last executing test programs: 11.031002113s ago: executing program 3 (id=1822): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 10.970549664s ago: executing program 3 (id=1824): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000400), 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 10.151204006s ago: executing program 3 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 10.034240938s ago: executing program 3 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 9.958184529s ago: executing program 3 (id=1857): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 9.835400311s ago: executing program 3 (id=1862): sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xffe, 0x0, 0xb03a, 0x800005, 0x0, 0x9, 0x34}, 0x11) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) 9.808584352s ago: executing program 32 (id=1862): sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xffe, 0x0, 0xb03a, 0x800005, 0x0, 0x9, 0x34}, 0x11) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) 1.805887563s ago: executing program 2 (id=2078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) 1.477287247s ago: executing program 0 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.33700296s ago: executing program 0 (id=2097): timer_settime(0x0, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 1.32726826s ago: executing program 2 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182896611c04797de9723bd30000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.315365s ago: executing program 5 (id=2088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.293412201s ago: executing program 0 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) 1.202586832s ago: executing program 2 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x400, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.195883702s ago: executing program 5 (id=2093): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) 1.116609393s ago: executing program 0 (id=2094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2, 0x0, 0x2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.115930563s ago: executing program 2 (id=2096): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.088062303s ago: executing program 0 (id=2098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.052022734s ago: executing program 5 (id=2100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 985.304415ms ago: executing program 5 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 936.580446ms ago: executing program 5 (id=2104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='hrtimer_init\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 884.477257ms ago: executing program 1 (id=2115): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x3}}}}}}, 0x0) 854.486537ms ago: executing program 1 (id=2106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x100000000000000, 0x0) 845.371057ms ago: executing program 4 (id=2107): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ff00000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) 779.925898ms ago: executing program 1 (id=2108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) unshare(0x2c020400) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) fcntl$notify(r0, 0x402, 0x3ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) 779.694558ms ago: executing program 4 (id=2109): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2, 0x0, 0x2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 723.551539ms ago: executing program 5 (id=2110): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 723.417409ms ago: executing program 33 (id=2110): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 723.132179ms ago: executing program 4 (id=2112): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 704.49496ms ago: executing program 1 (id=2113): r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x88, 0x80, 0x0, 0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 641.74095ms ago: executing program 1 (id=2114): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 550.672472ms ago: executing program 1 (id=2116): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000180), &(0x7f0000000400)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0xffffffffffffff69, 0x0}, 0x24008050) 327.588395ms ago: executing program 4 (id=2117): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c060000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 243.594756ms ago: executing program 2 (id=2118): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x3, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) 74.845619ms ago: executing program 2 (id=2119): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0x2, 0x4}}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 74.562109ms ago: executing program 4 (id=2120): r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff02f}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/95, 0x7ffff000}, {&(0x7f0000001140)=""/4096}, {&(0x7f0000000200)=""/239}], 0x286, 0x0) 7.69506ms ago: executing program 0 (id=2121): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 4 (id=2130): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="7cd1f233f595b9483683fb", 0xb}], 0x1, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) kernel console output (not intermixed with test programs): ributes in process `syz.4.907'. [ 75.691123][ T7556] loop0: detected capacity change from 0 to 512 [ 75.698478][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 75.702797][ T7556] EXT4-fs: inline encryption not supported [ 75.728883][ T7556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.742272][ T7556] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.773778][ T7556] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.897: corrupted inode contents [ 75.785929][ T7556] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.897: mark_inode_dirty error [ 75.797619][ T7556] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.897: corrupted inode contents [ 75.813818][ T7556] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.897: corrupted inode contents [ 75.826049][ T7556] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.897: mark_inode_dirty error [ 75.837735][ T7556] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.897: corrupted inode contents [ 75.849993][ T7556] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.897: mark_inode_dirty error [ 75.861420][ T7556] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.897: corrupted inode contents [ 75.873435][ T7556] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.897: mark_inode_dirty error [ 75.898577][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.962516][ T7588] loop0: detected capacity change from 0 to 8192 [ 75.970866][ T7588] syz.0.902: attempt to access beyond end of device [ 75.970866][ T7588] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 75.984506][ T7588] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 75.992445][ T7588] FAT-fs (loop0): Filesystem has been set read-only [ 75.999654][ T7588] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 76.009242][ T7588] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 76.115528][ T7616] pim6reg1: entered promiscuous mode [ 76.121044][ T7616] pim6reg1: entered allmulticast mode [ 76.233561][ T7623] loop1: detected capacity change from 0 to 512 [ 76.240263][ T3379] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 76.254250][ T3379] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.266913][ T7623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.279862][ T7623] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.316591][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.393356][ T7642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.926'. [ 76.467006][ T7654] loop3: detected capacity change from 0 to 256 [ 76.475620][ T7654] msdos: Bad value for 'gid' [ 76.480260][ T7654] msdos: Bad value for 'gid' [ 76.553146][ T7654] loop3: detected capacity change from 0 to 4096 [ 76.563930][ T7654] journal_path: Non-blockdev passed as './file1' [ 76.570397][ T7654] EXT4-fs: error: could not find journal device path [ 76.615318][ T7683] loop4: detected capacity change from 0 to 1024 [ 76.624753][ T7683] EXT4-fs: Ignoring removed orlov option [ 76.633665][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 76.642723][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 76.658877][ T7692] loop3: detected capacity change from 0 to 512 [ 76.665487][ T7683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.673453][ T7692] EXT4-fs: inline encryption not supported [ 76.679837][ T7685] wireguard0: entered promiscuous mode [ 76.685360][ T7685] wireguard0: entered allmulticast mode [ 76.698820][ T7683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.699315][ T7692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.724082][ T7692] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.754963][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.770729][ T7692] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.924: corrupted inode contents [ 76.783348][ T7692] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.924: mark_inode_dirty error [ 76.797985][ T7692] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.924: corrupted inode contents [ 76.811135][ T7717] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.924: corrupted inode contents [ 76.833353][ T7717] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.924: mark_inode_dirty error [ 76.845373][ T7717] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.924: corrupted inode contents [ 76.860936][ T7717] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.924: mark_inode_dirty error [ 76.880510][ T7717] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.924: corrupted inode contents [ 76.895573][ T7717] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.924: mark_inode_dirty error [ 76.933181][ T7746] xt_hashlimit: size too large, truncated to 1048576 [ 76.938825][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.340129][ T7805] loop3: detected capacity change from 0 to 2048 [ 77.387760][ T7805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.417590][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.608714][ T7856] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 78.083517][ T7863] loop4: detected capacity change from 0 to 512 [ 78.100748][ T7863] EXT4-fs: inline encryption not supported [ 78.131873][ T7863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.150136][ T7863] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.170711][ T7863] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.953: corrupted inode contents [ 78.223904][ T7863] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.953: mark_inode_dirty error [ 78.275022][ T7863] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.953: corrupted inode contents [ 78.290548][ T7863] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.953: corrupted inode contents [ 78.303113][ T7863] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.953: mark_inode_dirty error [ 78.316107][ T7863] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.953: corrupted inode contents [ 78.340627][ T7863] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.953: mark_inode_dirty error [ 78.352141][ T7863] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.953: corrupted inode contents [ 78.386033][ T7863] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.953: mark_inode_dirty error [ 78.401679][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.411720][ T7894] netlink: 'syz.0.959': attribute type 3 has an invalid length. [ 78.413245][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.443424][ T7898] pim6reg1: entered promiscuous mode [ 78.448855][ T7898] pim6reg1: entered allmulticast mode [ 78.467004][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.605462][ T7929] loop0: detected capacity change from 0 to 128 [ 78.712799][ T7944] loop1: detected capacity change from 0 to 256 [ 78.776256][ T7944] msdos: Unknown parameter '»ÿ¸èäÓØûyûé/n' [ 79.003483][ T7962] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 79.011213][ T7962] __nla_validate_parse: 1 callbacks suppressed [ 79.011224][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 79.493529][ T7958] Set syz1 is full, maxelem 65536 reached [ 79.515230][ T7973] serio: Serial port ptm0 [ 79.567643][ T7986] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 79.730362][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 79.730377][ T29] audit: type=1326 audit(1742689095.904:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.759923][ T29] audit: type=1326 audit(1742689095.904:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.787795][ T8018] loop3: detected capacity change from 0 to 512 [ 79.794360][ T8018] EXT4-fs: inline encryption not supported [ 79.802588][ T29] audit: type=1326 