last executing test programs: 33.915967764s ago: executing program 1 (id=723): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1, 0x0, 0x18d7ffdf}, 0x18) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}, {&(0x7f0000000800)="696b487a92e473bb265f9a7a", 0xc}], 0x2}}], 0x2, 0x4004040) 33.896082826s ago: executing program 1 (id=724): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x4000201a}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) 33.043333721s ago: executing program 1 (id=759): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 33.007987294s ago: executing program 1 (id=760): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 32.658025119s ago: executing program 1 (id=767): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 32.438429221s ago: executing program 1 (id=773): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 32.438170921s ago: executing program 32 (id=773): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.995244171s ago: executing program 0 (id=1689): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 1.940586416s ago: executing program 0 (id=1691): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.707118549s ago: executing program 0 (id=1699): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 977.102022ms ago: executing program 3 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) 858.037174ms ago: executing program 3 (id=1730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000804) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 857.466344ms ago: executing program 5 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 800.09964ms ago: executing program 3 (id=1723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) 785.075491ms ago: executing program 5 (id=1724): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x91, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 723.240607ms ago: executing program 3 (id=1725): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10}, 0x1c) 668.958283ms ago: executing program 5 (id=1739): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 634.301686ms ago: executing program 4 (id=1729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x2400}], 0x1, 0x0, 0x0, 0x0) 600.38382ms ago: executing program 5 (id=1742): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 592.49704ms ago: executing program 4 (id=1732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 519.434128ms ago: executing program 4 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 518.304678ms ago: executing program 5 (id=1734): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x40000000}, 0x24}, 0x1, 0x0, 0x0, 0x40180}, 0x4000001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xa, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 437.897785ms ago: executing program 2 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xfffffffffffffe8e, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0xe, 0x5, "62ebc0326880cca8af89"}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x40010) 435.341306ms ago: executing program 5 (id=1736): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 388.529851ms ago: executing program 0 (id=1737): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9b00000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 376.394092ms ago: executing program 4 (id=1738): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 329.970237ms ago: executing program 2 (id=1740): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 298.651499ms ago: executing program 3 (id=1741): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 236.023266ms ago: executing program 4 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) 228.581787ms ago: executing program 3 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0x19, 0x0, 0x1, 0x30, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 218.361898ms ago: executing program 2 (id=1745): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x91, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 104.403669ms ago: executing program 0 (id=1746): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r0, &(0x7f0000000040)="7538736d00ff370100000000800000f488a80464fe0b6003", 0x18, 0x24044881, &(0x7f0000000000)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 104.213949ms ago: executing program 2 (id=1747): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 66.077603ms ago: executing program 4 (id=1748): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 26.682077ms ago: executing program 2 (id=1749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25.973926ms ago: executing program 0 (id=1759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = io_uring_setup(0x28ac, &(0x7f0000000700)={0x0, 0xb7a0, 0x400, 0xfffffffd, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 2 (id=1750): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered blocking state [ 32.836046][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.870046][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.888152][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.895241][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.918136][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.925210][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.944155][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.975725][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.000094][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.015759][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.023101][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.032339][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.039507][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.054753][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.066282][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.076779][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.103005][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.110107][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.121396][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.134043][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.141266][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.188496][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.206132][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.216666][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.280806][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.292261][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.353435][ T3315] veth0_vlan: entered promiscuous mode [ 33.371962][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.386448][ T3314] veth0_vlan: entered promiscuous mode [ 33.396493][ T3315] veth1_vlan: entered promiscuous mode [ 33.420513][ T3314] veth1_vlan: entered promiscuous mode [ 33.458419][ T3314] veth0_macvtap: entered promiscuous mode [ 33.465610][ T3315] veth0_macvtap: entered promiscuous mode [ 33.473921][ T3314] veth1_macvtap: entered promiscuous mode [ 33.492444][ T3315] veth1_macvtap: entered promiscuous mode [ 33.500478][ T3320] veth0_vlan: entered promiscuous mode [ 33.509739][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.530676][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.548422][ T3320] veth1_vlan: entered promiscuous mode [ 33.555076][ T3324] veth0_vlan: entered promiscuous mode [ 33.563083][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.574090][ T3324] veth1_vlan: entered promiscuous mode [ 33.582161][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.601471][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.609627][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.629780][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.645165][ T3324] veth0_macvtap: entered promiscuous mode [ 33.652427][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.666067][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.684054][ T3324] veth1_macvtap: entered promiscuous mode [ 33.690452][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699395][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.714822][ T3320] veth0_macvtap: entered promiscuous mode [ 33.724570][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.725601][ T3322] veth0_vlan: entered promiscuous mode [ 33.746817][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.758517][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.768130][ T3322] veth1_vlan: entered promiscuous mode [ 33.776508][ T3320] veth1_macvtap: entered promiscuous mode [ 33.803884][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.812417][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.847616][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.885009][ T125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.921930][ T3322] veth0_macvtap: entered promiscuous mode [ 33.937846][ T125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.954329][ T125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.968618][ T3322] veth1_macvtap: entered promiscuous mode [ 33.984767][ T125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.997880][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 34.006663][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 34.016788][ T1866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.025616][ T1866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.035465][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.062760][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 34.068744][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.071444][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 34.103064][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 34.103127][ T29] audit: type=1400 audit(1763409820.094:122): avc: denied { allowed } for pid=3493 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.128504][ T29] audit: type=1400 audit(1763409820.094:123): avc: denied { create } for pid=3493 comm="syz.1.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.149667][ T29] audit: type=1400 audit(1763409820.094:124): avc: denied { map } for pid=3493 comm="syz.1.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.173471][ T29] audit: type=1400 audit(1763409820.094:125): avc: denied { read write } for pid=3493 comm="syz.1.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.190551][ T1866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.207117][ T3498] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 34.215754][ T3491] Zero length message leads to an empty skb [ 34.247297][ T1866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.289504][ T29] audit: type=1400 audit(1763409820.294:126): avc: denied { name_bind } for pid=3496 comm="syz.2.3" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.311059][ T29] audit: type=1400 audit(1763409820.294:127): avc: denied { node_bind } for pid=3496 comm="syz.2.3" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.361957][ T1866] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.389831][ T1866] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.400613][ T3509] loop2: detected capacity change from 0 to 128 [ 34.413291][ T29] audit: type=1400 audit(1763409820.414:128): avc: denied { setopt } for pid=3510 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.435822][ T1866] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.454751][ T1866] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.473723][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.484699][ T29] audit: type=1400 audit(1763409820.484:129): avc: denied { mount } for pid=3508 comm="syz.2.11" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.507949][ T29] audit: type=1326 audit(1763409820.514:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3508 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 34.517664][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.531320][ T29] audit: type=1326 audit(1763409820.514:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3508 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 34.544168][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.679270][ T3527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.695317][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.822893][ T3537] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 34.904547][ T3532] mmap: syz.2.21 (3532) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.085963][ T3545] loop0: detected capacity change from 0 to 128 [ 35.093742][ T3545] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.146801][ T3545] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.379633][ T3567] loop4: detected capacity change from 0 to 512 [ 35.411628][ T3567] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.424946][ T3567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.481554][ T3567] EXT4-fs (loop4): 1 truncate cleaned up [ 35.497012][ T3575] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 35.507022][ T3567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.571697][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.655141][ T3588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41'. [ 35.896014][ T3611] loop3: detected capacity change from 0 to 512 [ 35.913900][ T3611] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 35.949928][ T3611] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.48: bg 0: block 104: invalid block bitmap [ 35.964545][ T3611] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 35.978272][ T3611] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.48: invalid indirect mapped block 1 (level 1) [ 35.996697][ T3611] EXT4-fs (loop3): 1 truncate cleaned up [ 36.002857][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.161329][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.190963][ T3630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.228298][ T3632] uprobe: syz.3.52:3632 failed to unregister, leaking uprobe [ 36.297716][ T3631] uprobe: syz.3.52:3631 failed to unregister, leaking uprobe [ 36.631876][ T3645] macvtap1: entered promiscuous mode [ 36.637272][ T3645] macvtap1: entered allmulticast mode [ 36.643177][ T3645] dummy0: entered promiscuous mode [ 36.648481][ T3645] dummy0: entered allmulticast mode [ 36.655243][ T3645] team0: Device macvtap1 failed to register rx_handler [ 36.662588][ T3645] dummy0: left allmulticast mode [ 36.676748][ T3645] dummy0: left promiscuous mode [ 36.701244][ T3651] loop4: detected capacity change from 0 to 128 [ 36.718652][ T3651] syz.4.60: attempt to access beyond end of device [ 36.718652][ T3651] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 36.732753][ T3651] syz.4.60: attempt to access beyond end of device [ 36.732753][ T3651] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 36.746071][ T3651] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 36.754915][ T3651] syz.4.60: attempt to access beyond end of device [ 36.754915][ T3651] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 36.768756][ T3651] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 36.778707][ T3651] syz.4.60: attempt to access beyond end of device [ 36.778707][ T3651] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 36.793319][ T3651] syz.4.60: attempt to access beyond end of device [ 36.793319][ T3651] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 36.806657][ T3651] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 36.815595][ T3651] syz.4.60: attempt to access beyond end of device [ 36.815595][ T3651] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 36.829143][ T3651] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 36.838268][ T3651] syz.4.60: attempt to access beyond end of device [ 36.838268][ T3651] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 36.842174][ T3653] syz.3.61 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.852421][ T3651] syz.4.60: attempt to access beyond end of device [ 36.852421][ T3651] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 36.875682][ T3651] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 36.884693][ T3651] syz.4.60: attempt to access beyond end of device [ 36.884693][ T3651] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 36.898006][ T3651] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 36.907005][ T3651] syz.4.60: attempt to access beyond end of device [ 36.907005][ T3651] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 36.938218][ T3651] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 36.947185][ T3651] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 36.957648][ T3651] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 36.969693][ T3651] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 36.987806][ T3657] vlan2: entered allmulticast mode [ 37.005512][ T3659] $H: renamed from bond0 (while UP) [ 37.015517][ T3659] $H: entered promiscuous mode [ 37.020693][ T3659] bond_slave_0: entered promiscuous mode [ 37.026475][ T3659] bond_slave_1: entered promiscuous mode [ 37.048471][ T3659] syz.3.64 (3659) used greatest stack depth: 10600 bytes left [ 37.063054][ T3661] loop0: detected capacity change from 0 to 512 [ 37.072155][ T3661] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.65: corrupted inode contents [ 37.085959][ T3661] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 37.096295][ T3661] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.65: corrupted inode contents [ 37.109339][ T3661] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.65: mark_inode_dirty error [ 37.120765][ T3661] EXT4-fs (loop0): 1 orphan inode deleted [ 37.130900][ T3661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.160892][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.261689][ T31] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.275046][ T3677] sd 0:0:1:0: device reset [ 37.279828][ T31] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.301405][ T31] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.310222][ T31] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.313622][ T3681] loop2: detected capacity change from 0 to 128 [ 37.557438][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 37.566204][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 37.580480][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 37.612280][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 37.726324][ T3728] loop2: detected capacity change from 0 to 128 [ 37.738688][ T3728] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.761591][ T3732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3732 comm=syz.4.93 [ 37.776341][ T3732] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 37.793381][ T3728] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.856925][ T3721] syz.3.89 (3721) used greatest stack depth: 10160 bytes left [ 37.914116][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.295082][ T3777] bridge0: entered promiscuous mode [ 38.306923][ T3777] macsec1: entered promiscuous mode [ 38.317764][ T3777] bridge0: port 3(macsec1) entered blocking state [ 38.324257][ T3777] bridge0: port 3(macsec1) entered disabled state [ 38.435455][ T3777] macsec1: entered allmulticast mode [ 38.441054][ T3777] bridge0: entered allmulticast mode [ 38.549334][ T3777] macsec1: left allmulticast mode [ 38.554433][ T3777] bridge0: left allmulticast mode [ 38.563312][ T3777] bridge0: left promiscuous mode [ 38.596564][ C0] hrtimer: interrupt took 32018 ns [ 38.649170][ T3793] capability: warning: `syz.2.117' uses deprecated v2 capabilities in a way that may be insecure [ 39.214419][ T3823] loop3: detected capacity change from 0 to 512 [ 39.225307][ T3823] ======================================================= [ 39.225307][ T3823] WARNING: The mand mount option has been deprecated and [ 39.225307][ T3823] and is ignored by this kernel. Remove the mand [ 39.225307][ T3823] option from the mount to silence this warning. [ 39.225307][ T3823] ======================================================= [ 39.275258][ T3823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.297190][ T3823] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.323133][ T3823] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.131: corrupted inode contents [ 39.335499][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 39.335513][ T29] audit: type=1400 audit(1763409825.324:269): avc: denied { create } for pid=3822 comm="syz.3.131" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.380781][ T3823] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.131: mark_inode_dirty error [ 39.404631][ T3828] __nla_validate_parse: 6 callbacks suppressed [ 39.404651][ T3828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.132'. [ 39.421171][ T3823] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.131: corrupted inode contents [ 39.461175][ T3823] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.131: mark_inode_dirty error [ 39.480154][ T3828] IPVS: Error connecting to the multicast addr [ 39.489492][ T3830] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 39.496081][ T3830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.503745][ T3830] vhci_hcd vhci_hcd.0: Device attached [ 39.529321][ T29] audit: type=1400 audit(1763409825.534:270): avc: denied { mounton } for pid=3822 comm="syz.3.131" path="/34/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.616279][ T3834] bridge0: port 3(gretap0) entered blocking state [ 39.623150][ T3834] bridge0: port 3(gretap0) entered disabled state [ 39.645610][ T29] audit: type=1400 audit(1763409825.614:271): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.665720][ T29] audit: type=1400 audit(1763409825.614:272): avc: denied { ioctl } for pid=3833 comm="syz.4.134" path="socket:[6343]" dev="sockfs" ino=6343 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.688579][ T3834] gretap0: entered allmulticast mode [ 39.693704][ T3836] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 39.696515][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 39.702874][ T3836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.713373][ T3834] gretap0: entered promiscuous mode [ 39.719251][ T3836] vhci_hcd vhci_hcd.0: Device attached [ 39.727176][ T3834] bridge0: port 3(gretap0) entered blocking state [ 39.736303][ T3834] bridge0: port 3(gretap0) entered forwarding state [ 39.744091][ T3841] gretap0: left allmulticast mode [ 39.749244][ T3841] gretap0: left promiscuous mode [ 39.754486][ T3841] bridge0: port 3(gretap0) entered disabled state [ 39.761455][ T29] audit: type=1400 audit(1763409825.694:273): avc: denied { remove_name } for pid=3314 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.784096][ T29] audit: type=1400 audit(1763409825.694:274): avc: denied { unlink } for pid=3314 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.817832][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.826654][ T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 39.834781][ T3830] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 39.841337][ T3830] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.848962][ T3830] vhci_hcd vhci_hcd.0: Device attached [ 39.874714][ T3830] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 39.881275][ T3830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.889212][ T3830] vhci_hcd vhci_hcd.0: Device attached [ 39.907006][ T3836] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 39.913719][ T3836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.921278][ T3836] vhci_hcd vhci_hcd.0: Device attached [ 39.981464][ T29] audit: type=1400 audit(1763409825.964:275): avc: denied { setopt } for pid=3851 comm="syz.3.136" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.006272][ T3854] bridge0: entered promiscuous mode [ 40.017893][ T3854] bridge0: port 3(macsec1) entered blocking state [ 40.024528][ T3854] bridge0: port 3(macsec1) entered disabled state [ 40.037831][ T3837] vhci_hcd: connection closed [ 40.037854][ T3840] vhci_hcd: connection closed [ 40.038022][ T3843] vhci_hcd: connection closed [ 40.042744][ T3847] vhci_hcd: connection closed [ 40.047969][ T1866] vhci_hcd: stop threads [ 40.053245][ T3854] macsec1: entered allmulticast mode [ 40.056892][ T1866] vhci_hcd: release socket [ 40.056918][ T1866] vhci_hcd: disconnect device [ 40.061156][ T3854] bridge0: entered allmulticast mode [ 40.068231][ T3831] vhci_hcd: connection reset by peer [ 40.097072][ T3854] macsec1: left allmulticast mode [ 40.102186][ T3854] bridge0: left allmulticast mode [ 40.107558][ T1866] vhci_hcd: stop threads [ 40.111834][ T1866] vhci_hcd: release socket [ 40.116277][ T1866] vhci_hcd: disconnect device [ 40.121648][ T3854] bridge0: left promiscuous mode [ 40.153941][ T1866] vhci_hcd: stop threads [ 40.158268][ T1866] vhci_hcd: release socket [ 40.162742][ T1866] vhci_hcd: disconnect device [ 40.167867][ T1866] vhci_hcd: stop threads [ 40.172153][ T1866] vhci_hcd: release socket [ 40.176717][ T1866] vhci_hcd: disconnect device [ 40.181803][ T1866] vhci_hcd: stop threads [ 40.186091][ T1866] vhci_hcd: release socket [ 40.190633][ T1866] vhci_hcd: disconnect device [ 40.326166][ T3865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.351860][ T29] audit: type=1326 audit(1763409826.354:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 40.387667][ T29] audit: type=1326 audit(1763409826.374:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 40.411000][ T29] audit: type=1326 audit(1763409826.374:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 40.437951][ T3873] loop3: detected capacity change from 0 to 512 [ 40.449803][ T3873] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.147: inode has both inline data and extents