip6gre1: left allmulticast mode [ 100.876325][T10866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.884575][T10866] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.893385][T10866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.909719][ T31] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.918106][ T31] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.934170][T10831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.946635][ T31] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.955017][ T31] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.965291][T10870] loop8: detected capacity change from 0 to 128 [ 100.966275][T10831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.980776][ T31] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.989248][ T31] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.016847][ T31] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.025247][ T31] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.034512][T10831] team0: Port device team_slave_0 added [ 101.042159][T10831] team0: Port device team_slave_1 added [ 101.053976][T10873] rdma_op ffff888104729580 conn xmit_rdma 0000000000000000 [ 101.063516][T10831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.070512][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.096494][T10831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.108425][T10831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.115413][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.141384][T10831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.160150][T10876] lo speed is unknown, defaulting to 1000 [ 101.171975][T10876] lo speed is unknown, defaulting to 1000 [ 101.179499][T10876] lo speed is unknown, defaulting to 1000 [ 101.185818][T10876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.186491][T10831] hsr_slave_0: entered promiscuous mode [ 101.193696][T10876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.206315][T10831] hsr_slave_1: entered promiscuous mode [ 101.213124][T10831] debugfs: 'hsr0' already exists in 'hsr' [ 101.218883][T10831] Cannot create hsr debugfs directory [ 101.224448][T10876] lo speed is unknown, defaulting to 1000 [ 101.232310][T10876] lo speed is unknown, defaulting to 1000 [ 101.240788][T10876] lo speed is unknown, defaulting to 1000 [ 101.254846][T10876] lo speed is unknown, defaulting to 1000 [ 101.280509][T10876] lo speed is unknown, defaulting to 1000 [ 101.292862][T10876] lo speed is unknown, defaulting to 1000 [ 101.331324][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.348749][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.501914][T10831] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.512379][T10831] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.522360][T10831] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.533651][T10831] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.602960][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.615217][T10831] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.632012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.639197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.652426][ T1844] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.659545][ T1844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.747624][T10831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.790992][T10985] syzkaller1: entered promiscuous mode [ 101.796528][T10985] syzkaller1: entered allmulticast mode [ 101.884390][T11002] __nla_validate_parse: 14 callbacks suppressed [ 101.884408][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3011'. [ 101.945009][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3014'. [ 101.953901][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3014'. [ 101.958844][T11020] loop8: detected capacity change from 0 to 512 [ 101.962975][T11017] netlink: 'syz.7.3014': attribute type 20 has an invalid length. [ 101.982982][T11020] vfat: Unknown parameter 'nonuiocharset' [ 101.991667][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3014'. [ 101.997567][ T41] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.000582][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3014'. [ 102.015700][T10831] veth0_vlan: entered promiscuous mode [ 102.018172][T11017] netlink: 'syz.7.3014': attribute type 20 has an invalid length. [ 102.062061][ T41] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.073200][T10831] veth1_vlan: entered promiscuous mode [ 102.080990][ T41] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.097913][T10831] veth0_macvtap: entered promiscuous mode [ 102.118610][ T41] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.128384][T10831] veth1_macvtap: entered promiscuous mode [ 102.141508][T10831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.154257][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3017'. [ 