audit(1742689095.954:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.826072][ T29] audit: type=1326 audit(1742689095.964:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.849477][ T29] audit: type=1326 audit(1742689095.964:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.873041][ T29] audit: type=1326 audit(1742689095.964:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.896486][ T29] audit: type=1326 audit(1742689095.964:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.919945][ T29] audit: type=1326 audit(1742689095.964:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.943365][ T29] audit: type=1326 audit(1742689095.964:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 79.966830][ T29] audit: type=1326 audit(1742689095.964:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 80.031558][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.058349][ T8018] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.073658][ T8023] vlan2: entered allmulticast mode [ 80.078857][ T8023] bridge0: entered allmulticast mode [ 80.097956][ T8018] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.994: corrupted inode contents [ 80.150832][ T8018] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.994: mark_inode_dirty error [ 80.168496][ T8023] bridge0: left allmulticast mode [ 80.200327][ T8018] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.994: corrupted inode contents [ 80.255763][ T8045] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.994: corrupted inode contents [ 80.290652][ T8045] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.994: mark_inode_dirty error [ 80.296937][ T8050] loop1: detected capacity change from 0 to 1024 [ 80.311837][ T8048] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.328024][ T8045] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.994: corrupted inode contents [ 80.356673][ T8050] EXT4-fs: Ignoring removed nobh option [ 80.360772][ T8045] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.994: mark_inode_dirty error [ 80.362290][ T8050] EXT4-fs: Ignoring removed bh option [ 80.395592][ T8045] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.994: corrupted inode contents [ 80.419502][ T8045] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.994: mark_inode_dirty error [ 80.457579][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.471567][ T8048] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.493295][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.524152][ T8048] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.548219][ T8060] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 80.576725][ T8048] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.631322][ T8076] loop3: detected capacity change from 0 to 512 [ 80.642424][ T8076] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.677040][ T8076] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 80.685125][ T8076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 80.694468][ T8076] System zones: 0-1, 15-15, 18-18, 34-34 [ 80.700884][ T8076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.706459][ T8048] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.709244][ T8076] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 80.730082][ T8076] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 80.739323][ T8076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1006: bg 0: block 40: padding at end of block bitmap is not set [ 80.753904][ T8076] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 80.764074][ T8076] EXT4-fs (loop3): 1 truncate cleaned up [ 80.770759][ T8076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.772155][ T8048] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.793199][ T8076] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.804981][ T8076] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 80.812935][ T8076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 80.821838][ T8048] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.840368][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.843180][ T8048] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.965905][ T8095] loop3: detected capacity change from 0 to 8192 [ 80.987041][ T8095] syz.3.1007: attempt to access beyond end of device [ 80.987041][ T8095] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 81.006656][ T8095] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 81.014549][ T8095] FAT-fs (loop3): Filesystem has been set read-only [ 81.030256][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.032238][ T8095] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 81.048862][ T8095] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 81.093725][ T8109] loop2: detected capacity change from 0 to 512 [ 81.120175][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'. [ 81.129376][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 81.140260][ T8109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.141670][ T8136] geneve2: entered allmulticast mode [ 81.153735][ T8109] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.197498][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.239732][ T8153] vlan2: entered allmulticast mode [ 81.244994][ T8153] bridge0: entered allmulticast mode [ 81.257131][ T8153] bridge0: left allmulticast mode [ 81.262218][ T8163] loop3: detected capacity change from 0 to 512 [ 81.265483][ T8163] EXT4-fs: inline encryption not supported [ 81.299862][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.312921][ T8163] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.328839][ T8163] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1013: corrupted inode contents [ 81.341287][ T8163] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1013: mark_inode_dirty error [ 81.353260][ T8163] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1013: corrupted inode contents [ 81.392497][ T8163] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1013: corrupted inode contents [ 81.414676][ T8163] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1013: mark_inode_dirty error [ 81.432162][ T8182] loop2: detected capacity change from 0 to 256 [ 81.441047][ T8182] msdos: Bad value for 'gid' [ 81.444063][ T8163] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1013: corrupted inode contents [ 81.445864][ T8182] msdos: Bad value for 'gid' [ 81.462469][ T8163] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1013: mark_inode_dirty error [ 81.476914][ T8163] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1013: corrupted inode contents [ 81.489977][ T8163] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1013: mark_inode_dirty error [ 81.510258][ T8185] loop4: detected capacity change from 0 to 2048 [ 81.517798][ T8182] loop2: detected capacity change from 0 to 4096 [ 81.532883][ T8182] journal_path: Non-blockdev passed as './file1' [ 81.539300][ T8182] EXT4-fs: error: could not find journal device path [ 81.548205][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.561629][ T8185] loop4: p1 < > p4 < > [ 81.631437][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 81.634473][ T8215] udevd[8215]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.939207][ T8238] vlan2: entered allmulticast mode [ 81.944380][ T8238] bridge0: entered allmulticast mode [ 81.958654][ T8238] bridge0: left allmulticast mode [ 81.962439][ T8248] loop4: detected capacity change from 0 to 512 [ 81.970598][ T8248] EXT4-fs: inline encryption not supported [ 82.006844][ T8248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.024280][ T8248] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.040782][ T8248] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1033: corrupted inode contents [ 82.054083][ T8248] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.1033: mark_inode_dirty error [ 82.069830][ T8248] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1033: corrupted inode contents [ 82.094695][ T8248] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1033: corrupted inode contents [ 82.109288][ T8248] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.1033: mark_inode_dirty error [ 82.124161][ T8248] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1033: corrupted inode contents [ 82.148347][ T8248] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1033: mark_inode_dirty error [ 82.178617][ T8248] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1033: corrupted inode contents [ 82.195472][ T8248] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.1033: mark_inode_dirty error [ 82.251963][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.614423][ T8331] vlan2: entered allmulticast mode [ 82.619807][ T8331] bridge0: entered allmulticast mode [ 82.626666][ T8331] bridge0: left allmulticast mode [ 82.971837][ T8341] tipc: Started in network mode [ 82.976874][ T8341] tipc: Node identity a6c32a9d9de8, cluster identity 4711 [ 82.984077][ T8341] tipc: Enabled bearer , priority 0 [ 82.987166][ T8323] Set syz1 is full, maxelem 65536 reached [ 83.005039][ T8341] tipc: Disabling bearer [ 83.223798][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 83.234202][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.293249][ T8404] bridge_slave_1 (unregistering): left allmulticast mode [ 83.300494][ T8404] bridge_slave_1 (unregistering): left promiscuous mode [ 83.307545][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.500581][ T8434] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 83.508423][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 83.951648][ T8427] Set syz1 is full, maxelem 65536 reached [ 84.292927][ T8459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 84.379298][ T8478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8478 comm=syz.4.1078 [ 84.392054][ T8478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8478 comm=syz.4.1078 [ 84.444597][ T8502] loop4: detected capacity change from 0 to 2048 [ 84.490472][ T8502] loop4: p1 < > p4 [ 84.499522][ T8502] loop4: p4 size 8388608 extends beyond EOD, truncated [ 84.547473][ T3001] loop4: p1 < > p4 [ 84.552336][ T3001] loop4: p4 size 8388608 extends beyond EOD, truncated [ 84.630155][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 84.646291][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 84.661488][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 84.674040][ T8533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.681595][ T8533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.699166][ T8544] loop2: detected capacity change from 0 to 512 [ 84.706326][ T8533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.713793][ T8533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.748803][ T8544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.764264][ T8553] loop1: detected capacity change from 0 to 164 [ 84.766344][ T8544] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.781018][ T8553] Unable to read rock-ridge attributes [ 84.792385][ T8544] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.1090: corrupted inode contents [ 84.806193][ T8544] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.1090: mark_inode_dirty error [ 84.817756][ T8559] loop0: detected capacity change from 0 to 2048 [ 84.824605][ T8544] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.1090: corrupted inode contents [ 84.838914][ T8544] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1090: mark_inode_dirty error [ 84.860479][ T8559] loop0: p1 < > p4 [ 84.871391][ T8559] loop0: p4 size 8388608 extends beyond EOD, truncated [ 84.934110][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 84.934128][ T29] audit: type=1400 audit(1742689101.104:1348): avc: denied { write } for pid=8574 comm="syz.4.1097" path="socket:[13269]" dev="sockfs" ino=13269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.935635][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.982705][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.995269][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.018267][ T8591] pimreg: entered allmulticast mode [ 85.037619][ T8591] pimreg: left allmulticast mode [ 85.064809][ T8602] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1101'. [ 85.073871][ T8602] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1101'. [ 85.095336][ T8602] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 85.111092][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 85.158850][ T8620] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.219016][ T29] audit: type=1326 audit(1742689101.394:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.242574][ T29] audit: type=1326 audit(1742689101.394:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.269030][ T29] audit: type=1326 audit(1742689101.444:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.292555][ T29] audit: type=1326 audit(1742689101.444:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.316061][ T29] audit: type=1326 audit(1742689101.444:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.339521][ T29] audit: type=1326 audit(1742689101.444:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.362896][ T29] audit: type=1326 audit(1742689101.444:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.386453][ T29] audit: type=1326 audit(1742689101.444:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.410020][ T29] audit: type=1326 audit(1742689101.444:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 85.450454][ T8640] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.459939][ T8640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.607636][ T8686] loop0: detected capacity change from 0 to 512 [ 85.646575][ T8686] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.687220][ T8686] EXT4-fs (loop0): mount failed [ 86.048435][ T8772] lo: entered promiscuous mode [ 86.056255][ T8772] lo: entered allmulticast mode [ 86.076540][ T8772] lo: left allmulticast mode [ 86.081347][ T8772] lo: left promiscuous mode [ 86.104354][ T8780] loop0: detected capacity change from 0 to 256 [ 86.170837][ T8795] capability: warning: `syz.1.1136' uses deprecated v2 capabilities in a way that may be insecure [ 86.340152][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 86.349200][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 86.358186][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 86.390153][ T8831] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 86.408123][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 86.417183][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 86.457429][ T8827] vlan2: entered allmulticast mode [ 86.504196][ T8845] netlink: 'syz.1.1147': attribute type 3 has an invalid length. [ 86.514068][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.521942][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.529958][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.540577][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.548632][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.556460][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.564210][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.572077][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.579930][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.587748][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.595544][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.603604][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.608996][ T8858] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 86.611475][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.626720][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.637453][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.645269][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.653029][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.660808][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.668653][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.676438][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.684373][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.692253][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.700148][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.708058][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.715862][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.723652][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.731440][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.739352][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.747152][ T1039] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 86.755993][ T1039] hid-generic 0000:0000:20000000.0009: hidraw0: HID v0.01 Device [syz0] on syz1 [ 86.990323][ T8941] ip6gre1: entered allmulticast mode [ 87.323418][ T8989] serio: Serial port ptm0 [ 87.562218][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118a58e00: rx timeout, send abort [ 87.682184][ T9054] netlink: zone id is out of range [ 87.682197][ T9054] netlink: zone id is out of range [ 87.682234][ T9054] netlink: zone id is out of range [ 87.682258][ T9054] netlink: zone id is out of range [ 87.682308][ T9054] netlink: zone id is out of range [ 87.682316][ T9054] netlink: zone id is out of range [ 87.686826][ T9054] netlink: set zone limit has 8 unknown bytes [ 87.756976][ T9063] serio: Serial port ptm0 [ 87.771311][ T9066] loop2: detected capacity change from 0 to 512 [ 87.779596][ T9066] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 87.788551][ T9066] EXT4-fs (loop2): invalid journal inode [ 87.796419][ T9066] EXT4-fs (loop2): can't get journal size [ 87.813012][ T9066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 87.828906][ T9066] System zones: 1-12, 13-13 [ 87.863487][ T9066] EXT4-fs (loop2): 1 truncate cleaned up [ 87.870698][ T9066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.957982][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.070630][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118a58e00: abort rx timeout. Force session deactivation [ 88.094896][ T9126] loop0: detected capacity change from 0 to 512 [ 88.137444][ T9126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.158750][ T9126] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.205149][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.648038][ T9233] loop3: detected capacity change from 0 to 1024 [ 88.649738][ T9233] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.667075][ T9233] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.742402][ T9233] JBD2: no valid journal superblock found [ 88.748230][ T9233] EXT4-fs (loop3): Could not load journal inode [ 88.771033][ T9233] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºueâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;=çBŸ9gî=g&€ÂK”"öDÄå$b¤­¬YáXã¸;¿¿:Ý’¨Õ^ý-‰$Û×<>ɇ³'ÿ=ñý7Iì.¯¬wnáêùéjuöJ–Ÿ˜¿pybnáês¦ÏΞ½.) failed with errno=-22 [ 88.834899][ T9260] ip6gre1: entered allmulticast mode [ 88.983870][ T9287] netlink: 'syz.3.1233': attribute type 3 has an invalid length. [ 89.069344][ T9303] netlink: zone id is out of range [ 89.074557][ T9303] netlink: zone id is out of range [ 89.185673][ T9313] loop2: detected capacity change from 0 to 2048 [ 89.227358][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.278261][ T9331] ip6gre1: entered allmulticast mode [ 89.383607][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.743391][ T9364] __nla_validate_parse: 10 callbacks suppressed [ 89.743407][ T9364] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1253'. [ 89.805001][ T9364] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1253'. [ 89.966250][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 89.966268][ T29] audit: type=1400 audit(1742689106.144:1590): avc: denied { read } for pid=9397 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.044351][ T29] audit: type=1400 audit(1742689106.214:1591): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 90.136761][ T29] audit: type=1326 audit(1742689106.304:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.160481][ T29] audit: type=1326 audit(1742689106.314:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.184256][ T29] audit: type=1326 audit(1742689106.314:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.207749][ T29] audit: type=1326 audit(1742689106.314:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.234749][ T29] audit: type=1326 audit(1742689106.314:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.258337][ T29] audit: type=1326 audit(1742689106.314:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.281797][ T29] audit: type=1326 audit(1742689106.314:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.305230][ T29] audit: type=1326 audit(1742689106.314:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.3.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d85bdd169 code=0x7ffc0000 [ 90.417659][ T9425] loop0: detected capacity change from 0 to 512 [ 90.428461][ T9425] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.440227][ T9428] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 90.449352][ T9428] hsr_slave_0: left promiscuous mode [ 90.455786][ T9425] EXT4-fs (loop0): invalid journal inode [ 90.462392][ T9428] hsr_slave_1: left promiscuous mode [ 90.490157][ T9425] EXT4-fs (loop0): can't get journal size [ 90.506568][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 90.522234][ T9425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 90.564675][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 90.578740][ T9425] System zones: 1-12, 13-13 [ 90.583960][ T9425] EXT4-fs (loop0): 1 truncate cleaned up [ 90.592910][ T9425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.661516][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.682670][ T9443] ip6gre1: entered allmulticast mode [ 91.257999][ T9475] loop1: detected capacity change from 0 to 1024 [ 91.265883][ T9475] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.276897][ T9475] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.303001][ T9475] JBD2: no valid journal superblock found [ 91.308923][ T9475] EXT4-fs (loop1): Could not load journal inode [ 91.342582][ T9475] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºueâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;=çBŸ9gî=g&€ÂK”"öDÄå$b¤­¬YáXã¸;¿¿:Ý’¨Õ^ý-‰$Û×<>ɇ³'ÿ=ñý7Iì.¯¬wnáêùéjuöJ–Ÿ˜¿pybnáês¦ÏΞ½.) failed with errno=-22 [ 91.429761][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 91.438905][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 91.448013][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 91.487169][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 91.496296][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 91.505312][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 91.516635][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.524423][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.532229][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.542143][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.550033][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.557851][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.565653][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.573407][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.581206][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.588991][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.596775][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.604525][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.612395][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.620218][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.644215][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.652079][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.659926][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.667722][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.675515][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.683292][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.691170][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.698973][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.706787][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.714560][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.722478][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.730324][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.738163][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.745951][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.753741][ T3379] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 91.762862][ T3379] hid-generic 0000:0000:20000000.000A: hidraw0: HID v0.01 Device [syz0] on syz1 [ 91.764162][ T9530] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.853115][ T9530] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.906738][ T9530] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.956999][ T9530] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.003517][ T9530] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.016648][ T9530] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028507][ T9530] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.041793][ T9530] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104756][ T9605] loop4: detected capacity change from 0 to 512 [ 92.117092][ T9600] ip6gre1: entered allmulticast mode [ 92.126985][ T9605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.140826][ T9605] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.207590][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.321945][ T9648] netlink: 'syz.3.1293': attribute type 3 has an invalid length. [ 92.372245][ T9658] loop4: detected capacity change from 0 to 512 [ 92.386932][ T9658] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.403903][ T9658] EXT4-fs (loop4): mount failed [ 92.427597][ T9671] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 