flags [ 40.463324][ T3873] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.147: couldn't read orphan inode 15 (err -117) [ 40.464118][ T3865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.476048][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.560612][ T3873] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.147: Directory hole found for htree leaf block 0 [ 40.578090][ T3865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.621431][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.671271][ T3865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.750245][ T1918] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.768157][ T3888] SELinux: failed to load policy [ 40.779989][ T1918] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.796121][ T3893] loop3: detected capacity change from 0 to 256 [ 40.813579][ T1918] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835168][ T1918] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.877449][ T3893] FAT-fs (loop3): codepage cp866 not found [ 40.901144][ T3893] loop3: detected capacity change from 0 to 1024 [ 40.931144][ T3893] EXT4-fs (loop3): filesystem is read-only [ 40.941296][ T3893] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 40.952148][ T3893] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 41.011654][ T3893] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.036251][ T3906] Driver unsupported XDP return value 0 on prog (id 108) dev N/A, expect packet loss! [ 41.043035][ T3912] loop1: detected capacity change from 0 to 512 [ 41.055452][ T3893] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.154: inode #1: comm syz.3.154: iget: illegal inode # [ 41.104517][ T3893] EXT4-fs (loop3): no journal found [ 41.109982][ T3893] EXT4-fs (loop3): can't get journal size [ 41.118081][ T3912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.136689][ T3893] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.154: iget: bad extra_isize 65535 (inode size 1024) [ 41.163606][ T3912] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.179928][ T3893] EXT4-fs (loop3): get root inode failed [ 41.185765][ T3893] EXT4-fs (loop3): mount failed [ 41.189754][ T3912] EXT4-fs (loop1): 1 truncate cleaned up [ 41.200318][ T3912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.322190][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.374717][ T3935] pim6reg: entered allmulticast mode [ 41.391115][ T3939] loop1: detected capacity change from 0 to 512 [ 41.404960][ T3939] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.169: error while reading EA inode 32 err=-116 [ 41.421082][ T3935] pim6reg: left allmulticast mode [ 41.428204][ T3939] EXT4-fs (loop1): Remounting filesystem read-only [ 41.437182][ T3939] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.447517][ T3939] EXT4-fs (loop1): 1 orphan inode deleted [ 41.476272][ T3939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.516765][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.671376][ T3967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 41.685718][ T3969] loop3: detected capacity change from 0 to 512 [ 41.719236][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.778929][ T3969] ext4 filesystem being mounted at /45/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.814982][ T3969] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.182: corrupted xattr block 33: invalid ea_ino [ 41.830855][ T3969] EXT4-fs (loop3): Remounting filesystem read-only [ 41.837686][ T3969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 41.848310][ T3969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 41.858787][ T3969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 41.897322][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.965132][ T3977] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.007399][ T3977] SELinux: failed to load policy [ 42.065671][ T3998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 42.072394][ T3998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.079997][ T3998] vhci_hcd vhci_hcd.0: Device attached [ 42.097671][ T3998] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 42.104319][ T3998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.112055][ T3998] vhci_hcd vhci_hcd.0: Device attached [ 42.126158][ T4009] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 42.136426][ T3998] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 42.142998][ T3998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.150660][ T3998] vhci_hcd vhci_hcd.0: Device attached [ 42.171869][ T4009] bond1: entered promiscuous mode [ 42.177020][ T4009] bond1: entered allmulticast mode [ 42.190133][ T4009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.207112][ T4048] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 42.213752][ T4048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.221361][ T4048] vhci_hcd vhci_hcd.0: Device attached [ 42.236174][ T3998] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 42.242948][ T3998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.250520][ T3998] vhci_hcd vhci_hcd.0: Device attached [ 42.280052][ T4055] vhci_hcd: connection closed [ 42.280306][ T4010] vhci_hcd: connection closed [ 42.284493][ T1918] vhci_hcd: stop threads [ 42.285322][ T3999] vhci_hcd: connection closed [ 42.289961][ T1918] vhci_hcd: release socket [ 42.303466][ T1918] vhci_hcd: disconnect device [ 42.308303][ T4050] vhci_hcd: connection closed [ 42.312866][ T4002] vhci_hcd: connection closed [ 42.324218][ T1918] vhci_hcd: stop threads [ 42.333248][ T1918] vhci_hcd: release socket [ 42.337739][ T1918] vhci_hcd: disconnect device [ 42.342646][ T1037] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 42.350691][ T4000] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 42.358213][ T1918] vhci_hcd: stop threads [ 42.362504][ T1918] vhci_hcd: release socket [ 42.367086][ T1918] vhci_hcd: disconnect device [ 42.373095][ T1918] vhci_hcd: stop threads [ 42.377439][ T1918] vhci_hcd: release socket [ 42.381908][ T1918] vhci_hcd: disconnect device [ 42.387186][ T1918] vhci_hcd: stop threads [ 42.391523][ T1918] vhci_hcd: release socket [ 42.395956][ T1918] vhci_hcd: disconnect device [ 42.423358][ T4076] loop2: detected capacity change from 0 to 128 [ 42.432340][ T4076] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.444832][ T4076] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.550167][ T4088] loop0: detected capacity change from 0 to 128 [ 42.557094][ T4086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.211'. [ 42.557163][ T4088] EXT4-fs: Ignoring removed nobh option [ 42.573249][ T4088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.585788][ T4088] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.619193][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.676135][ T4101] loop4: detected capacity change from 0 to 256 [ 42.737199][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 42.755457][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.998870][ T4117] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 43.006679][ T4117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.222'. [ 43.217734][ T4175] loop0: detected capacity change from 0 to 512 [ 43.226275][ T4175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.243980][ T4175] EXT4-fs (loop0): 1 truncate cleaned up [ 43.257319][ T4175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.354570][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.156373][ T4226] netlink: 96 bytes leftover after parsing attributes in process `syz.2.255'. [ 44.339783][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 44.339798][ T29] audit: type=1400 audit(1763409830.294:417): avc: denied { execute } for pid=4241 comm="syz.1.263" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 44.697321][ T29] audit: type=1326 audit(1763409830.704:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.720721][ T29] audit: type=1326 audit(1763409830.704:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.786178][ T29] audit: type=1326 audit(1763409830.754:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.809639][ T29] audit: type=1326 audit(1763409830.754:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.832965][ T29] audit: type=1326 audit(1763409830.754:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.856313][ T29] audit: type=1326 audit(1763409830.754:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.879782][ T29] audit: type=1326 audit(1763409830.754:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.903149][ T29] audit: type=1326 audit(1763409830.754:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 44.926510][ T29] audit: type=1326 audit(1763409830.754:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7faac6b8f6c9 code=0x7ffc0000 [ 45.024530][ T9] usb 1-1: enqueue for inactive port 0 [ 45.036601][ T9] usb 1-1: enqueue for inactive port 0 [ 45.089731][ T4309] loop0: detected capacity change from 0 to 512 [ 45.097386][ T4309] EXT4-fs: Ignoring removed i_version option [ 45.108466][ T9] vhci_hcd: vhci_device speed not set [ 45.119767][ T4309] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.146478][ T4309] EXT4-fs (loop0): 1 truncate cleaned up [ 45.153349][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.220849][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.292754][ T4346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4346 comm=syz.2.290 [ 45.601665][ T4378] loop4: detected capacity change from 0 to 1024 [ 45.609010][ T4378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.638327][ T4378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.716271][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.863387][ T4405] loop2: detected capacity change from 0 to 256 [ 45.886481][ T4405] FAT-fs (loop2): Directory bread(block 64) failed [ 45.899100][ T4405] FAT-fs (loop2): Directory bread(block 65) failed [ 45.905764][ T4405] FAT-fs (loop2): Directory bread(block 66) failed [ 45.912577][ T4405] FAT-fs (loop2): Directory bread(block 67) failed [ 45.919321][ T4405] FAT-fs (loop2): Directory bread(block 68) failed [ 45.926089][ T4405] FAT-fs (loop2): Directory bread(block 69) failed [ 45.933161][ T4405] FAT-fs (loop2): Directory bread(block 70) failed [ 45.939806][ T4405] FAT-fs (loop2): Directory bread(block 71) failed [ 45.946479][ T4405] FAT-fs (loop2): Directory bread(block 72) failed [ 45.953189][ T4405] FAT-fs (loop2): Directory bread(block 73) failed [ 46.011245][ T4405] bio_check_eod: 186 callbacks suppressed [ 46.011266][ T4405] syz.2.311: attempt to access beyond end of device [ 46.011266][ T4405] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 46.032222][ T4405] syz.2.311: attempt to access beyond end of device [ 46.032222][ T4405] loop2: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 46.047352][ T4405] syz.2.311: attempt to access beyond end of device [ 46.047352][ T4405] loop2: rw=2051, sector=1352, nr_sectors = 32 limit=256 [ 46.064832][ T4405] syz.2.311: attempt to access beyond end of device [ 46.064832][ T4405] loop2: rw=2051, sector=1416, nr_sectors = 32 limit=256 [ 46.083053][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 46.092937][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 46.102314][ T4405] syz.2.311: attempt to access beyond end of device [ 46.102314][ T4405] loop2: rw=2051, sector=1480, nr_sectors = 32 limit=256 [ 46.116399][ T4405] syz.2.311: attempt to access beyond end of device [ 46.116399][ T4405] loop2: rw=2051, sector=1512, nr_sectors = 32 limit=256 [ 46.117139][ T4414] syz.2.311: attempt to access beyond end of device [ 46.117139][ T4414] loop2: rw=2049, sector=1256, nr_sectors = 32 limit=256 [ 46.145272][ T4414] syz.2.311: attempt to access beyond end of device [ 46.145272][ T4414] loop2: rw=2049, sector=1320, nr_sectors = 32 limit=256 [ 46.166747][ T4414] syz.2.311: attempt to access beyond end of device [ 46.166747][ T4414] loop2: rw=2049, sector=1384, nr_sectors = 32 limit=256 [ 46.181830][ T4416] loop1: detected capacity change from 0 to 256 [ 46.190024][ T4414] syz.2.311: attempt to access beyond end of device [ 46.190024][ T4414] loop2: rw=2049, sector=1448, nr_sectors = 32 limit=256 [ 46.275790][ T4427] pimreg: entered allmulticast mode [ 46.283974][ T4427] pimreg: left allmulticast mode [ 46.408810][ T4450] loop1: detected capacity change from 0 to 128 [ 46.427329][ T4450] FAT-fs (loop1): Directory bread(block 32) failed [ 46.444058][ T4450] FAT-fs (loop1): Directory bread(block 33) failed [ 46.458372][ T4450] FAT-fs (loop1): Directory bread(block 34) failed [ 46.476698][ T4450] FAT-fs (loop1): Directory bread(block 35) failed [ 46.492700][ T4450] FAT-fs (loop1): Directory bread(block 36) failed [ 46.512203][ T4464] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.519667][ T4450] FAT-fs (loop1): Directory bread(block 37) failed [ 46.544639][ T4450] FAT-fs (loop1): Directory bread(block 38) failed [ 46.556299][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 46.556406][ T4450] FAT-fs (loop1): Directory bread(block 39) failed [ 46.573478][ T4450] FAT-fs (loop1): Directory bread(block 40) failed [ 46.580295][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 46.581149][ T4450] FAT-fs (loop1): Directory bread(block 41) failed [ 46.686936][ T4450] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 46.695074][ T4450] FAT-fs (loop1): Filesystem has been set read-only [ 46.747348][ T4489] process 'syz.1.338' launched './file1' with NULL argv: empty string added [ 47.406677][ T1037] usb 7-1: enqueue for inactive port 0 [ 47.412276][ T1037] usb 7-1: enqueue for inactive port 0 [ 47.486856][ T1037] vhci_hcd: vhci_device speed not set [ 47.689711][ T4517] loop2: detected capacity change from 0 to 164 [ 47.799597][ T4525] netem: incorrect gi model size [ 47.804618][ T4525] netem: change failed [ 47.833276][ T4527] loop2: detected capacity change from 0 to 1024 [ 47.841355][ T4527] EXT4-fs (loop2): stripe (3889) is not aligned with cluster size (16), stripe is disabled [ 47.867173][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.931079][ T4527] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 47.943501][ T4527] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.943501][ T4527] [ 47.953177][ T4527] EXT4-fs (loop2): Total free blocks count 0 [ 47.959207][ T4527] EXT4-fs (loop2): Free/Dirty block details [ 47.965125][ T4527] EXT4-fs (loop2): free_blocks=0 [ 47.970119][ T4527] EXT4-fs (loop2): dirty_blocks=0 [ 47.975145][ T4527] EXT4-fs (loop2): Block reservation details [ 47.981200][ T4527] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 48.032132][ T4539] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 48.048301][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.049089][ T4537] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.069450][ T4537] vhci_hcd: default hub control req: 0305 vfffa i0002 l0 [ 48.208868][ T4566] loop0: detected capacity change from 0 to 1024 [ 48.229641][ T4570] loop3: detected capacity change from 0 to 128 [ 48.237330][ T4566] EXT4-fs: Ignoring removed oldalloc option [ 48.243364][ T4566] EXT4-fs: Ignoring removed bh option [ 48.259853][ T4566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.273105][ T4570] FAT-fs (loop3): Directory bread(block 32) failed [ 48.279878][ T4570] FAT-fs (loop3): Directory bread(block 33) failed [ 48.286893][ T4570] FAT-fs (loop3): Directory bread(block 34) failed [ 48.293480][ T4570] FAT-fs (loop3): Directory bread(block 35) failed [ 48.304856][ T4566] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.370: Allocating blocks 385-513 which overlap fs metadata [ 48.308943][ T4570] FAT-fs (loop3): Directory bread(block 36) failed [ 48.321870][ T4566] EXT4-fs (loop0): pa ffff888107204000: logic 16, phys. 129, len 24 [ 48.325234][ T4570] FAT-fs (loop3): Directory bread(block 37) failed [ 48.333214][ T4566] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 48.354316][ T4570] FAT-fs (loop3): Directory bread(block 38) failed [ 48.357951][ T4566] syz.0.370 (4566) used greatest stack depth: 9208 bytes left [ 48.370887][ T4570] FAT-fs (loop3): Directory bread(block 39) failed [ 48.378834][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.387974][ T4570] FAT-fs (loop3): Directory bread(block 40) failed [ 48.394579][ T4570] FAT-fs (loop3): Directory bread(block 41) failed [ 48.430005][ T4570] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 48.438212][ T4570] FAT-fs (loop3): Filesystem has been set read-only [ 48.619179][ T4616] netlink: 'syz.0.386': attribute type 13 has an invalid length. [ 48.672260][ T4616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.001995][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.401'. [ 49.029364][ T4660] xt_hashlimit: max too large, truncated to 1048576 [ 49.036914][ T4660] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 49.771476][ T4694] smc: net device bond0 applied user defined pnetid SYZ0 [ 49.783106][ T4694] smc: net device bond0 erased user defined pnetid SYZ0 [ 49.831415][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 49.831432][ T29] audit: type=1400 audit(1763409835.834:553): avc: denied { write } for pid=4700 comm="syz.2.418" name="tcp6" dev="proc" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.832163][ T4698] loop4: detected capacity change from 0 to 4096 [ 49.877805][ T4698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.911875][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.999121][ T29] audit: type=1400 audit(1763409836.004:554): avc: denied { remount } for pid=4711 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.200302][ T29] audit: type=1400 audit(1763409836.204:555): avc: denied { read } for pid=4740 comm="syz.1.429" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.231076][ T29] audit: type=1400 audit(1763409836.204:556): avc: denied { open } for pid=4740 comm="syz.1.429" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.255639][ T29] audit: type=1400 audit(1763409836.234:557): avc: denied { ioctl } for pid=4740 comm="syz.1.429" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.257907][ T4746] xt_hashlimit: max too large, truncated to 1048576 [ 50.290564][ T4746] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 50.333029][ T4749] loop2: detected capacity change from 0 to 512 [ 50.345674][ T4749] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.432: inode has both inline data and extents flags [ 50.359336][ T4749] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.432: couldn't read orphan inode 15 (err -117) [ 50.359842][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 50.377805][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.380230][ T4753] netlink: 348 bytes leftover after parsing attributes in process `syz.1.434'. [ 50.401646][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 50.410455][ T4753] netlink: 348 bytes leftover after parsing attributes in process `syz.1.434'. [ 50.419513][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 50.420503][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.458767][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.472701][ T4762] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 50.495297][ T4762] bond1: (slave geneve2): making interface the new active one [ 50.504057][ T4762] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 50.512929][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 50.526827][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 50.535144][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 50.544156][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 50.876639][ T29] audit: type=1326 audit(1763409836.874:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 50.899936][ T29] audit: type=1326 audit(1763409836.874:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 50.943673][ T29] audit: type=1326 audit(1763409836.924:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 50.967073][ T29] audit: type=1326 audit(1763409836.924:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 50.983985][ T4840] loop1: detected capacity change from 0 to 512 [ 50.990571][ T29] audit: type=1326 audit(1763409836.924:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 51.069583][ T4840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.069836][ T4850] loop3: detected capacity change from 0 to 1024 [ 51.089487][ T4850] EXT4-fs: Ignoring removed oldalloc option [ 51.090900][ T4840] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.095511][ T4850] EXT4-fs: Ignoring removed bh option [ 51.145729][ T3373] IPVS: starting estimator thread 0... [ 51.167679][ T4850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.190029][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.201447][ T4850] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.455: Allocating blocks 385-513 which overlap fs metadata [ 51.218489][ T4858] tipc: Started in network mode [ 51.223489][ T4858] tipc: Node identity ac14140f, cluster identity 4711 [ 51.232375][ T4850] EXT4-fs (loop3): pa ffff8881072560e0: logic 16, phys. 129, len 24 [ 51.236866][ T4856] IPVS: using max 1968 ests per chain, 98400 per kthread [ 51.240388][ T4850] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 51.258410][ T4858] tipc: New replicast peer: 255.255.255.83 [ 51.264288][ T4858] tipc: Enabled bearer , priority 10 [ 51.331467][ T4850] syz.3.455 (4850) used greatest stack depth: 9144 bytes left [ 51.341353][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.462344][ T4894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 51.610455][ T4914] loop1: detected capacity change from 0 to 4096 [ 51.644492][ T4923] loop4: detected capacity change from 0 to 512 [ 51.651382][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.683337][ T4923] EXT4-fs: Ignoring removed oldalloc option [ 51.708193][ T4923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.719767][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.731637][ T4923] EXT4-fs (loop4): 1 truncate cleaned up [ 51.760466][ T4923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.811622][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.841542][ T4937] loop4: detected capacity change from 0 to 512 [ 51.853672][ T4937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.868145][ T4937] EXT4-fs (loop4): 1 truncate cleaned up [ 51.874348][ T4937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.921293][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.964381][ T4952] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 51.992240][ T4952] bond0: (slave geneve2): making interface the new active one [ 52.000362][ T4952] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 52.009280][ T1918] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 52.022303][ T1918] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 52.040560][ T1918] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 52.048193][ T4993] netlink: 27 bytes leftover after parsing attributes in process `syz.4.483'. [ 52.052799][ T1918] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 52.536740][ T3756] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.634613][ T1037] tipc: Node number set to 2886997007 [ 52.733930][ T5089] loop4: detected capacity change from 0 to 128 [ 52.757958][ T5089] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.778191][ T5089] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.838358][ T5096] loop3: detected capacity change from 0 to 256 [ 52.845279][ T1866] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.871576][ T5096] FAT-fs (loop3): Directory bread(block 64) failed [ 52.886773][ T5096] FAT-fs (loop3): Directory bread(block 65) failed [ 52.895938][ T5096] FAT-fs (loop3): Directory bread(block 66) failed [ 52.914500][ T5096] FAT-fs (loop3): Directory bread(block 67) failed [ 52.936588][ T5096] FAT-fs (loop3): Directory bread(block 68) failed [ 52.943180][ T5096] FAT-fs (loop3): Directory bread(block 69) failed [ 52.966651][ T5096] FAT-fs (loop3): Directory bread(block 70) failed [ 52.981403][ T5096] FAT-fs (loop3): Directory bread(block 71) failed [ 52.989772][ T5112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.507'. [ 53.001933][ T5114] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 53.009753][ T5096] FAT-fs (loop3): Directory bread(block 72) failed [ 53.016978][ T5096] FAT-fs (loop3): Directory bread(block 73) failed [ 53.051532][ T5114] bond1: entered promiscuous mode [ 53.056724][ T5114] bond1: entered allmulticast mode [ 53.065135][ T5096] bio_check_eod: 8 callbacks suppressed [ 53.065171][ T5096] syz.3.500: attempt to access beyond end of device [ 53.065171][ T5096] loop3: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 53.085707][ T5096] syz.3.500: attempt to access beyond end of device [ 53.085707][ T5096] loop3: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 53.100236][ T5096] syz.3.500: attempt to access beyond end of device [ 53.100236][ T5096] loop3: rw=2051, sector=1352, nr_sectors = 32 limit=256 [ 53.115322][ T5096] syz.3.500: attempt to access beyond end of device [ 53.115322][ T5096] loop3: rw=2051, sector=1416, nr_sectors = 32 limit=256 [ 53.129703][ T5096] syz.3.500: attempt to access beyond end of device [ 53.129703][ T5096] loop3: rw=2051, sector=1448, nr_sectors = 32 limit=256 [ 53.143741][ T5114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.157714][ T5153] syz.3.500: attempt to access beyond end of device [ 53.157714][ T5153] loop3: rw=2049, sector=1256, nr_sectors = 32 limit=256 [ 53.228028][ T5114] ip6gretap1: entered promiscuous mode [ 53.233566][ T5114] ip6gretap1: entered