102.165360][T10831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.183597][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.210905][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.240135][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.254639][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.261473][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.272159][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.302389][T11049] syzkaller1: entered promiscuous mode [ 102.307933][T11049] syzkaller1: entered allmulticast mode [ 102.481501][T11068] bond_slave_0: entered promiscuous mode [ 102.487202][T11068] bond_slave_1: entered promiscuous mode [ 102.495042][T11068] macsec1: entered allmulticast mode [ 102.500397][T11068] bond0: entered allmulticast mode [ 102.505512][T11068] bond_slave_0: entered allmulticast mode [ 102.511277][T11068] bond_slave_1: entered allmulticast mode [ 102.520977][T11068] bond0: left allmulticast mode [ 102.525833][T11068] bond_slave_0: left allmulticast mode [ 102.531366][T11068] bond_slave_1: left allmulticast mode [ 102.536876][T11068] bond_slave_0: left promiscuous mode [ 102.542259][T11068] bond_slave_1: left promiscuous mode [ 102.662993][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 102.663008][ T29] audit: type=1107 audit(97.859:3638): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='“' [ 102.862579][ T29] audit: type=1326 audit(98.037:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 102.885477][ T29] audit: type=1326 audit(98.037:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 102.983264][ T29] audit: type=1326 audit(98.093:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.006090][ T29] audit: type=1326 audit(98.093:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.028993][ T29] audit: type=1326 audit(98.093:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.052068][ T29] audit: type=1326 audit(98.093:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.074968][ T29] audit: type=1326 audit(98.093:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.097754][ T29] audit: type=1326 audit(98.093:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.120620][ T29] audit: type=1326 audit(98.093:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.8.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 103.168943][T11131] macsec0: entered allmulticast mode [ 103.174373][T11131] bond0: entered allmulticast mode [ 103.186848][T11131] bond0: left allmulticast mode [ 103.272315][T11123] netlink: 197276 bytes leftover after parsing attributes in process `syz.8.3043'. [ 103.336238][T11155] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3052'. [ 103.447667][T11176] loop7: detected capacity change from 0 to 512 [ 103.460547][T11176] vfat: Unknown parameter 'nonuiocharset' [ 103.467274][T11174] bond_slave_0: entered promiscuous mode [ 103.473021][T11174] bond_slave_1: entered promiscuous mode [ 103.481532][T11174] macsec0: entered allmulticast mode [ 103.486981][T11174] bond0: entered allmulticast mode [ 103.492086][T11174] bond_slave_0: entered allmulticast mode [ 103.497933][T11174] bond_slave_1: entered allmulticast mode [ 103.507567][T11174] bond0: left allmulticast mode [ 103.512454][T11174] bond_slave_0: left allmulticast mode [ 103.518014][T11174] bond_slave_1: left allmulticast mode [ 103.523479][T11174] bond_slave_0: left promiscuous mode [ 103.528917][T11174] bond_slave_1: left promiscuous mode [ 103.563183][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'. [ 103.631236][T11187] siw: device registration error -23 [ 103.690539][T11191] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3067'. [ 103.748583][T11193] netlink: 'syz.4.3068': attribute type 16 has an invalid length. [ 103.756437][T11193] netlink: 'syz.4.3068': attribute type 17 has an invalid length. [ 103.769443][T11197] IPVS: stopping backup sync thread 11198 ... [ 103.830783][T11206] bond0: entered promiscuous mode [ 103.835873][T11206] bond_slave_0: entered promiscuous mode [ 103.841752][T11206] bond_slave_1: entered promiscuous mode [ 103.860018][T11210] loop9: detected capacity change from 0 to 512 [ 103.866631][T11210] vfat: Unknown parameter 'nonuiocharset' [ 104.439828][T11254] loop6: detected capacity change from 0 to 512 [ 104.452494][T11254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.481325][T11254] EXT4-fs mount: 16 callbacks suppressed [ 104.481384][T11254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.528419][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.644224][T11264] macsec0: entered allmulticast mode [ 104.649599][T11264] bond0: entered allmulticast mode [ 104.654715][T11264] bond_slave_0: entered allmulticast mode [ 104.660499][T11264] bond_slave_1: entered allmulticast mode [ 104.674514][T11264] bond0: left allmulticast mode [ 104.679407][T11264] bond_slave_0: left allmulticast mode [ 104.684896][T11264] bond_slave_1: left allmulticast mode [ 104.939976][T11281] 9pnet_fd: Insufficient options for proto=fd [ 104.947280][T11279] loop9: detected capacity change from 0 to 1024 [ 