92.489808][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.497703][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.505595][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.530963][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.538811][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.546885][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.554644][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.562514][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.570681][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.578675][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.586538][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.594343][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.602208][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.610020][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.618301][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.626216][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.633986][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.641829][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.649701][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.657584][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.665470][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.673338][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.681140][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.688952][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.696750][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.704597][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.712391][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.720183][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.728007][ T3369] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 92.737742][ T3369] hid-generic 0000:0000:20000000.000B: hidraw0: HID v0.01 Device [syz0] on syz1 [ 92.839921][ T9739] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.927258][ T9739] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.950600][ T9755] loop1: detected capacity change from 0 to 512 [ 92.967094][ T9758] pimreg: entered allmulticast mode [ 92.979954][ T9758] pimreg: left allmulticast mode [ 92.992820][ T9755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.009567][ T9755] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.047059][ T9739] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.062387][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.107050][ T9739] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.162916][ T9739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.183274][ T9739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208179][ T9739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236195][ T9739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.378749][ T9828] loop2: detected capacity change from 0 to 2048 [ 93.410771][ T9834] loop0: detected capacity change from 0 to 164 [ 93.422350][ T9834] Unable to read rock-ridge attributes [ 93.435875][ T9828] loop2: p1 < > p4 [ 93.441213][ T9828] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.467879][ T3001] loop2: p1 < > p4 [ 93.475870][ T3001] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.545855][ T3001] loop2: p1 < > p4 [ 93.550448][ T3001] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.615807][ T9877] loop1: detected capacity change from 0 to 2048 [ 93.620813][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.632736][ T8215] udevd[8215]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 93.677082][ T9877] loop1: p1 < > p4 [ 93.683375][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.684807][ T9877] loop1: p4 size 8388608 extends beyond EOD, [ 93.691245][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.697370][ T9877] truncated [ 93.705232][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.722110][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.729985][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.737856][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.745778][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.753560][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.761400][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.769297][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.777136][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.785068][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.792871][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.800746][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.823492][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.831374][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.839162][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.847447][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.855316][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.863091][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.870970][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.878730][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.886547][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.894319][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.902211][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.910035][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.917904][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.925704][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.933453][ T3376] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 93.942748][ T3376] hid-generic 0000:0000:20000000.000C: hidraw0: HID v0.01 Device [syz0] on syz1 [ 93.958664][ T9906] net_ratelimit: 5 callbacks suppressed [ 93.958677][ T9906] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 93.987463][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.999569][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 94.027497][ T8215] udevd[8215]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 94.039137][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 94.084592][ T9934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9934 comm=syz.0.1336 [ 94.097232][ T9934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9934 comm=syz.0.1336 [ 94.131025][ T9940] loop4: detected capacity change from 0 to 512 [ 94.140988][ T9940] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 94.174084][ T9940] EXT4-fs (loop4): invalid journal inode [ 94.178447][ T9946] loop0: detected capacity change from 0 to 2048 [ 94.187288][ T9940] EXT4-fs (loop4): can't get journal size [ 94.194139][ T9940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 94.202523][ T9940] System zones: 1-12, 13-13 [ 94.208494][ T9940] EXT4-fs (loop4): 1 truncate cleaned up [ 94.214692][ T9940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.237791][ T9946] loop0: p1 < > p4 [ 94.247077][ T9946] loop0: p4 size 8388608 extends beyond EOD, truncated [ 94.334603][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.377148][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 94.379437][ T8215] udevd[8215]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 94.911049][T10011] loop3: detected capacity change from 0 to 2048 [ 94.966484][T10011] loop3: p1 < > p4 [ 94.973612][T10011] loop3: p4 size 8388608 extends beyond EOD, truncated [ 94.993937][ T3001] loop3: p1 < > p4 [ 94.998968][ T3001] loop3: p4 size 8388608 extends beyond EOD, truncated [ 95.074499][ T3001] loop3: p1 < > p4 [ 95.083640][T10051] loop0: detected capacity change from 0 to 512 [ 95.092535][ T3001] loop3: p4 size 8388608 extends beyond EOD, truncated [ 95.133839][T10058] loop1: detected capacity change from 0 to 512 [ 95.152473][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.174996][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 95.175014][ T29] audit: type=1326 audit(1742689111.344:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.195101][T10051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.204799][ T29] audit: type=1326 audit(1742689111.344:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.236687][ T29] audit: type=1326 audit(1742689111.344:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.240539][T10058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.260416][ T29] audit: type=1326 audit(1742689111.344:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.260454][ T29] audit: type=1326 audit(1742689111.344:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.275053][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.296511][ T29] audit: type=1326 audit(1742689111.344:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.330825][T10058] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.353298][ T29] audit: type=1326 audit(1742689111.344:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.387269][ T29] audit: type=1326 audit(1742689111.344:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.410930][ T29] audit: type=1326 audit(1742689111.344:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.434553][ T29] audit: type=1326 audit(1742689111.344:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f301c75d169 code=0x7ffc0000 [ 95.465980][T10051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.481490][T10051] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.488365][T10058] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.1347: corrupted inode contents [ 95.513546][T10058] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.1347: mark_inode_dirty error [ 95.527828][T10058] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.1347: corrupted inode contents [ 95.576090][T10086] loop4: detected capacity change from 0 to 2048 [ 95.583752][T10058] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1347: mark_inode_dirty error [ 95.626345][T10086] loop4: p1 < > p4 [ 95.637838][T10086] loop4: p4 size 8388608 extends beyond EOD, truncated [ 95.647283][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.834523][T10048] Set syz1 is full, maxelem 65536 reached [ 95.869750][T10105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10105 comm=syz.1.1351 [ 95.882384][T10105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10105 comm=syz.1.1351 [ 95.911427][T10109] loop3: detected capacity change from 0 to 512 [ 95.962364][T10121] __nla_validate_parse: 11 callbacks suppressed [ 95.962380][T10121] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1360'. [ 96.010150][T10109] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.040376][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.060966][T10109] EXT4-fs (loop3): mount failed [ 96.119728][T10147] loop0: detected capacity change from 0 to 1024 [ 96.127289][T10147] EXT4-fs: Ignoring removed nobh option [ 96.132943][T10147] EXT4-fs: Ignoring removed bh option [ 96.157924][T10147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.212049][T10159] loop4: detected capacity change from 0 to 512 [ 96.219209][T10159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.239828][T10159] EXT4-fs (loop4): 1 truncate cleaned up [ 96.271976][T10159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.369811][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.394267][T10176] sd 0:0:1:0: device reset [ 96.404646][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.480456][T10181] loop4: detected capacity change from 0 to 1024 [ 96.513207][T10181] EXT4-fs: Ignoring removed nobh option [ 96.518859][T10181] EXT4-fs: inline encryption not supported [ 96.524704][T10181] EXT4-fs: Ignoring removed bh option [ 96.547895][T10181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.570720][T10181] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.1372: Allocating blocks 497-513 which overlap fs metadata [ 96.585510][T10181] EXT4-fs (loop4): Remounting filesystem read-only [ 96.598483][T10177] EXT4-fs (loop4): pa ffff888106902000: logic 128, phys. 273, len 15 [ 96.612379][T10198] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1375'. [ 96.623811][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.941244][T10207] loop3: detected capacity change from 0 to 512 [ 96.951673][T10212] loop1: detected capacity change from 0 to 2048 [ 96.960141][T10207] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 96.972871][T10207] EXT4-fs (loop3): invalid journal inode [ 96.982290][T10207] EXT4-fs (loop3): can't get journal size [ 97.003225][T10207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 97.004798][T10212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.011421][T10207] System zones: 1-12, 13-13 [ 97.029210][T10207] EXT4-fs (loop3): 1 truncate cleaned up [ 97.035390][T10207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.071671][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.151331][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.179733][T10233] loop1: detected capacity change from 0 to 512 [ 