allmulticast mode [ 53.236841][ T5153] syz.3.500: attempt to access beyond end of device [ 53.236841][ T5153] loop3: rw=2049, sector=1320, nr_sectors = 8 limit=256 [ 53.252703][ T5096] syz.3.500: attempt to access beyond end of device [ 53.252703][ T5096] loop3: rw=2051, sector=1256, nr_sectors = 32 limit=256 [ 53.287364][ T5096] syz.3.500: attempt to access beyond end of device [ 53.287364][ T5096] loop3: rw=2051, sector=1320, nr_sectors = 32 limit=256 [ 53.328413][ T5096] syz.3.500: attempt to access beyond end of device [ 53.328413][ T5096] loop3: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 53.445250][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 53.602841][ T5188] loop1: detected capacity change from 0 to 512 [ 53.630486][ T5188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.690125][ T5188] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.698127][ T5188] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 53.745658][ T5188] System zones: 0-1, 15-15, 18-18, 34-34 [ 53.816892][ T5188] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.823399][ T5188] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 53.837987][ T5188] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 53.845172][ T5188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.523: bg 0: block 40: padding at end of block bitmap is not set [ 53.986989][ T5188] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 54.056730][ T5188] EXT4-fs (loop1): 1 truncate cleaned up [ 54.062879][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.147646][ T5188] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.523: bad symlink. [ 54.296924][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.568490][ T5255] loop2: detected capacity change from 0 to 512 [ 54.576749][ T5255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.616167][ T5255] EXT4-fs (loop2): 1 truncate cleaned up [ 54.622210][ T5255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.688034][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.879687][ T5264] loop1: detected capacity change from 0 to 8192 [ 54.961113][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 54.961129][ T29] audit: type=1400 audit(1763409840.964:704): avc: denied { mount } for pid=5260 comm="syz.1.549" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.021149][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 55.077549][ T29] audit: type=1400 audit(1763409841.084:705): avc: denied { lock } for pid=5289 comm="syz.3.560" path="socket:[9195]" dev="sockfs" ino=9195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 55.409433][ T29] audit: type=1326 audit(1763409841.414:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 55.432708][ T29] audit: type=1326 audit(1763409841.414:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 55.432744][ T29] audit: type=1326 audit(1763409841.414:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 55.724401][ T29] audit: type=1326 audit(1763409841.434:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 55.724439][ T29] audit: type=1326 audit(1763409841.434:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 55.724472][ T29] audit: type=1400 audit(1763409841.484:711): avc: denied { mount } for pid=5309 comm="syz.4.568" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.724505][ T29] audit: type=1326 audit(1763409841.534:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 55.724551][ T29] audit: type=1400 audit(1763409841.544:713): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.851475][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 55.851540][ T5338] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 56.087256][ T5352] netlink: 19 bytes leftover after parsing attributes in process `syz.2.582'. [ 56.422398][ T5378] loop9: detected capacity change from 0 to 7 [ 56.456771][ T5378] buffer_io_error: 18 callbacks suppressed [ 56.456790][ T5378] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.535110][ T5378] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.543022][ T5378] loop9: unable to read partition table [ 56.595077][ T5378] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 56.595077][ T5378] ) failed (rc=-5) [ 56.877385][ T5396] loop4: detected capacity change from 0 to 8192 [ 56.942366][ T5406] netlink: 'syz.3.599': attribute type 7 has an invalid length. [ 57.044142][ T5417] rdma_op ffff88811a53c980 conn xmit_rdma 0000000000000000 [ 58.062229][ T5453] loop4: detected capacity change from 0 to 512 [ 58.090408][ T5453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.090486][ T5453] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.099707][ T5453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.618: bg 0: block 18: invalid block bitmap [ 58.237849][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.316430][ T5479] wireguard0: entered promiscuous mode [ 58.322095][ T5479] wireguard0: entered allmulticast mode [ 58.335060][ T5491] loop4: detected capacity change from 0 to 1024 [ 58.344725][ T5493] xt_hashlimit: max too large, truncated to 1048576 [ 58.352098][ T5491] EXT4-fs: Ignoring removed nobh option [ 58.357728][ T5491] EXT4-fs: inline encryption not supported [ 58.380727][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.419699][ T5491] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.632: Allocating blocks 385-513 which overlap fs metadata [ 58.463578][ T5491] EXT4-fs (loop4): pa ffff8881072561c0: logic 16, phys. 129, len 24 [ 58.471711][ T5491] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 58.486478][ T5491] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 58.498975][ T5491] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.498975][ T5491] [ 58.508715][ T5491] EXT4-fs (loop4): Total free blocks count 0 [ 58.514709][ T5491] EXT4-fs (loop4): Free/Dirty block details [ 58.520810][ T5491] EXT4-fs (loop4): free_blocks=128 [ 58.526098][ T5491] EXT4-fs (loop4): dirty_blocks=0 [ 58.531387][ T5491] EXT4-fs (loop4): Block reservation details [ 58.537623][ T5491] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 58.604754][ T5540] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.650395][ T5553] loop1: detected capacity change from 0 to 512 [ 58.676965][ T5553] EXT4-fs: Ignoring removed i_version option [ 58.683062][ T5553] EXT4-fs: Ignoring removed bh option [ 58.711874][ T5553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.730071][ T5553] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.799406][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.855416][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 58.876415][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 58.911187][ T5616] wireguard0: entered promiscuous mode [ 58.916814][ T5616] wireguard0: entered allmulticast mode [ 59.091396][ T5649] ALSA: seq fatal error: cannot create timer (-19) [ 59.200896][ T5700] loop3: detected capacity change from 0 to 128 [ 59.290928][ T5716] syz.3.668: attempt to access beyond end of device [ 59.290928][ T5716] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 59.326520][ T5716] syz.3.668: attempt to access beyond end of device [ 59.326520][ T5716] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 59.355606][ T5716] syz.3.668: attempt to access beyond end of device [ 59.355606][ T5716] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 59.375984][ T5716] syz.3.668: attempt to access beyond end of device [ 59.375984][ T5716] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 59.397315][ T5716] syz.3.668: attempt to access beyond end of device [ 59.397315][ T5716] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 59.425906][ T5716] syz.3.668: attempt to access beyond end of device [ 59.425906][ T5716] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 59.451416][ T5716] syz.3.668: attempt to access beyond end of device [ 59.451416][ T5716] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 59.464821][ T5716] syz.3.668: attempt to access beyond end of device [ 59.464821][ T5716] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 59.478384][ T5716] syz.3.668: attempt to access beyond end of device [ 59.478384][ T5716] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 59.491632][ T5716] syz.3.668: attempt to access beyond end of device [ 59.491632][ T5716] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 59.984384][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 59.984398][ T29] audit: type=1400 audit(1763409845.984:911): avc: denied { ioctl } for pid=5815 comm="syz.3.675" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.109472][ T5836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5836 comm=syz.0.682 [ 60.122035][ T5836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5836 comm=syz.0.682 [ 60.197315][ T29] audit: type=1326 audit(1763409846.204:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 60.244459][ T29] audit: type=1326 audit(1763409846.204:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 60.267775][ T29] audit: type=1326 audit(1763409846.204:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 60.291067][ T29] audit: type=1326 audit(1763409846.204:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 60.314779][ T29] audit: type=1326 audit(1763409846.204:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7163f6c9 code=0x7ffc0000 [ 60.645832][ T29] audit: type=1326 audit(1763409846.644:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5880 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 60.669386][ T29] audit: type=1326 audit(1763409846.644:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5880 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 60.715789][ T29] audit: type=1326 audit(1763409846.644:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5880 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 60.739081][ T29] audit: type=1326 audit(1763409846.644:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5880 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 60.819246][ T5891] netlink: 96 bytes leftover after parsing attributes in process `syz.4.706'. [ 60.863620][ T5898] netlink: 104 bytes leftover after parsing attributes in process `syz.2.709'. [ 61.013061][ T5924] bond2: option packets_per_slave: invalid value (33554432) [ 61.020607][ T5924] bond2: option packets_per_slave: allowed values 0 - 65535 [ 61.028975][ T5924] bond2 (unregistering): Released all slaves [ 61.088625][ T5924] bond2: option packets_per_slave: invalid value (33554432) [ 61.096038][ T5924] bond2: option packets_per_slave: allowed values 0 - 65535 [ 61.117801][ T5924] bond2 (unregistering): Released all slaves [ 61.431285][ T6104] xt_connbytes: Forcing CT accounting to be enabled [ 61.452789][ T6104] set match dimension is over the limit! [ 61.656806][ T6132] netlink: 96 bytes leftover after parsing attributes in process `syz.2.744'. [ 61.722787][ T6141] vlan2: entered allmulticast mode [ 62.009473][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.758'. [ 62.032667][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 62.062454][ T6178] loop1: detected capacity change from 0 to 256 [ 62.070942][ T6178] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.093676][ T6178] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.156598][ T6178] loop1: detected capacity change from 256 to 0 [ 62.164517][ T6178] FAT-fs (loop1): FAT read failed (blocknr 1) [ 62.170830][ T6178] FAT-fs (loop1): unable to read inode block for updating (i_pos 203) [ 62.221425][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 62.230637][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 62.405447][ T3315] FAT-fs (loop1): Directory bread(block 3) failed [ 62.469365][ T6207] veth0: entered promiscuous mode [ 62.475007][ T6206] veth0: left promiscuous mode [ 62.792493][ T6262] loop3: detected capacity change from 0 to 512 [ 62.794234][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 62.820584][ T6262] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.917848][ T6262] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.781: corrupted in-inode xattr: e_value size too large [ 62.942205][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.949359][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.952566][ T6262] EXT4-fs (loop3): Remounting filesystem read-only [ 62.963286][ T6215] bridge_slave_0: entered allmulticast mode [ 62.969990][ T6215] bridge_slave_0: entered promiscuous mode [ 62.978210][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.990962][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.998186][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.022231][ T6215] bridge_slave_1: entered allmulticast mode [ 63.031557][ T6215] bridge_slave_1: entered promiscuous mode [ 