104.962168][T11279] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.982023][T11279] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 105.035900][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.141977][T11307] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.151242][T11307] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.169253][T11312] netlink: 'syz.9.3117': attribute type 16 has an invalid length. [ 105.177206][T11312] netlink: 'syz.9.3117': attribute type 17 has an invalid length. [ 105.222737][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.229836][T11312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.240238][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.247317][T11312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.387259][T11335] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 105.398430][T11334] IPVS: stopping backup sync thread 11335 ... [ 105.427357][T11344] loop9: detected capacity change from 0 to 128 [ 105.438163][T11344] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 52) [ 105.446249][T11344] FAT-fs (loop9): Filesystem has been set read-only [ 105.705366][T11383] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 105.786611][T11399] loop7: detected capacity change from 0 to 512 [ 105.794364][T11399] EXT4-fs: Ignoring removed i_version option [ 105.800377][T11399] EXT4-fs: Ignoring removed nobh option [ 105.809140][T11405] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 105.818835][T11399] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 105.819884][T11402] IPVS: stopping backup sync thread 11405 ... [ 105.843562][T11399] EXT4-fs (loop7): 1 truncate cleaned up [ 105.856648][T11399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.897514][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.220716][T11488] loop6: detected capacity change from 0 to 512 [ 106.235353][T11488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.271574][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.762200][T11575] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.984517][T11603] netlink: 'syz.6.3213': attribute type 9 has an invalid length. [ 106.997563][ T51] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.008444][T11603] netlink: 'syz.6.3213': attribute type 9 has an invalid length. [ 107.017439][ T51] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.025889][ T51] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.035867][ T51] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.174761][T11627] netlink: 'syz.9.3224': attribute type 7 has an invalid length. [ 107.217485][T11634] loop9: detected capacity change from 0 to 512 [ 107.236559][T11634] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.251974][T11634] EXT4-fs (loop9): mount failed [ 107.272184][T11641] __nla_validate_parse: 7 callbacks suppressed [ 107.272194][T11641] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3229'. [ 107.536352][T11686] vhci_hcd: invalid port number 67 [ 107.544732][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3244'. [ 107.553824][T11687] netlink: 'syz.4.3244': attribute type 18 has an invalid length. [ 107.591499][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3250'. [ 107.600539][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3250'. [ 107.629492][T11698] loop9: detected capacity change from 0 to 512 [ 107.643687][T11698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.664173][T11698] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.3252: corrupted inode contents [ 107.676261][T11698] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #2: comm syz.9.3252: mark_inode_dirty error [ 107.687982][T11698] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.3252: corrupted inode contents [ 107.701331][T11698] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.3252: mark_inode_dirty error [ 107.730595][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.077659][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 108.077672][ T29] audit: type=1326 audit(102.910:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.107339][ T29] audit: type=1326 audit(102.910:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.130508][ T29] audit: type=1326 audit(102.910:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.153850][ T29] audit: type=1326 audit(102.910:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.176814][ T29] audit: type=1326 audit(102.910:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.199710][ T29] audit: type=1326 audit(102.929:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.222629][ T29] audit: type=1326 audit(102.929:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.245583][ T29] audit: type=1326 audit(102.929:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.268476][ T29] audit: type=1326 audit(102.929:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.291483][ T29] audit: type=1326 audit(102.929:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.6.