97.190731][T10233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.216033][T10233] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.224094][T10233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 97.239118][T10233] System zones: 0-1, 15-15, 18-18, 34-34 [ 97.247662][T10241] loop4: detected capacity change from 0 to 512 [ 97.249060][T10242] loop3: detected capacity change from 0 to 512 [ 97.254111][T10233] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.267429][T10233] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.282008][T10233] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 97.286991][T10241] EXT4-fs (loop4): 1 orphan inode deleted [ 97.294486][T10233] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1381: bg 0: block 40: padding at end of block bitmap is not set [ 97.296572][T10242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.309162][T10241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.322237][T10233] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 97.333849][ T391] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 97.344538][T10242] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.354225][T10241] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.376212][T10233] EXT4-fs (loop1): 1 truncate cleaned up [ 97.382698][T10242] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1384: corrupted inode contents [ 97.395920][T10233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.402781][T10242] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1384: mark_inode_dirty error [ 97.420182][T10242] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1384: corrupted inode contents [ 97.432546][T10242] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1384: mark_inode_dirty error [ 97.444209][T10233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.453318][T10233] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.461360][T10233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 97.463840][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.478722][ T126] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 97.492045][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.513634][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.542184][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.550156][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.557954][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.565945][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.573712][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.581575][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.589385][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.597244][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.605103][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.612839][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.620602][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.628482][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.636252][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.643989][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.651881][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.659680][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.667498][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.675299][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.683051][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.691463][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.699488][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.707481][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.715270][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.723035][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.730845][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.738633][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.746392][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.754148][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.761994][ T3379] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 97.770650][ T3379] hid-generic 0000:0000:20000000.000D: hidraw0: HID v0.01 Device [syz0] on syz1 [ 97.860451][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.868105][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.875589][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.885254][T10271] SELinux: failed to load policy [ 97.890542][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.894709][T10287] loop1: detected capacity change from 0 to 2048 [ 97.898025][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.898053][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.898079][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.927180][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.934635][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.942194][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.949627][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.957107][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.964530][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.995820][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.003297][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.010791][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.018232][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.027155][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.034663][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.042097][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.049514][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.056971][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.064472][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.072010][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.079574][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.087156][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.094574][ T3376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 98.115298][ T3376] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 98.131970][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1395'. [ 98.236014][T10322] loop2: detected capacity change from 0 to 512 [ 98.275149][T10322] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.285109][T10322] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.292128][T10322] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.326574][T10322] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 98.340603][T10322] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1402: bg 0: block 40: padding at end of block bitmap is not set [ 98.362650][T10322] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 98.371855][T10322] EXT4-fs (loop2): 1 truncate cleaned up [ 98.429410][T10337] bond1: (slave dummy0): Releasing active interface [ 98.447494][T10337] bridge_slave_0: left allmulticast mode [ 98.453192][T10337] bridge_slave_0: left promiscuous mode [ 98.459020][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.466996][T10337] bridge_slave_1: left allmulticast mode [ 98.472694][T10337] bridge_slave_1: left promiscuous mode [ 98.478444][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.497470][T10337] bond0: (slave bond_slave_0): Releasing backup interface [ 98.507019][T10337] bond0: (slave bond_slave_1): Releasing backup interface [ 98.527429][T10337] team0: Port device team_slave_0 removed [ 98.536252][T10337] team0: Port device team_slave_1 removed [ 98.555441][T10337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.566754][T10337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.583334][T10337] bond1: (slave veth3): Releasing active interface [ 98.589566][T10345] loop1: detected capacity change from 0 to 1024 [ 98.886998][T10397] loop2: detected capacity change from 0 to 512 [ 98.912148][T10397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.962414][T10397] EXT4-fs (loop2): 1 truncate cleaned up [ 99.110434][T10427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1429'. [ 99.411741][T10480] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1444'. [ 99.446101][T10485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10485 comm=syz.2.1446 [ 99.458793][T10485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10485 comm=syz.2.1446 [ 99.523137][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 99.582812][T10519] veth1_macvtap: left promiscuous mode [ 99.589799][T10519] macsec0: entered promiscuous mode [ 99.727902][T10543] netlink: 'syz.1.1460': attribute type 5 has an invalid length. [ 99.827309][T10561] loop1: detected capacity change from 0 to 2048 [ 99.971093][T10561] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1465: bg 0: block 234: padding at end of block bitmap is not set [ 100.062002][T10561] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1836 with error 28 [ 100.074546][T10561] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.074546][T10561] [ 100.084341][T10561] EXT4-fs (loop1): Total free blocks count 0 [ 100.090450][T10561] EXT4-fs (loop1): Free/Dirty block details [ 100.096423][T10561] EXT4-fs (loop1): free_blocks=0 [ 100.098750][T10602] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1475'. [ 100.101410][T10561] EXT4-fs (loop1): dirty_blocks=1840 [ 100.101427][T10561] EXT4-fs (loop1): Block reservation details [ 100.101437][T10561] EXT4-fs (loop1): i_reserved_data_blocks=115 [ 100.173457][T10610] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1477'. [ 100.187067][T10610] macvtap1: entered promiscuous mode [ 100.271306][T10623] loop2: detected capacity change from 0 to 2048 [ 100.316339][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 100.316357][ T29] audit: type=1400 audit(1742689116.494:1887): avc: denied { sys_module } for pid=10619 comm="syz.2.1480" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.453498][T10655] loop1: detected capacity change from 0 to 128 [ 100.466632][T10655] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.551861][T10671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10671 comm=syz.1.1489 [ 100.583158][T10671] netlink: 'syz.1.1489': attribute type 5 has an invalid length. [ 100.607903][T10683] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 100.739712][ T29] audit: type=1400 audit(1742689116.914:1888): avc: denied { create } for pid=10707 comm="syz.1.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 100.778556][ T29] audit: type=1400 audit(1742689116.934:1889): avc: denied { sys_admin } for pid=10707 comm="syz.1.1503" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 100.799905][ T29] audit: type=1400 audit(1742689116.934:1890): avc: denied { checkpoint_restore } for pid=10707 comm="syz.1.1503" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.821928][ T29] audit: type=1400 audit(1742689116.934:1891): avc: denied { execute } for pid=10712 comm="syz.0.1502" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 100.948924][ T29] audit: type=1400 audit(1742689116.974:1892): avc: denied { ioctl } for pid=10718 comm="syz.0.1506" path="socket:[16963]" dev="sockfs" ino=16963 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.048408][T10773] loop0: detected capacity change from 0 to 1024 [ 101.059486][ T29] audit: type=1400 audit(1742689117.224:1893): avc: denied { connect } for pid=10774 comm="syz.2.1516" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.295482][ T29] audit: type=1400 audit(1742689117.474:1894): avc: denied { create } for pid=10819 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.340225][ T29] audit: type=1400 audit(1742689117.504:1895): avc: denied { write } for pid=10819 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.463918][ T29] audit: type=1400 audit(1742689117.634:1896): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 101.515751][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 101.579619][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 101.683609][T10868] loop3: detected capacity change from 0 to 2048 [ 101.752274][T10884] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.759847][T10884] vhci_hcd: invalid port number 186 [ 101.765257][T10884] vhci_hcd: default hub control req: 2314 v0008 i00ba l0 [ 101.796411][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 101.845603][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 101.891027][T10899] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 101.921072][T10901] ip6gre2: entered allmulticast mode [ 101.936904][T10909] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 101.948433][T10899] SELinux: failed to load policy [ 101.981485][T10905] CÃ: renamed from team_slave_0 (while UP) [ 101.990842][T10905] netlink: 'syz.4.1549': attribute type 3 has an invalid length. [ 101.998800][T10905] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1549'. [ 102.032816][T10905] A link change request failed with some changes committed already. Interface Cà may have been left with an inconsistent configuration, please check. [ 102.087911][T10927] loop6: detected capacity change from 0 to 2863 [ 