63.041608][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.083940][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.096605][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.128491][ T6215] team0: Port device team_slave_0 added [ 63.139623][ T6450] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 63.139623][ T6450] program syz.4.791 not setting count and/or reply_len properly [ 63.149335][ T6215] team0: Port device team_slave_1 added [ 63.204607][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.211673][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.237681][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.250869][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.257906][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.283921][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.353481][ T6215] hsr_slave_0: entered promiscuous mode [ 63.359818][ T6215] hsr_slave_1: entered promiscuous mode [ 63.365851][ T6215] debugfs: 'hsr0' already exists in 'hsr' [ 63.371692][ T6215] Cannot create hsr debugfs directory [ 63.509551][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 63.542798][ T6649] netlink: zone id is out of range [ 63.548149][ T6649] netlink: zone id is out of range [ 63.548784][ T6215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.565763][ T6649] netlink: zone id is out of range [ 63.574715][ T6215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.575826][ T6649] netlink: zone id is out of range [ 63.589123][ T6215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.596430][ T6649] netlink: del zone limit has 8 unknown bytes [ 63.602861][ T6215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.621478][ T6659] ipip0: entered promiscuous mode [ 63.754336][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.792231][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.812320][ T6684] loop3: detected capacity change from 0 to 512 [ 63.823355][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.830480][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.838704][ T6684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.845378][ T6684] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.815: Failed to acquire dquot type 1 [ 63.877058][ T6684] EXT4-fs (loop3): 1 truncate cleaned up [ 63.885024][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.892131][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.903228][ T6684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.951396][ T6215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.961867][ T6215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.004817][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.057754][ T6695] __nla_validate_parse: 1 callbacks suppressed [ 64.057773][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 64.101156][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.821'. [ 64.110940][ T6704] openvswitch: netlink: EtherType 0 is less than min 600 [ 64.119469][ T6695] team0: Port device team_slave_1 removed [ 64.171165][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.264883][ T6724] bond3: option packets_per_slave: invalid value (33554432) [ 64.272279][ T6724] bond3: option packets_per_slave: allowed values 0 - 65535 [ 64.288788][ T6724] bond3 (unregistering): Released all slaves [ 64.381277][ T6724] bond3: option packets_per_slave: invalid value (33554432) [ 64.388668][ T6724] bond3: option packets_per_slave: allowed values 0 - 65535 [ 64.397929][ T6724] bond3 (unregistering): Released all slaves [ 64.491419][ T6215] veth0_vlan: entered promiscuous mode [ 64.500019][ T6215] veth1_vlan: entered promiscuous mode [ 64.539451][ T6215] veth0_macvtap: entered promiscuous mode [ 64.551193][ T6215] veth1_macvtap: entered promiscuous mode [ 64.564316][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.578583][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.594692][ T1866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.607929][ T1866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.628497][ T1866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.648180][ T1866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.662101][ T6877] netlink: 64 bytes leftover after parsing attributes in process `syz.3.832'. [ 64.692686][ T6879] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.833'. [ 64.715549][ T6883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6883 comm=syz.3.834 [ 64.733543][ T6879] netlink: zone id is out of range [ 64.738817][ T6879] netlink: zone id is out of range [ 64.754677][ T6879] netlink: zone id is out of range [ 64.754807][ T6886] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 64.767552][ T6879] netlink: zone id is out of range [ 64.832760][ T6892] tipc: Enabling of bearer rejected, failed to enable media [ 64.874744][ T6894] loop3: detected capacity change from 0 to 1024 [ 64.907005][ T6894] EXT4-fs: Ignoring removed orlov option [ 64.932998][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.993845][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 64.993863][ T29] audit: type=1326 audit(64.965:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.022910][ T29] audit: type=1326 audit(64.965:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.142295][ T6922] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.849'. [ 65.203265][ T6927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.242270][ T29] audit: type=1326 audit(65.215:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.265043][ T29] audit: type=1326 audit(65.215:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.297367][ T29] audit: type=1326 audit(65.215:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.320097][ T29] audit: type=1326 audit(65.225:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.342764][ T29] audit: type=1326 audit(65.225:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2987811f85 code=0x7ffc0000 [ 65.365612][ T29] audit: type=1326 audit(65.225:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.388277][ T29] audit: type=1326 audit(65.225:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.412347][ T29] audit: type=1326 audit(65.375:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f29877df6c9 code=0x7ffc0000 [ 65.439113][ T6927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.481214][ T6927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.541898][ T6927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.596053][ T1866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.609200][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.625541][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.654394][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.815108][ T6979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.985715][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.198743][ T3402] IPVS: starting estimator thread 0... [ 66.316907][ T7030] IPVS: using max 2352 ests per chain, 117600 per kthread [ 66.348711][ T7046] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 66.410630][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 66.453356][ T7042] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 66.671858][ T7079] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 66.758827][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 67.135733][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 67.144824][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 67.724580][ T7225] loop3: detected capacity change from 0 to 128 [ 67.745045][ T7225] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.757870][ T7230] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1575543786/1575543788 [ 67.777572][ T7225] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.946984][ T7262] netlink: 72 bytes leftover after parsing attributes in process `syz.0.926'. [ 68.048960][ T7277] loop4: detected capacity change from 0 to 1024 [ 68.067472][ T7277] EXT4-fs: Ignoring removed orlov option [ 68.075065][ T7277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.074053][ T7349] sch_fq: defrate 6 ignored. [ 69.119124][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.668070][ T7425] loop3: detected capacity change from 0 to 256 [ 70.277684][ T7358] net_ratelimit: 6 callbacks suppressed [ 70.277748][ T7358] Set syz1 is full, maxelem 65536 reached [ 70.308413][ T7441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.318805][ T7441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.329133][ T7441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.352523][ T7442] bridge: RTM_NEWNEIGH with invalid ether address [ 70.414774][ T7441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.425290][ T7441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.435740][ T7441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.448726][ T7511] __nla_validate_parse: 1 callbacks suppressed [ 70.448741][ T7511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.974'. [ 70.482382][ T7441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.492986][ T7441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.503309][ T7441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.562378][ T7441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.572871][ T7441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.583235][ T7441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.660762][ T52] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.669073][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 70.677517][ T52] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.695341][ T1866] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.703642][ T1866] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 70.712007][ T1866] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.721057][ T1866] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.729383][ T1866] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 70.737707][ T1866] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.750326][ T1866] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.758655][ T1866] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 70.767090][ T1866] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.879038][ T7557] netlink: 27 bytes leftover after parsing attributes in process `syz.2.987'. [ 71.086277][ T7580] xt_hashlimit: max too large, truncated to 1048576 [ 71.109237][ T7582] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 71.173672][ T7599] unsupported nla_type 52263 [ 71.214859][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 71.214875][ T29] audit: type=1326 audit(71.185:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.243766][ T29] audit: type=1326 audit(71.185:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.267081][ T29] audit: type=1326 audit(71.185:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.290037][ T29] audit: type=1326 audit(71.185:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.312824][ T29] audit: type=1326 audit(71.185:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.335571][ T29] audit: type=1326 audit(71.185:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.358470][ T29] audit: type=1326 audit(71.185:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.381345][ T29] audit: type=1326 audit(71.185:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.404145][ T29] audit: type=1326 audit(71.185:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.427125][ T29] audit: type=1326 audit(71.185:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 71.640020][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 71.649061][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 71.747564][ T7656] loop5: detected capacity change from 0 to 128 [ 71.878064][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.885512][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.892989][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.900424][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.907861][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.915273][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.922735][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.930168][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.937704][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.945115][ T3409] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 71.988801][ T3409] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 72.125979][ T7725] netlink: 'syz.5.1031': attribute type 1 has an invalid length. [ 72.249771][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 72.275808][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1043'. [ 72.299639][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1043'. [ 72.322869][ T7772] loop3: detected capacity change from 0 to 764 [ 72.346100][ T7775] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.385845][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 