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0beb8cebe9 code=0x7ffc0000 [ 108.350260][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3275'. [ 108.658773][T11803] netlink: 'syz.9.3309': attribute type 1 has an invalid length. [ 108.666611][T11803] netlink: 'syz.9.3309': attribute type 6 has an invalid length. [ 108.674495][T11803] netlink: 'syz.9.3309': attribute type 3 has an invalid length. [ 108.682254][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3309'. [ 109.142186][T11808] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 109.207594][T11816] loop9: detected capacity change from 0 to 1024 [ 109.233521][T11816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.260847][T11816] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.3303: Allocating blocks 449-513 which overlap fs metadata [ 109.280416][T11815] EXT4-fs (loop9): pa ffff888106d662a0: logic 48, phys. 177, len 21 [ 109.288471][T11815] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 109.294683][T11827] netlink: 'syz.8.3307': attribute type 21 has an invalid length. [ 109.308388][T11827] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3307'. [ 109.338266][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.373898][T11839] netlink: 292 bytes leftover after parsing attributes in process `syz.9.3314'. [ 110.320481][T11844] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 110.447053][T11894] netlink: 'syz.9.3340': attribute type 1 has an invalid length. [ 110.449298][T11897] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.522109][T11908] sd 0:0:1:0: device reset [ 110.557200][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 110.571947][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 110.637319][T11926] netem: unknown loss type 0 [ 110.642062][T11926] netem: change failed [ 110.689265][T11932] capability: warning: `syz.4.3356' uses 32-bit capabilities (legacy support in use) [ 110.757036][T11950] x_tables: ip_tables: udp match: only valid for protocol 17 [ 110.773788][T11954] loop9: detected capacity change from 0 to 1024 [ 110.783483][T11956] netlink: 'syz.7.3368': attribute type 3 has an invalid length. [ 110.796901][T11954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.810552][T11960] IPv6: Can't replace route, no match found [ 110.824257][T11954] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.3366: Allocating blocks 497-513 which overlap fs metadata [ 110.840796][T11954] EXT4-fs (loop9): pa ffff888106d66310: logic 256, phys. 369, len 9 [ 110.849066][T11954] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 110.859268][T11954] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 110.885961][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.973513][T11981] wireguard0: entered promiscuous mode [ 110.979193][T11981] wireguard0: entered allmulticast mode [ 111.000559][T11986] loop7: detected capacity change from 0 to 512 [ 111.007271][T11986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.014393][T11986] EXT4-fs (loop7): filesystem is read-only [ 111.020565][T11986] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 111.032219][T11986] EXT4-fs (loop7): filesystem is read-only [ 111.038090][T11986] EXT4-fs (loop7): orphan cleanup on readonly fs [ 111.045266][T11986] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #16: comm syz.7.3381: iget: bad i_size value: 648518346341360424 [ 111.058724][T11986] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3381: couldn't read orphan inode 16 (err -117) [ 111.071103][T11986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.092929][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.122608][T11992] loop9: detected capacity change from 0 to 512 [ 111.130698][T11992] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.169740][T11992] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #17: comm syz.9.3383: iget: bad i_size value: -6917529027641081756 [ 111.184880][T11992] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3383: couldn't read orphan inode 17 (err -117) [ 111.197549][T11992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.212123][T11992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.287047][T11999] pim6reg: entered allmulticast mode [ 111.292983][T11999] pim6reg: left allmulticast mode [ 112.028967][T12089] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.136731][T12110] sd 0:0:1:0: device reset [ 112.179065][T12119] loop6: detected capacity change from 0 to 512 [ 112.186918][T12119] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.193749][T12119] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 112.204506][T12119] EXT4-fs (loop6): 1 truncate cleaned up [ 112.210796][T12119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.398834][T12137] wireguard0: entered promiscuous mode [ 112.404506][T12137] wireguard0: entered allmulticast mode [ 113.045469][T12182] vhci_hcd: invalid port number 96 [ 113.050602][T12182] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 