102.656011][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.683745][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.194061][T11022] loop4: detected capacity change from 0 to 256 [ 103.215315][T11022] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.522764][T11032] syzkaller0: entered promiscuous mode [ 103.528359][T11032] syzkaller0: entered allmulticast mode [ 103.612111][T11056] loop0: detected capacity change from 0 to 128 [ 103.622339][T11056] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.627447][T11053] loop1: detected capacity change from 0 to 2048 [ 103.821116][T11091] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.835686][T11091] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 103.942899][T11103] ip6gre2: entered allmulticast mode [ 103.981423][T11116] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 104.030344][T11124] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 104.188461][T11156] loop0: detected capacity change from 0 to 2048 [ 104.220819][T11156] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.242432][T11156] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 104.254889][T11156] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.254889][T11156] [ 104.264634][T11156] EXT4-fs (loop0): Total free blocks count 0 [ 104.270681][T11156] EXT4-fs (loop0): Free/Dirty block details [ 104.276608][T11156] EXT4-fs (loop0): free_blocks=2415919104 [ 104.282425][T11156] EXT4-fs (loop0): dirty_blocks=16 [ 104.287639][T11156] EXT4-fs (loop0): Block reservation details [ 104.293828][T11156] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 104.296996][T11162] loop4: detected capacity change from 0 to 128 [ 104.303365][T11156] program syz.0.1596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.311659][T11162] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.416924][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11182 comm=syz.4.1600 [ 104.441073][T11182] netlink: 'syz.4.1600': attribute type 5 has an invalid length. [ 104.499181][T11192] ip6gre2: entered allmulticast mode [ 104.718467][T11217] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 104.919628][T11240] loop2: detected capacity change from 0 to 2048 [ 104.947669][T11240] EXT4-fs mount: 22 callbacks suppressed [ 104.947723][T11240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.984050][T11240] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.995425][T11247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11247 comm=syz.0.1614 [ 105.001058][T11240] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 105.023748][T11240] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.023748][T11240] [ 105.033434][T11240] EXT4-fs (loop2): Total free blocks count 0 [ 105.039466][T11240] EXT4-fs (loop2): Free/Dirty block details [ 105.045403][T11240] EXT4-fs (loop2): free_blocks=2415919104 [ 105.049508][T11249] program syz.2.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.051128][T11240] EXT4-fs (loop2): dirty_blocks=16 [ 105.051151][T11240] EXT4-fs (loop2): Block reservation details [ 105.071588][T11240] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 105.084043][T11247] netlink: 'syz.0.1614': attribute type 5 has an invalid length. [ 105.132704][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.151949][T11255] netlink: 'syz.0.1625': attribute type 10 has an invalid length. [ 105.164222][T11255] hsr_slave_0: left promiscuous mode [ 105.170477][T11255] hsr_slave_1: left promiscuous mode [ 105.206972][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 105.307713][T11276] loop6: detected capacity change from 0 to 8175 [ 105.650892][T11294] loop1: detected capacity change from 0 to 512 [ 105.709917][T11294] EXT4-fs (loop1): 1 orphan inode deleted [ 105.716837][T11294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.720290][T11304] loop2: detected capacity change from 0 to 1024 [ 105.736107][T11294] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.748023][ T12] __quota_error: 70 callbacks suppressed [ 105.748036][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.763522][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 105.779002][T11304] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.790013][T11304] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.805484][T11304] JBD2: no valid journal superblock found [ 105.811322][T11304] EXT4-fs (loop2): Could not load journal inode [ 105.841023][T11304] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.1628'. [ 105.854597][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.872257][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.882194][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 106.050024][T11342] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 106.228948][ T29] audit: type=1400 audit(1742689122.404:1967): avc: denied { create } for pid=11373 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.255348][ T29] audit: type=1400 audit(1742689122.424:1968): avc: denied { write } for pid=11373 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.275655][ T29] audit: type=1400 audit(1742689122.424:1969): avc: denied { nlmsg_write } for pid=11373 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.337525][ T29] audit: type=1400 audit(1742689122.514:1970): avc: denied { mount } for pid=11388 comm="syz.1.1641" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.376419][ T29] audit: type=1400 audit(1742689122.554:1971): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.454662][T11395] syzkaller0: entered promiscuous mode [ 106.460303][T11395] syzkaller0: entered allmulticast mode [ 106.505125][T11403] netem: change failed [ 106.597181][T11414] __nla_validate_parse: 9 callbacks suppressed [ 106.597201][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'. [ 106.653298][T11422] loop3: detected capacity change from 0 to 2048 [ 106.681121][T11422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.725878][T11422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.742203][T11422] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 106.754586][T11422] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.754586][T11422] [ 106.764362][T11422] EXT4-fs (loop3): Total free blocks count 0 [ 106.770445][T11422] EXT4-fs (loop3): Free/Dirty block details [ 106.776492][T11422] EXT4-fs (loop3): free_blocks=2415919104 [ 106.782378][T11422] EXT4-fs (loop3): dirty_blocks=16 [ 106.787548][T11422] EXT4-fs (loop3): Block reservation details [ 106.793653][T11422] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 106.802676][T11437] loop0: detected capacity change from 0 to 512 [ 106.814194][T11442] program syz.3.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.843793][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.856077][T11437] EXT4-fs (loop0): 1 orphan inode deleted [ 106.862398][T11437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.875158][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.876852][T11437] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.885067][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 106.963589][T11461] loop2: detected capacity change from 0 to 256 [ 106.989863][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.002268][T11468] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 107.010782][T11465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1663'. [ 107.020331][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.030246][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 107.054016][T11461] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.074315][T11470] SELinux: ebitmap: truncated map [ 107.148671][T11470] SELinux: failed to load policy [ 107.361363][T11511] loop1: detected capacity change from 0 to 2048 [ 107.398500][T11511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.432223][T11511] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.450566][T11511] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 107.462856][T11511] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.462856][T11511] [ 107.472685][T11511] EXT4-fs (loop1): Total free blocks count 0 [ 107.478751][T11511] EXT4-fs (loop1): Free/Dirty block details [ 107.484666][T11511] EXT4-fs (loop1): free_blocks=2415919104 [ 107.490471][T11511] EXT4-fs (loop1): dirty_blocks=16 [ 107.495605][T11511] EXT4-fs (loop1): Block reservation details [ 107.501621][T11511] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 107.523003][T11511] program syz.1.1670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.578196][ T29] audit: type=1400 audit(1742689123.754:1972): avc: denied { write } for pid=11530 comm="syz.3.1675" path="socket:[18548]" dev="sockfs" ino=18548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.611421][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.629244][T11537] loop2: detected capacity change from 0 to 512 [ 107.688229][T11537] EXT4-fs (loop2): 1 orphan inode deleted [ 107.709176][ T295] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 107.713760][T11537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.753616][T11537] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.849946][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.860230][ T295] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 108.053726][T11587] loop1: detected capacity change from 0 to 2048 [ 108.097144][T11587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.130819][T11587] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.175027][T11587] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 108.187526][T11587] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.187526][T11587] [ 108.189362][T11603] program syz.1.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.197211][T11587] EXT4-fs (loop1): Total free blocks count 0 [ 108.197229][T11587] EXT4-fs (loop1): Free/Dirty block details [ 108.197244][T11587] EXT4-fs (loop1): free_blocks=2415919104 [ 108.197299][T11587] EXT4-fs (loop1): dirty_blocks=16 [ 108.197314][T11587] EXT4-fs (loop1): Block reservation details [ 108.197326][T11587] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 108.245854][T11602] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 108.253645][T11602] SELinux: failed to load policy [ 108.301948][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.401853][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.433557][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.479333][T11620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1698'. [ 108.587757][T11636] loop3: detected capacity change from 0 to 128 [ 108.611462][T11636] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.624136][T11636] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.703884][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.832625][T11666] loop4: detected capacity change from 0 to 2048 [ 108.848932][T11666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.865699][T11666] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.880725][T11666] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 108.893001][T11666] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.893001][T11666] [ 108.902680][T11666] EXT4-fs (loop4): Total free blocks count 0 [ 108.908781][T11666] EXT4-fs (loop4): Free/Dirty block details [ 108.914691][T11666] EXT4-fs (loop4): free_blocks=2415919104 [ 108.920465][T11666] EXT4-fs (loop4): dirty_blocks=16 [ 108.923429][T11674] program syz.4.1710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.925600][T11666] EXT4-fs (loop4): Block reservation details [ 108.925614][T11666] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 108.964032][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.066330][T11673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.076616][T11673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.303044][T11712] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 109.349094][T11715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 109.360888][T11715] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.369225][T11715] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.377553][T11715] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.385794][T11715] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.396040][T11715] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.404486][T11715] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.413163][T11715] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.421640][T11715] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.553093][T11728] loop1: detected capacity change from 0 to 2048 [ 109.569397][T11728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.584780][T11728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.600453][T11728] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 109.612744][T11728] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.612744][T11728] [ 109.622488][T11728] EXT4-fs (loop1): Total free blocks count 0 [ 109.628662][T11728] EXT4-fs (loop1): Free/Dirty block details [ 109.634561][T11728] EXT4-fs (loop1): free_blocks=2415919104 [ 109.640347][T11728] EXT4-fs (loop1): dirty_blocks=16 [ 109.643170][T11732] program syz.1.