72.394918][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 72.449147][ T7775] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.488869][ T7775] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.550888][ T7775] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.623558][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.639024][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.651171][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.662252][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.966372][ T7879] netlink: 'syz.3.1074': attribute type 3 has an invalid length. [ 73.245735][ T7903] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 73.455848][ T7914] veth0: entered promiscuous mode [ 73.469138][ T7914] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 74.037021][ T7942] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.326359][ T7956] netlink: 'syz.5.1108': attribute type 12 has an invalid length. [ 74.649400][ T7966] netlink: 'syz.3.1112': attribute type 10 has an invalid length. [ 74.657341][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1112'. [ 74.728517][ T7966] team0: Port device geneve1 added [ 75.009776][ T7993] tipc: Started in network mode [ 75.014757][ T7993] tipc: Node identity ac14140f, cluster identity 4711 [ 75.061046][ T7993] tipc: New replicast peer: 255.255.255.255 [ 75.067218][ T7993] tipc: Enabled bearer , priority 10 [ 75.390599][ T8108] netlink: 'syz.5.1136': attribute type 3 has an invalid length. [ 75.671730][ T8137] __nla_validate_parse: 3 callbacks suppressed [ 75.671760][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'. [ 75.729833][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1149'. [ 75.978021][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 76.102640][ T8175] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1162'. [ 76.196724][ T1028] tipc: Node number set to 2886997007 [ 76.295998][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 76.296016][ T29] audit: type=1326 audit(76.265:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 76.338720][ T29] audit: type=1326 audit(76.305:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 76.361551][ T29] audit: type=1326 audit(76.305:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93072f6c9 code=0x7ffc0000 [ 76.412591][ T29] audit: type=1400 audit(76.385:1415): avc: denied { create } for pid=8194 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.431387][ T29] audit: type=1400 audit(76.385:1416): avc: denied { mount } for pid=8193 comm="syz.3.1173" name="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 76.453548][ T29] audit: type=1400 audit(76.385:1417): avc: denied { search } for pid=8193 comm="syz.3.1173" name="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.475131][ T29] audit: type=1400 audit(76.385:1418): avc: denied { search } for pid=8193 comm="syz.3.1173" name="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.496758][ T29] audit: type=1400 audit(76.385:1419): avc: denied { read open } for pid=8193 comm="syz.3.1173" path="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.520832][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 76.529360][ T29] audit: type=1400 audit(76.495:1420): avc: denied { write } for pid=8194 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.548592][ T29] audit: type=1400 audit(76.495:1421): avc: denied { module_request } for pid=8194 comm="syz.0.1171" kmod="crypto-lzs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.591178][ T8202] rdma_op ffff88812cb4a180 conn xmit_rdma 0000000000000000 [ 76.780980][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'. [ 76.793316][ T8232] loop4: detected capacity change from 0 to 1024 [ 76.837721][ T8232] EXT4-fs (loop4): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 76.876963][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.889977][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 77.002869][ T8274] netlink: 'syz.5.1198': attribute type 3 has an invalid length. [ 77.010758][ T8274] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1198'. [ 77.092053][ T8288] tipc: Failed to remove unknown binding: 66,1,1/0:1255417631/1255417633 [ 77.100599][ T8288] tipc: Failed to remove unknown binding: 66,1,1/0:1255417631/1255417633 [ 77.109847][ T8287] netlink: 'syz.3.1203': attribute type 13 has an invalid length. [ 77.169025][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.205386][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 77.226487][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 78.213211][ T8387] netlink: 'syz.2.1243': attribute type 29 has an invalid length. [ 78.251239][ T8387] netlink: 'syz.2.1243': attribute type 29 has an invalid length. [ 78.431984][ T8405] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 79.293484][ T8458] sg_write: data in/out 2011/154 bytes for SCSI command 0x0-- guessing data in; [ 79.293484][ T8458] program syz.4.1271 not setting count and/or reply_len properly [ 79.314583][ T8410] syz.5.1248 (8410) used greatest stack depth: 7048 bytes left [ 79.344747][ T8460] rdma_op ffff888111693980 conn xmit_rdma 0000000000000000 [ 79.916984][ T8500] bond0: Caught tx_queue_len zero misconfig [ 79.976974][ T8502] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 79.996018][ T8502] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 80.054083][ T8505] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.075620][ T8505] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.302163][ T8033] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.436446][ T8527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.501313][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.527509][ T8527] bond3: (slave bond0): Enslaving as an active interface with an up link [ 80.589254][ T9] hid_parser_main: 8 callbacks suppressed [ 80.589295][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 80.602968][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 80.620988][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.628749][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.636510][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.644416][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.652167][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.659944][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.667658][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.675339][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 80.684580][ T9] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 80.835203][ T8633] loop4: detected capacity change from 0 to 128 [ 80.843879][ T8633] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.880631][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.117019][ T8654] __nla_validate_parse: 6 callbacks suppressed [ 81.117041][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'. [ 81.132238][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'. [ 81.540327][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 81.540343][ T29] audit: type=1326 audit(81.515:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.4.1323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29877df6c9 code=0x0 [ 81.589557][ T8675] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1325'. [ 81.599176][ T8675] netlink: zone id is out of range [ 81.604404][ T8675] netlink: zone id is out of range [ 81.618816][ T8675] netlink: set zone limit has 8 unknown bytes [ 81.912585][ T8679] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 82.020301][ T29] audit: type=1400 audit(81.995:1565): avc: denied { mount } for pid=8682 comm="syz.2.1329" name="/" dev="mqueue" ino=2534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.096236][ T29] audit: type=1326 audit(82.065:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.119153][ T29] audit: type=1326 audit(82.065:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.189870][ T29] audit: type=1326 audit(82.135:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.212863][ T29] audit: type=1326 audit(82.135:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.235693][ T29] audit: type=1326 audit(82.135:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.258616][ T29] audit: type=1326 audit(82.135:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.281372][ T29] audit: type=1326 audit(82.135:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.304259][ T29] audit: type=1326 audit(82.135:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.5.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 82.368499][ T4760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.469423][ T8723] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1344'. [ 82.527268][ T8733] serio: Serial port ttyS3 [ 82.543043][ T8731] wg2: entered promiscuous mode [ 82.548035][ T8731] wg2: entered allmulticast mode [ 82.557802][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1351'. [ 82.775529][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 82.823657][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 82.835412][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 82.852555][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 82.890175][ T8786] serio: Serial port ttyS3 [ 82.899680][ T8789] sit0: Caught tx_queue_len zero misconfig [ 82.977132][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 83.021704][ T3409] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.03 Device [syz0] on syz0 [ 83.186393][ T8843] netlink: 'syz.5.1386': attribute type 1 has an invalid length. [ 83.225584][ T8846] ref_ctr_offset mismatch. inode: 0x234 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc00000000 [ 83.290011][ T8850] loop5: detected capacity change from 0 to 128 [ 83.297066][ T8850] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.309233][ T8850] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.332426][ T1866] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.353720][ T8858] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 83.362010][ T8857] IPVS: stopping master sync thread 8858 ... [ 83.660683][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.782096][ T8910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.795587][ T8910] bond1 (unregistering): Released all slaves [ 83.857436][ T8979] loop4: detected capacity change from 0 to 4096 [ 83.874342][ T8979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.883419][ T8979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.925683][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.068868][ T8995] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.078768][ T8995] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 84.088806][ T8995] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 84.166512][ T9006] xt_hashlimit: max too large, truncated to 1048576 [ 84.175521][ T8995] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.185428][ T8995] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 84.195447][ T8995] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 84.256912][ T8995] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.266888][ T8995] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 84.276777][ T8995] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 84.329288][ T8995] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.339151][ T8995] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 84.349168][ T8995] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 84.352316][ T9025] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 84.426151][ T8044] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.434684][ T8044] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.443002][ T8044] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.457214][ T9046] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 84.462322][ T8044] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.473020][ T8044] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481292][ T8044] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.508895][ T8044] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.517154][ T8044] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.525499][ T8044] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.562421][ T8044] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.570705][ T8044] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.578961][ T8044] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.758336][ T9072] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.816829][ T9072] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.891210][ T9072] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.950247][ T9072] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.028335][ T8033] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.040741][ T8033] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.060783][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.073508][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.390192][ T9173] __nla_validate_parse: 8 callbacks suppressed [ 86.390214][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1486'. [ 86.438048][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 86.550111][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 86.550207][ T29] audit: type=1400 audit(86.525:1674): avc: denied { accept } for pid=9196 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.635825][ T29] audit: type=1400 audit(86.575:1675): avc: denied { read write } for pid=6215 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.659592][ T29] audit: type=1400 audit(86.585:1676): avc: denied { open } for pid=6215 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.683204][ T29] audit: type=1400 audit(86.585:1677): avc: denied { ioctl } for pid=6215 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.708212][ T29] audit: type=1400 audit(86.595:1678): avc: denied { map_create } for pid=9203 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.726682][ T29] audit: type=1400 audit(86.595:1679): avc: denied { bpf } for pid=9203 comm="syz.5.1492" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.746611][ T29] audit: type=1400 audit(86.595:1680): avc: denied { map_read map_write } for pid=9203 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.766000][ T29] audit: type=1400 audit(86.605:1681): avc: denied { prog_load } for pid=9203 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.784426][ T29] audit: type=1400 audit(86.605:1682): avc: denied { perfmon } for pid=9203 comm="syz.5.1492" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.804654][ T29] audit: type=1400 audit(86.605:1683): avc: denied { prog_run } for pid=9203 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.924622][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 86.936640][ T9226] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 87.404115][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 87.435363][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.465184][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.686217][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 88.244623][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1556'. [ 88.261046][ T9371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.284528][ T9371] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 88.298555][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 88.313441][ T9371] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 88.323683][ T9371] bond1 (unregistering): Released all slaves [ 88.346256][ T9445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.353534][ T9445] IPv6: NLM_F_CREATE should be set when creating new route [ 88.588753][ T9487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.651031][ T9487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.729429][ T9502] loop3: detected capacity change from 0 to 8192 [ 88.737376][ T9487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.769507][ T3314] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 88.777586][ T3314] FAT-fs (loop3): Filesystem has been set read-only [ 88.820272][ T9487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.843023][ T9515] loop3: detected capacity change from 0 to 128 [ 88.849845][ T9515] EXT4-fs: Ignoring removed nobh option [ 88.858267][ T9515] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.884309][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1574'. [ 88.894680][ T8028] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.909333][ T8028] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933511][ T8028] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.950918][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.960007][ T8028] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.119740][ T9546] loop3: detected capacity change from 0 to 128 [ 89.327129][ T9578] netlink: 'syz.5.1597': attribute type 3 has an invalid length. [ 89.368973][ T9581] wg2: entered promiscuous mode [ 89.373875][ T9581] wg2: entered allmulticast mode [ 89.472198][ T9597] netlink: 'syz.3.1603': attribute type 13 has an invalid length. [ 89.502711][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'. [ 89.548910][ T9597] gretap0: refused to change device tx_queue_len [ 89.555340][ T9597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 89.760295][ T9631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.823492][ T9639] loop4: detected capacity change from 0 to 512 [ 89.848172][ T9639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.888452][ T9639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 89.940555][ T9650] loop3: detected capacity change from 0 to 512 [ 89.950057][ T9650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.973307][ T9650] EXT4-fs (loop3): 1 truncate cleaned up [ 89.996455][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 90.008790][ T9650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.077100][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.065981][ T9723] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.554299][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 91.602746][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 91.641215][ T9788] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.653279][ T9788] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 91.691994][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 91.692012][ T29] audit: type=1326 audit(91.665:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.724701][ T29] audit: type=1326 audit(91.675:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.747752][ T29] audit: type=1326 audit(91.675:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.770541][ T29] audit: type=1326 audit(91.675:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.793437][ T29] audit: type=1326 audit(91.675:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.816236][ T29] audit: type=1326 audit(91.675:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.839026][ T29] audit: type=1326 audit(91.675:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.861750][ T29] audit: type=1326 audit(91.675:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.884877][ T29] audit: type=1326 audit(91.695:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.909960][ T29] audit: type=1326 audit(91.695:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5154b2f6c9 code=0x7ffc0000 [ 91.966699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.979362][ T9802] loop5: detected capacity change from 0 to 512 [ 91.995198][ T9811] 9pnet_fd: Insufficient options for proto=fd [ 92.002089][ T9802] EXT4-fs: Ignoring removed bh option [ 92.017483][ T9802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.048605][ T9802] EXT4-fs (loop5): 1 truncate cleaned up [ 92.060664][ T9802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.165767][ T6215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.428655][ T9894] loop3: detected capacity change from 0 to 1024 [ 92.439232][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1670'. [ 92.460959][ T9894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.513916][ T9894] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1672: Allocating blocks 449-513 which overlap fs metadata [ 92.541308][ T9892] EXT4-fs (loop3): pa ffff888107204620: logic 48, phys. 177, len 21 [ 92.549452][ T9892] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 92.605246][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.858463][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'. [ 92.930196][ T9964] netlink: 19 bytes leftover after parsing attributes in process `+}[@'. [ 93.112311][ T9981] loop5: detected capacity change from 0 to 1024 [ 93.135328][ T9981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.161929][ T9981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.216726][ T6215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.274881][ T9992] syzkaller1: entered promiscuous mode [ 93.280478][ T9992] syzkaller1: entered allmulticast mode [ 93.393530][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 93.501141][T10029] team0: Caught tx_queue_len zero misconfig [ 93.736954][T10056] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1708'. [ 94.042338][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 94.075980][T10068] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 94.206242][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.227724][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 94.300319][T10098] IPVS: stopping master sync thread 10108 ... [ 94.307042][T10108] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 94.357371][T10112] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 94.358526][T10110] IPVS: stopping master sync thread 10112 ... [ 94.479659][T10125] ref_ctr_offset mismatch. inode: 0x721 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc00000000 [ 94.547792][T10115] 8021q: adding VLAN 0 to HW filter on device $H [ 94.578944][T10115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.602376][T10133] loop4: detected capacity change from 0 to 128 [ 94.609394][T10133] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.632500][T10133] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.659741][T10136] loop5: detected capacity change from 0 to 1024 [ 94.684490][ T8022] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.687724][T10136] EXT4-fs: Ignoring removed orlov option [ 94.718518][T10136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.753254][T10151] xt_hashlimit: max too large, truncated to 1048576 [ 94.864419][T10163] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 94.864563][T10158] IPVS: stopping master sync thread 10163 ... [ 95.106183][T10156] ================================================================== [ 95.114403][T10156] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 95.122409][T10156] [ 95.124755][T10156] write to 0xffff888119c8f6ac of 4 bytes by task 10136 on cpu 1: [ 95.132535][T10156] xas_set_mark+0x12b/0x140 [ 95.137071][T10156] __folio_start_writeback+0x155/0x390 [ 95.142574][T10156] ext4_bio_write_folio+0x5ad/0x9f0 [ 95.147811][T10156] mpage_process_page_bufs+0x4a1/0x620 [ 95.153302][T10156] mpage_prepare_extent_to_map+0x786/0xc00 [ 95.159161][T10156] ext4_do_writepages+0xa05/0x2750 [ 95.164287][T10156] ext4_writepages+0x176/0x300 [ 95.169175][T10156] do_writepages+0x1c6/0x310 [ 95.173791][T10156] file_write_and_wait_range+0x156/0x2c0 [ 95.179447][T10156] generic_buffers_fsync_noflush+0x45/0x120 [ 95.185419][T10156] ext4_sync_file+0x1ab/0x690 [ 95.190120][T10156] vfs_fsync_range+0x10d/0x130 [ 95.194923][T10156] ext4_buffered_write_iter+0x34f/0x3c0 [ 95.200495][T10156] ext4_file_write_iter+0x387/0xf60 [ 95.205711][T10156] iter_file_splice_write+0x666/0xa60 [ 95.211117][T10156] direct_splice_actor+0x156/0x2a0 [ 95.216249][T10156] splice_direct_to_actor+0x312/0x680 [ 95.221633][T10156] do_splice_direct+0xda/0x150 [ 95.226403][T10156] do_sendfile+0x380/0x650 [ 95.230837][T10156] __x64_sys_sendfile64+0x105/0x150 [ 95.236054][T10156] x64_sys_call+0x2bb4/0x3000 [ 95.240739][T10156] do_syscall_64+0xd2/0x200 [ 95.245260][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.251176][T10156] [ 95.253510][T10156] read to 0xffff888119c8f6ac of 4 bytes by task 10156 on cpu 0: [ 95.261147][T10156] file_write_and_wait_range+0x10e/0x2c0 [ 95.266802][T10156] generic_buffers_fsync_noflush+0x45/0x120 [ 95.272721][T10156] ext4_sync_file+0x1ab/0x690 [ 95.277410][T10156] vfs_fsync_range+0x10d/0x130 [ 95.282191][T10156] ext4_buffered_write_iter+0x34f/0x3c0 [ 95.287747][T10156] ext4_file_write_iter+0x387/0xf60 [ 95.292965][T10156] iter_file_splice_write+0x666/0xa60 [ 95.298348][T10156] direct_splice_actor+0x156/0x2a0 [ 95.303560][T10156] splice_direct_to_actor+0x312/0x680 [ 95.308953][T10156] do_splice_direct+0xda/0x150 [ 95.313748][T10156] do_sendfile+0x380/0x650 [ 95.318207][T10156] __x64_sys_sendfile64+0x105/0x150 [ 95.323432][T10156] x64_sys_call+0x2bb4/0x3000 [ 95.328124][T10156] do_syscall_64+0xd2/0x200 [ 95.332644][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.338547][T10156] [ 95.340874][T10156] value changed: 0x0a000021 -> 0x04000021 [ 95.346686][T10156] [ 95.349011][T10156] Reported by Kernel Concurrency Sanitizer on: [ 95.355174][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.5.1736 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.364997][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.375062][T10156] ================================================================== [ 95.619822][ T6215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.