113.095945][T12186] random: crng reseeded on system resumption [ 113.105188][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.118862][T12186] vhci_hcd: invalid port number 23 [ 113.133495][T12188] SELinux: ebitmap: truncated map [ 113.144048][T12188] SELinux: failed to load policy [ 113.169119][ T3383] hid_parser_main: 58 callbacks suppressed [ 113.169197][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.182477][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.189944][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.197349][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.204732][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.212157][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.219540][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.226937][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.234322][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.241697][ T3383] hid-generic 0000:0006:0007.000B: unknown main item tag 0x0 [ 113.249902][ T3383] hid-generic 0000:0006:0007.000B: hidraw0: HID v0.0b Device [syz1] on syz1 [ 113.278599][T12198] loop9: detected capacity change from 0 to 512 [ 113.285196][T12198] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.292028][T12198] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 113.304091][T12202] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.305152][T12198] EXT4-fs (loop9): 1 truncate cleaned up [ 113.329768][T12198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.348147][T12209] __nla_validate_parse: 13 callbacks suppressed [ 113.348164][T12209] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3484'. [ 113.389422][T12213] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3486'. [ 113.417816][T12215] loop8: detected capacity change from 0 to 512 [ 113.424865][T12215] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.438504][T12215] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #17: comm syz.8.3487: iget: bad i_size value: -6917529027641081756 [ 113.458369][T12215] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3487: couldn't read orphan inode 17 (err -117) [ 113.471093][T12215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.484519][T12215] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.504463][T12222] ref_ctr_offset mismatch. inode: 0xa18 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0x0 [ 113.615902][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 113.615921][ T29] audit: type=1326 audit(108.098:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.8.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 113.656100][ T29] audit: type=1326 audit(108.126:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 113.679014][ T29] audit: type=1326 audit(108.126:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 113.702158][ T29] audit: type=1326 audit(108.126:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 113.725381][ T29] audit: type=1326 audit(108.126:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 113.748396][ T29] audit: type=1326 audit(108.126:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 113.771275][ T29] audit: type=1326 audit(108.126:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.8.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 113.794158][ T29] audit: type=1326 audit(108.126:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.8.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 113.817025][ T29] audit: type=1326 audit(108.126:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.8.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a84ebe9 code=0x7ffc0000 [ 113.840074][ T29] audit: type=1326 audit(108.126:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125a26ebe9 code=0x7ffc0000 [ 113.919529][T12252] syz_tun: entered allmulticast mode [ 113.925704][T12251] syz_tun: left allmulticast mode [ 113.992995][T12263] loop6: detected capacity change from 0 to 128 [ 114.168242][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3517'. [ 114.332727][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.390247][T12296] ipvlan0: entered promiscuous mode [ 114.395944][T12296] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 114.406117][T12296] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.577796][T12315] loop9: detected capacity change from 0 to 512 [ 114.612145][T12315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 114.620220][T12315] System zones: 1-12 [ 114.646356][T12315] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.3533: error while reading EA inode 32 err=-116 [ 114.686970][T12315] EXT4-fs (loop9): Remounting filesystem read-only [ 114.693539][T12315] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 114.729546][T12315] EXT4-fs (loop9): 1 orphan inode deleted [ 114.735774][T12315] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.795904][T12315] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3533'. [ 114.804875][T12315] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3533'. [ 