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.645518][T11728] EXT4-fs (loop1): Block reservation details [ 109.645533][T11728] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 109.687939][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.770848][T11753] random: crng reseeded on system resumption [ 110.020868][T11777] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1737'. [ 110.033780][T11777] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 110.786780][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 110.786796][ T29] audit: type=1326 audit(1742689126.964:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.819424][ T29] audit: type=1326 audit(1742689126.994:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.843095][ T29] audit: type=1326 audit(1742689126.994:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.866674][ T29] audit: type=1326 audit(1742689126.994:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.923106][ T29] audit: type=1326 audit(1742689126.994:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.946764][ T29] audit: type=1326 audit(1742689126.994:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.970341][ T29] audit: type=1326 audit(1742689126.994:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 110.993923][ T29] audit: type=1326 audit(1742689126.994:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 111.017893][ T29] audit: type=1326 audit(1742689126.994:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 111.041486][ T29] audit: type=1326 audit(1742689126.994:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x7ffc0000 [ 111.165911][T11802] loop3: detected capacity change from 0 to 2048 [ 111.179537][T11802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.301597][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.870612][T11825] loop3: detected capacity change from 0 to 2048 [ 111.903521][T11825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.941057][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.037080][T11864] loop3: detected capacity change from 0 to 2048 [ 112.105999][T11864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.166282][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.184324][T11894] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 112.317462][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 112.702139][T11984] loop4: detected capacity change from 0 to 164 [ 112.715999][T11984] syz.4.1776: attempt to access beyond end of device [ 112.715999][T11984] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 112.734029][T11984] syz.4.1776: attempt to access beyond end of device [ 112.734029][T11984] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 112.808843][T11997] policy can only be matched on NF_INET_PRE_ROUTING [ 112.808920][T11997] unable to load match [ 112.875496][T12006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.961947][T12022] loop3: detected capacity change from 0 to 512 [ 113.010994][T12022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.049308][T12022] EXT4-fs (loop3): 1 truncate cleaned up [ 113.057437][T12022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.218098][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.316066][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1796'. [ 113.564710][T12100] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1807'. [ 113.794817][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 113.831551][T12131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.931669][T12146] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 113.961305][T12155] loop3: detected capacity change from 0 to 512 [ 113.970950][T12155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.005570][T12155] EXT4-fs (loop3): 1 truncate cleaned up [ 114.013404][T12155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.231223][T12190] loop1: detected capacity change from 0 to 512 [ 114.246849][T12190] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.264134][T12190] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.277648][T12190] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.294464][T12190] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 114.306119][T12190] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1833: bg 0: block 40: padding at end of block bitmap is not set [ 114.329299][T12190] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 114.338472][T12190] EXT4-fs (loop1): 1 truncate cleaned up [ 114.344611][T12190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.357649][T12190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.537573][T12241] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 114.544200][T12241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.551840][T12241] vhci_hcd vhci_hcd.0: Device attached [ 114.587451][T12246] loop0: detected capacity change from 0 to 2048 [ 114.608117][T12243] usbip_core: unknown command [ 114.612834][T12243] vhci_hcd: unknown pdu 4294967295 [ 114.618215][T12243] usbip_core: unknown command [ 114.628245][ T2104] vhci_hcd: stop threads [ 114.632547][ T2104] vhci_hcd: release socket [ 114.637094][ T2104] vhci_hcd: disconnect device [ 114.649074][T12246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.734605][T12246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1856: bg 0: block 234: padding at end of block bitmap is not set [ 114.780098][T12264] loop2: detected capacity change from 0 to 1024 [ 114.802804][T12246] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 916 with error 28 [ 114.803389][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.815224][T12246] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.815224][T12246] [ 114.815244][T12246] EXT4-fs (loop0): Total free blocks count 0 [ 114.839899][T12246] EXT4-fs (loop0): Free/Dirty block details [ 114.845933][T12246] EXT4-fs (loop0): free_blocks=0 [ 114.850891][T12246] EXT4-fs (loop0): dirty_blocks=928 [ 114.856239][T12246] EXT4-fs (loop0): Block reservation details [ 114.862374][T12246] EXT4-fs (loop0): i_reserved_data_blocks=58 [ 114.873766][T12264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.922301][T12264] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 114.942139][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.997088][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.068920][ T295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.088229][T12299] vlan0: entered allmulticast mode [ 115.120165][ T295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.196726][T12313] sock: sock_timestamping_bind_phc: sock not bind to device [ 115.218992][ T295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.237135][T12316] netlink: 'syz.0.1867': attribute type 5 has an invalid length. [ 115.288831][ T295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.451673][ T295] bridge_slave_1: left allmulticast mode [ 115.457494][ T295] bridge_slave_1: left promiscuous mode [ 115.463310][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.493329][ T295] bridge_slave_0: left allmulticast mode [ 115.499141][ T295] bridge_slave_0: left promiscuous mode [ 115.505973][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.621869][ T3375] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 115.640835][ T3375] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.757235][T12387] loop0: detected capacity change from 0 to 1024 [ 115.810525][T12387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.826904][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.863195][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.879189][T12387] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.0.1879: corrupted in-inode xattr: bad magic number in in-inode xattr [ 115.884977][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 115.884994][ T29] audit: type=1400 audit(1742689132.054:2186): avc: denied { link } for pid=12384 comm="syz.0.1879" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.924847][ T295] bond0 (unregistering): Released all slaves [ 115.940807][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.979203][T12403] -: renamed from syzkaller0 [ 116.010581][ T295] hsr_slave_0: left promiscuous mode [ 116.020174][ T295] hsr_slave_1: left promiscuous mode [ 116.031711][ T29] audit: type=1400 audit(1742689132.194:2187): avc: denied { read } for pid=12443 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.054940][ T29] audit: type=1400 audit(1742689132.204:2188): avc: denied { open } for pid=12443 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.055173][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.080080][ T29] audit: type=1400 audit(1742689132.204:2189): avc: denied { getattr } for pid=12443 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.087539][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.168771][ T29] audit: type=1326 audit(1742689132.294:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 116.192444][ T29] audit: type=1326 audit(1742689132.294:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 116.216058][ T29] audit: type=1326 audit(1742689132.294:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 116.239633][ T29] audit: type=1326 audit(1742689132.294:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 116.263286][ T29] audit: type=1326 audit(1742689132.294:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 116.287002][ T29] audit: type=1326 audit(1742689132.304:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdbdd70d169 code=0x7ffc0000 [ 116.311282][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.318878][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.328764][ T295] veth1_macvtap: left promiscuous mode [ 116.335975][ T295] veth0_macvtap: left promiscuous mode [ 116.348752][ T295] veth1_vlan: left promiscuous mode [ 116.354128][ T295] veth0_vlan: left promiscuous mode [ 116.429118][T12481] devpts: called with bogus options [ 116.546776][T12459] netlink: 'syz.4.1888': attribute type 3 has an invalid length. [ 116.655116][T12320] chnl_net:caif_netlink_parms(): no params data found [ 116.742327][T12320] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.749511][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.789776][T12320] bridge_slave_0: entered allmulticast mode [ 116.808693][T12320] bridge_slave_0: entered promiscuous mode [ 116.833766][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.840928][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.900205][T12320] bridge_slave_1: entered allmulticast mode [ 116.918144][T12320] bridge_slave_1: entered promiscuous mode [ 117.023562][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.034344][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.062812][T12320] team0: Port device team_slave_0 added [ 117.076776][T12320] team0: Port device team_slave_1 added [ 117.182209][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.189348][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.215312][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.252698][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.259738][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.285896][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.331629][T12320] hsr_slave_0: entered promiscuous mode [ 117.339198][T12320] hsr_slave_1: entered promiscuous mode [ 117.566633][T12320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.585841][T12320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.601716][T12320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.614186][T12320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.650367][T12944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12944 comm=syz.0.1911 [ 117.663027][T12944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12944 comm=syz.0.1911 [ 117.698922][T12320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.711776][T12320] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.722490][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.729698][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.740996][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.748069][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.885708][T12320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.013190][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'. [ 118.155977][T12320] veth0_vlan: entered promiscuous mode [ 118.165725][T12320] veth1_vlan: entered promiscuous mode [ 118.201962][T12320] veth0_macvtap: entered promiscuous mode [ 118.211128][T12320] veth1_macvtap: entered promiscuous mode [ 