114.848249][T12315] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3533'. [ 114.857319][T12315] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3533'. [ 114.866361][T12315] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3533'. [ 114.911820][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.042463][T12332] loop9: detected capacity change from 0 to 2048 [ 115.049243][T12332] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.078667][T12332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.119120][T12332] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3549: bg 0: block 234: padding at end of block bitmap is not set [ 115.155087][T12332] EXT4-fs (loop9): Remounting filesystem read-only [ 115.183626][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.254475][T12347] hub 6-0:1.0: USB hub found [ 115.263389][T12347] hub 6-0:1.0: 8 ports detected [ 115.378195][T12357] loop6: detected capacity change from 0 to 256 [ 115.502813][T12350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12350 comm=syz.9.3544 [ 115.515485][T12350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12350 comm=syz.9.3544 [ 115.577112][T12368] loop8: detected capacity change from 0 to 2048 [ 115.597168][T12368] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.624399][T12368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.641414][T12368] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3557: bg 0: block 234: padding at end of block bitmap is not set [ 115.657671][T12368] EXT4-fs (loop8): Remounting filesystem read-only [ 115.676904][ T8247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.826507][T12391] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3564'. [ 115.904713][T12404] validate_nla: 1 callbacks suppressed [ 115.904729][T12404] netlink: 'syz.4.3572': attribute type 3 has an invalid length. [ 115.964733][T12414] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 116.016989][T12422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12422 comm=syz.8.3580 [ 116.029621][T12422] netlink: 'syz.8.3580': attribute type 2 has an invalid length. [ 116.037421][T12422] netlink: 'syz.8.3580': attribute type 1 has an invalid length. [ 116.045184][T12422] netlink: 'syz.8.3580': attribute type 8 has an invalid length. [ 116.370275][T12482] wireguard0: entered promiscuous mode [ 116.375806][T12482] wireguard0: entered allmulticast mode [ 116.470013][T12495] loop9: detected capacity change from 0 to 256 [ 116.540206][T12504] netlink: 'syz.7.3612': attribute type 3 has an invalid length. [ 116.632197][T12511] SELinux: ebitmap: truncated map [ 116.661293][T12511] SELinux: failed to load policy [ 116.710781][T12538] loop7: detected capacity change from 0 to 512 [ 116.817351][T12538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 116.849286][T12538] System zones: 1-12 [ 116.856569][T12538] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3621: error while reading EA inode 32 err=-116 [ 116.894935][T12538] EXT4-fs (loop7): Remounting filesystem read-only [ 116.901518][T12538] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 116.925667][T12538] EXT4-fs (loop7): 1 orphan inode deleted [ 116.937067][T12538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.950049][T12499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12499 comm=syz.6.3611 [ 116.963015][T12499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12499 comm=syz.6.3611 [ 117.004816][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.037119][T12602] loop9: detected capacity change from 0 to 1024 [ 117.062803][T12602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.083394][T12611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12611 comm=syz.7.3634 [ 117.096068][T12611] netlink: 'syz.7.3634': attribute type 2 has an invalid length. [ 117.103884][T12611] netlink: 'syz.7.3634': attribute type 1 has an invalid length. [ 117.111754][T12611] netlink: 'syz.7.3634': attribute type 8 has an invalid length. [ 117.196133][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.411228][T12639] loop6: detected capacity change from 0 to 512 [ 117.464960][T12639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 117.496040][T12639] System zones: 1-12 [ 117.555437][T12639] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3644: error while reading EA inode 32 err=-116 [ 117.580588][T12639] EXT4-fs (loop6): Remounting filesystem read-only [ 117.587247][T12639] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 117.608605][T12639] EXT4-fs (loop6): 1 orphan inode deleted [ 117.625635][T12639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.672779][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.927515][T12673] loop7: detected capacity change from 0 to 1024 [ 117.939453][T12673] EXT4-fs: Ignoring removed nobh option [ 117.945044][T12673] EXT4-fs: Ignoring removed bh option [ 117.970865][T12673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.139563][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.206255][T12698] loop7: detected capacity change from 0 to 512 [ 118.213504][T12700] loop6: detected capacity change from 0 to 512 [ 118.220779][T12700] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.234286][T12700] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.245878][T12700] EXT4-fs (loop6): 1 truncate cleaned up [ 118.252298][T12700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.270948][T12698] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.318230][T12698] EXT4-fs (loop7): mount failed [ 118.649426][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.657687][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.664419][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.671162][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.677875][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.684653][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.691446][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.698201][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.705002][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.711796][T12718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.995442][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 118.995459][ T29] audit: type=1326 audit(113.112:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.024679][ T29] audit: type=1326 audit(113.112:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.047641][ T29] audit: type=1326 audit(113.112:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.070543][ T29] audit: type=1326 audit(113.112:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.093629][ T29] audit: type=1326 audit(113.112:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.116542][ T29] audit: type=1326 audit(113.112:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.139623][ T29] audit: type=1326 audit(113.112:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 119.162876][ T29] audit: type=1326 audit(113.112:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.7.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410461ebe9 code=0x7ffc0000 [ 119.242616][ T29] audit: type=1400 audit(113.131:4360): avc: denied { bind } for pid=12740 comm="syz.7.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.245342][T12754] binfmt_misc: register: failed to install interpreter file ./file0 [ 119.376712][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.404446][ T29] audit: type=1400 audit(113.505:4361): avc: denied { execute_no_trans } for pid=12763 comm="syz.4.3703" path="/735/file1" dev="tmpfs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.434134][T12766] netlink: 'syz.9.3704': attribute type 10 has an invalid length. [ 119.441962][T12766] __nla_validate_parse: 20 callbacks suppressed [ 119.441974][T12766] netlink: 55 bytes leftover after parsing attributes in process `syz.9.3704'. [ 119.472232][T12769] loop6: detected capacity change from 0 to 512 [ 119.495327][T12769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.596618][ T5542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.646901][T12827] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 119.834043][T12864] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 119.883994][T12874] loop8: detected capacity change from 0 to 1024 [ 119.968064][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3745'. [ 120.008503][T12899] loop7: detected capacity change from 0 to 512 [ 120.035675][T12899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.058054][T12905] loop6: detected capacity change from 0 to 1024 [ 120.073601][T12914] loop9: detected capacity change from 0 to 512 [ 120.085806][T12914] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.093406][ T8079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.096293][T12914] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 120.116571][T12914] EXT4-fs (loop9): 1 truncate cleaned up [ 120.128162][T12914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.408505][T12927] ================================================================== [ 120.416620][T12927] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 120.424857][T12927] [ 120.427170][T12927] write to 0xffff888119ce69a4 of 4 bytes by task 12914 on cpu 0: [ 120.434862][T12927] xas_set_mark+0x12b/0x140 [ 120.439455][T12927] __folio_start_writeback+0x1dd/0x440 [ 120.444899][T12927] ext4_bio_write_folio+0x5ad/0x9f0 [ 120.450080][T12927] mpage_process_page_bufs+0x4a1/0x620 [ 120.455518][T12927] mpage_prepare_extent_to_map+0x786/0xc00 [ 120.461327][T12927] ext4_do_writepages+0xa05/0x2750 [ 120.466423][T12927] ext4_writepages+0x176/0x300 [ 120.471165][T12927] do_writepages+0x1c3/0x310 [ 120.475738][T12927] file_write_and_wait_range+0x156/0x2c0 [ 120.481353][T12927] generic_buffers_fsync_noflush+0x45/0x120 [ 120.487234][T12927] ext4_sync_file+0x1ab/0x690 [ 120.491895][T12927] vfs_fsync_range+0x10d/0x130 [ 120.496638][T12927] ext4_buffered_write_iter+0x34f/0x3c0 [ 120.502192][T12927] ext4_file_write_iter+0xdbf/0xf00 [ 120.507378][T12927] iter_file_splice_write+0x663/0xa60 [ 120.512741][T12927] direct_splice_actor+0x153/0x2a0 [ 120.517840][T12927] splice_direct_to_actor+0x30f/0x680 [ 120.523197][T12927] do_splice_direct+0xda/0x150 [ 120.527954][T12927] do_sendfile+0x380/0x650 [ 120.532396][T12927] __x64_sys_sendfile64+0x105/0x150 [ 120.537597][T12927] x64_sys_call+0x2bb0/0x2ff0 [ 120.542265][T12927] do_syscall_64+0xd2/0x200 [ 120.546759][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.552643][T12927] [ 120.554953][T12927] read to 0xffff888119ce69a4 of 4 bytes by task 12927 on cpu 1: [ 120.562652][T12927] filemap_write_and_wait_range+0xfc/0x340 [ 120.568540][T12927] filemap_invalidate_pages+0xa4/0x1a0 [ 120.573976][T12927] kiocb_invalidate_pages+0x6e/0x80 [ 120.579170][T12927] __iomap_dio_rw+0x5d4/0x1250 [ 120.583931][T12927] iomap_dio_rw+0x40/0x90 [ 120.588242][T12927] ext4_file_write_iter+0xad9/0xf00 [ 120.593430][T12927] iter_file_splice_write+0x663/0xa60 [ 120.598778][T12927] direct_splice_actor+0x153/0x2a0 [ 120.603866][T12927] splice_direct_to_actor+0x30f/0x680 [ 120.609229][T12927] do_splice_direct+0xda/0x150 [ 120.613974][T12927] do_sendfile+0x380/0x650 [ 120.618383][T12927] __x64_sys_sendfile64+0x105/0x150 [ 120.623565][T12927] x64_sys_call+0x2bb0/0x2ff0 [ 120.628228][T12927] do_syscall_64+0xd2/0x200 [ 120.632710][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.638582][T12927] [ 120.640886][T12927] value changed: 0x0a000021 -> 0x04000021 [ 120.646587][T12927] [ 120.648888][T12927] Reported by Kernel Concurrency Sanitizer on: [ 120.655021][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.9.3753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.664799][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.674834][T12927] ================================================================== [ 121.006253][T12927] ================================================================== [ 121.014350][T12927] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 121.021729][T12927] [ 121.024047][T12927] write to 0xffff888119ce69a4 of 4 bytes by task 12914 on cpu 1: [ 121.031742][T12927] xas_set_mark+0x12b/0x140 [ 121.036229][T12927] __folio_start_writeback+0x1dd/0x440 [ 121.041679][T12927] ext4_bio_write_folio+0x5ad/0x9f0 [ 121.046866][T12927] mpage_process_page_bufs+0x4a1/0x620 [ 121.052310][T12927] mpage_prepare_extent_to_map+0x786/0xc00 [ 121.058112][T12927] ext4_do_writepages+0xa05/0x2750 [ 121.063215][T12927] ext4_writepages+0x176/0x300 [ 121.067957][T12927] do_writepages+0x1c3/0x310 [ 121.072532][T12927] file_write_and_wait_range+0x156/0x2c0 [ 121.078165][T12927] generic_buffers_fsync_noflush+0x45/0x120 [ 121.084036][T12927] ext4_sync_file+0x1ab/0x690 [ 121.088723][T12927] vfs_fsync_range+0x10d/0x130 [ 121.093481][T12927] ext4_buffered_write_iter+0x34f/0x3c0 [ 121.099065][T12927] ext4_file_write_iter+0xdbf/0xf00 [ 121.104281][T12927] iter_file_splice_write+0x663/0xa60 [ 121.109674][T12927] direct_splice_actor+0x153/0x2a0 [ 121.114795][T12927] splice_direct_to_actor+0x30f/0x680 [ 121.120181][T12927] do_splice_direct+0xda/0x150 [ 121.124949][T12927] do_sendfile+0x380/0x650 [ 121.129357][T12927] __x64_sys_sendfile64+0x105/0x150 [ 121.134737][T12927] x64_sys_call+0x2bb0/0x2ff0 [ 121.139419][T12927] do_syscall_64+0xd2/0x200 [ 121.143921][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.149810][T12927] [ 121.152122][T12927] read to 0xffff888119ce69a4 of 4 bytes by task 12927 on cpu 0: [ 121.159732][T12927] ext4_do_writepages+0xf6/0x2750 [ 121.164752][T12927] ext4_writepages+0x176/0x300 [ 121.169500][T12927] do_writepages+0x1c3/0x310 [ 121.174079][T12927] filemap_write_and_wait_range+0x144/0x340 [ 121.179970][T12927] filemap_invalidate_pages+0xa4/0x1a0 [ 121.185420][T12927] kiocb_invalidate_pages+0x6e/0x80 [ 121.190602][T12927] __iomap_dio_rw+0x5d4/0x1250 [ 121.195347][T12927] iomap_dio_rw+0x40/0x90 [ 121.199662][T12927] ext4_file_write_iter+0xad9/0xf00 [ 121.204867][T12927] iter_file_splice_write+0x663/0xa60 [ 121.210231][T12927] direct_splice_actor+0x153/0x2a0 [ 121.215326][T12927] splice_direct_to_actor+0x30f/0x680 [ 121.220681][T12927] do_splice_direct+0xda/0x150 [ 121.225428][T12927] do_sendfile+0x380/0x650 [ 121.229830][T12927] __x64_sys_sendfile64+0x105/0x150 [ 121.235019][T12927] x64_sys_call+0x2bb0/0x2ff0 [ 121.239684][T12927] do_syscall_64+0xd2/0x200 [ 121.244175][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.250051][T12927] [ 121.252358][T12927] value changed: 0x0a000021 -> 0x04000021 [ 121.258053][T12927] [ 121.260355][T12927] Reported by Kernel Concurrency Sanitizer on: [ 121.266486][T12927] CPU: 0 UID: 0 PID: 12927 Comm: syz.9.3753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.276362][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.286408][T12927] ================================================================== [ 121.312254][T10831] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.