118.227448][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.238036][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.247970][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.258618][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.271028][T13037] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 118.282226][T12320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.290112][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1923'. [ 118.293820][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.309788][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.319772][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.330295][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.345607][T12320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.373875][T12320] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.382828][T12320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.391640][T12320] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.400394][T12320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.466087][T13068] netlink: 'syz.2.1925': attribute type 3 has an invalid length. [ 118.513495][T13076] veth1_macvtap: left promiscuous mode [ 118.520355][T13076] macsec0: entered promiscuous mode [ 118.555249][T13072] Falling back ldisc for ttyS3. [ 118.945802][T13153] hub 6-0:1.0: USB hub found [ 118.956010][T13153] hub 6-0:1.0: 8 ports detected [ 119.028236][T13171] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 119.047915][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 119.057011][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 119.207997][T13208] pim6reg1: entered promiscuous mode [ 119.213370][T13208] pim6reg1: entered allmulticast mode [ 119.245857][T13212] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1959'. [ 119.400670][T13245] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1968'. [ 119.493773][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.514250][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.557006][T13263] xt_CT: No such helper "pptp" [ 119.574685][T13268] loop5: detected capacity change from 0 to 128 [ 119.690316][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1976'. [ 119.731947][T13294] netlink: 'syz.2.1978': attribute type 29 has an invalid length. [ 119.746286][T13294] netlink: 'syz.2.1978': attribute type 29 has an invalid length. [ 120.249109][T13360] loop0: detected capacity change from 0 to 2048 [ 120.270420][T13360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.377026][T13371] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 120.417643][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.458102][T13394] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 120.467624][T13398] program syz.2.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.544693][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2006'. [ 120.579801][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2008'. [ 120.667025][T13448] loop0: detected capacity change from 0 to 128 [ 120.733463][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 120.758788][T13448] syz.0.2014: attempt to access beyond end of device [ 120.758788][T13448] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 120.792975][T13463] loop4: detected capacity change from 0 to 1024 [ 120.807736][T13468] loop5: detected capacity change from 0 to 164 [ 120.814311][T13468] iso9660: Unknown parameter 'shmwassoc' [ 120.831697][T13463] EXT4-fs: Ignoring removed bh option [ 120.869246][T13463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.957674][T13463] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.2018: Abort forced by user [ 120.999495][T13463] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 121.059045][T13497] 9pnet: p9_errstr2errno: server reported unknown error [ 121.072723][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.186868][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 121.186883][ T29] audit: type=1326 audit(1742689137.364:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.0.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58db38d169 code=0x0 [ 121.277501][T13523] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.285129][T13523] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 121.393783][ T29] audit: type=1326 audit(1742689137.564:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.518919][ T29] audit: type=1326 audit(1742689137.604:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.542511][ T29] audit: type=1326 audit(1742689137.604:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.566084][ T29] audit: type=1326 audit(1742689137.604:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.589592][ T29] audit: type=1326 audit(1742689137.604:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.613247][ T29] audit: type=1326 audit(1742689137.604:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.636905][ T29] audit: type=1326 audit(1742689137.604:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.660502][ T29] audit: type=1326 audit(1742689137.604:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.684105][ T29] audit: type=1326 audit(1742689137.604:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f5ebd169 code=0x7ffc0000 [ 121.737573][T13542] loop5: detected capacity change from 0 to 164 [ 121.747706][T13542] syz.5.2047: attempt to access beyond end of device [ 121.747706][T13542] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.762067][T13542] syz.5.2047: attempt to access beyond end of device [ 121.762067][T13542] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.778441][T13546] loop4: detected capacity change from 0 to 164 [ 121.785449][T13546] iso9660: Unknown parameter 'shmwassoc' [ 121.897174][T13565] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.904678][T13565] vhci_hcd: invalid port number 186 [ 121.909953][T13565] vhci_hcd: default hub control req: 4014 v0008 i00ba l0 [ 122.036315][T13585] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.106697][T13585] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.206509][T13585] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.247155][T13611] loop2: detected capacity change from 0 to 164 [ 122.275945][T13585] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.288556][T13611] syz.2.2051: attempt to access beyond end of device [ 122.288556][T13611] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 122.302900][T13611] syz.2.2051: attempt to access beyond end of device [ 122.302900][T13611] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.321715][T13613] policy can only be matched on NF_INET_PRE_ROUTING [ 122.321732][T13613] unable to load match [ 122.353438][T13585] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.365345][T13585] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.378523][T13585] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.395190][T13585] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.524661][T13639] loop1: detected capacity change from 0 to 164 [ 122.555098][T13639] iso9660: Unknown parameter 'shmwassoc' [ 122.974688][T13709] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 122.995315][T13709] SELinux: failed to load policy [ 123.051471][T13715] __nla_validate_parse: 5 callbacks suppressed [ 123.051488][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 123.074722][T13715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.094358][T13720] netem: change failed [ 123.766657][T13801] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 123.778759][T13801] SELinux: failed to load policy [ 124.189186][ T295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.269945][T13863] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 124.275907][ T295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.367621][ T295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.458739][ T295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.566402][ T295] bridge_slave_1: left allmulticast mode [ 124.572138][ T295] bridge_slave_1: left promiscuous mode [ 124.577890][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.586733][ T295] bridge_slave_0: left allmulticast mode [ 124.592409][ T295] bridge_slave_0: left promiscuous mode [ 124.598264][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.811219][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.836565][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.849592][ T295] bond0 (unregistering): Released all slaves [ 124.900967][ T295] hsr_slave_0: left promiscuous mode [ 124.911301][ T295] hsr_slave_1: left promiscuous mode [ 124.922097][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.929692][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.937413][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.945156][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.963021][ T295] veth0_macvtap: left promiscuous mode [ 124.969383][ T295] veth1_vlan: left promiscuous mode [ 124.974737][ T295] veth0_vlan: left promiscuous mode [ 125.045632][ T2104] ================================================================== [ 125.053769][ T2104] BUG: KCSAN: data-race in batadv_hard_if_event / batadv_mcast_mla_update [ 125.062325][ T2104] [ 125.064659][ T2104] write to 0xffff888118e13810 of 1 bytes by task 295 on cpu 0: [ 125.072213][ T2104] batadv_hard_if_event+0x896/0xfb0 [ 125.077428][ T2104] raw_notifier_call_chain+0x6f/0x1d0 [ 125.082819][ T2104] call_netdevice_notifiers_info+0xae/0x100 [ 125.088730][ T2104] unregister_netdevice_many_notify+0x98a/0x1280 [ 125.095074][ T2104] default_device_exit_batch+0x500/0x560 [ 125.100727][ T2104] cleanup_net+0x4eb/0x890 [ 125.105157][ T2104] process_scheduled_works+0x4db/0xa20 [ 125.110634][ T2104] worker_thread+0x51d/0x6f0 [ 125.115243][ T2104] kthread+0x4ae/0x520 [ 125.119328][ T2104] ret_from_fork+0x4b/0x60 [ 125.123772][ T2104] ret_from_fork_asm+0x1a/0x30 [ 125.128549][ T2104] [ 125.130874][ T2104] read to 0xffff888118e13810 of 1 bytes by task 2104 on cpu 1: [ 125.138416][ T2104] batadv_mcast_mla_update+0x21b/0x1700 [ 125.143985][ T2104] process_scheduled_works+0x4db/0xa20 [ 125.149459][ T2104] worker_thread+0x51d/0x6f0 [ 125.154060][ T2104] kthread+0x4ae/0x520 [ 125.158141][ T2104] ret_from_fork+0x4b/0x60 [ 125.162568][ T2104] ret_from_fork_asm+0x1a/0x30 [ 125.167344][ T2104] [ 125.169668][ T2104] value changed: 0x00 -> 0x01 [ 125.174343][ T2104] [ 125.176664][ T2104] Reported by Kernel Concurrency Sanitizer on: [ 125.182840][ T2104] CPU: 1 UID: 0 PID: 2104 Comm: kworker/u8:7 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.193693][ T2104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.203763][ T2104] Workqueue: bat_events batadv_mcast_mla_update [ 125.210028][ T2104] ================================================================== [ 125.220464][ T295] team0 (unregistering): Port device team_slave_1 removed [ 125.235223][ T295] team0 (unregistering): Port device team_slave_0 removed [ 126.026511][ T295] bond0 (unregistering): Released all slaves [ 126.034550][ T295] bond1 (unregistering): Released all slaves [ 126.042811][ T295] bond0 (unregistering): Released all slaves [ 126.087273][ T295] tipc: Left network mode [ 126.094745][ T295] hsr_slave_0: left promiscuous mode [ 126.101428][ T295] hsr_slave_1: left promiscuous mode [ 126.458452][ T295] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.498334][ T295] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.537017][ T295] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.586611][ T295] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.838277][ T295] bridge_slave_0: left allmulticast mode [ 126.843966][ T295] bridge_slave_0: left promiscuous mode [ 126.849706][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.086821][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.096648][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.105987][ T295] bond0 (unregistering): Released all slaves [ 127.139211][ T295] veth1_to_team: left promiscuous mode [ 127.144742][ T295] veth1_macvtap: left promiscuous mode [ 127.203556][ T295] team0 (unregistering): Port device team_slave_1 removed [ 127.214167][ T295] team0 (unregistering): Port device Cà removed [ 134.598490][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 134.598509][ T29] audit: type=1400 audit(1742689150.774:2387): avc: denied { write } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.626129][ T29] audit: type=1400 audit(1742689150.774:2388): avc: denied { remove_name } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.648791][ T29] audit: type=1400 audit(1742689150.774:2389): avc: denied { rename } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.671120][ T29] audit: type=1400 audit(1742689150.774:2390): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.694023][ T29] audit: type=1400 audit(1742689150.774:2391): avc: denied { unlink } for pid=2983 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.716701][ T29] audit: type=1400 audit(1742689150.774:2392): avc: denied { create } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1