last executing test programs: 25.837968623s ago: executing program 1 (id=3466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 25.766573134s ago: executing program 1 (id=3468): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000540)='./file0\x00', 0xc4000ce7) 25.748010264s ago: executing program 1 (id=3469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f00000192c0)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x16cd, &(0x7f00000000c0)={0x0, 0xd24f, 0x3180, 0x2, 0x2c6, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4004, @fd=r1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0xfffffffffffffeb3) 25.705692385s ago: executing program 1 (id=3470): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000600)='.\x02\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x1, 0x55d, &(0x7f0000000b00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x20111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 25.608608987s ago: executing program 1 (id=3473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 24.99721191s ago: executing program 1 (id=3492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0xfffffeed) 24.96446207s ago: executing program 32 (id=3492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0xfffffeed) 20.507369219s ago: executing program 2 (id=3643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) 20.453205351s ago: executing program 2 (id=3646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 20.406092081s ago: executing program 2 (id=3648): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.167739966s ago: executing program 2 (id=3661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 20.118034008s ago: executing program 2 (id=3664): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 19.522375919s ago: executing program 2 (id=3681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x1a0a1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 19.50874612s ago: executing program 33 (id=3681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x1a0a1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 18.218489476s ago: executing program 4 (id=3711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x20040054) 18.039797249s ago: executing program 4 (id=3715): writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 17.803311793s ago: executing program 4 (id=3722): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xc7f}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 17.708570466s ago: executing program 4 (id=3730): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 17.660973756s ago: executing program 4 (id=3731): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 17.293092894s ago: executing program 4 (id=3739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r1}, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.274679854s ago: executing program 34 (id=3739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r1}, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.069929038s ago: executing program 3 (id=4027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 9.019519879s ago: executing program 3 (id=4031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) dup2(r2, r1) 8.908902741s ago: executing program 3 (id=4033): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 8.833977723s ago: executing program 3 (id=4035): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8.786128734s ago: executing program 3 (id=4038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 8.179269206s ago: executing program 3 (id=4056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @rand_addr=' \x01\x00', 0x800}, 0x1c) listen(r0, 0x39c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.156657687s ago: executing program 35 (id=4056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @rand_addr=' \x01\x00', 0x800}, 0x1c) listen(r0, 0x39c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.360478613s ago: executing program 0 (id=4193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) pause() 1.530409729s ago: executing program 8 (id=4209): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 1.49874303s ago: executing program 8 (id=4210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.474027321s ago: executing program 0 (id=4211): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) 1.417449231s ago: executing program 7 (id=4212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.384252822s ago: executing program 8 (id=4213): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x200000, 0x158, 0x18}, 0x0, 0x18, 0x0, 0x23456}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 814.448373ms ago: executing program 5 (id=4226): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 805.644173ms ago: executing program 0 (id=4227): io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 566.428279ms ago: executing program 7 (id=4228): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 502.7499ms ago: executing program 6 (id=4229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 340.220253ms ago: executing program 6 (id=4230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x200}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 339.165483ms ago: executing program 5 (id=4241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 254.141495ms ago: executing program 0 (id=4231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 254.024125ms ago: executing program 7 (id=4232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000380)='\x00!', 0x2}], 0x1, 0xee, 0x1) 242.004815ms ago: executing program 6 (id=4233): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') exit(0xffff) pread64(r2, &(0x7f00000022c0)=""/4079, 0xfef, 0x4) 215.083405ms ago: executing program 5 (id=4234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 191.564656ms ago: executing program 5 (id=4235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 171.248876ms ago: executing program 0 (id=4236): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000003c0)='autofs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 146.046217ms ago: executing program 5 (id=4237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) pwrite64(r2, &(0x7f0000000440)="7cf4", 0x2, 0x893) 125.322447ms ago: executing program 8 (id=4239): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) link(0x0, &(0x7f00000005c0)='./bus\x00') write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 125.224577ms ago: executing program 7 (id=4240): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 102.624368ms ago: executing program 7 (id=4242): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4243): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) kernel console output (not intermixed with test programs): ][ T9411] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 102.573388][ T9411] syz.0.2623: attempt to access beyond end of device [ 102.573388][ T9411] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 102.588503][ T9420] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.2622: corrupted inode contents [ 102.602124][ T9411] syz.0.2623: attempt to access beyond end of device [ 102.602124][ T9411] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 102.613265][ T9420] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm syz.2.2622: mark_inode_dirty error [ 102.615654][ T9411] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 102.617731][ T9411] syz.0.2623: attempt to access beyond end of device [ 102.617731][ T9411] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 102.652652][ T9420] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.2622: corrupted inode contents [ 102.666711][ T9411] syz.0.2623: attempt to access beyond end of device [ 102.666711][ T9411] loop0: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 102.680321][ T9411] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 102.693653][ T9411] syz.0.2623: attempt to access beyond end of device [ 102.693653][ T9411] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 102.710028][ T9411] syz.0.2623: attempt to access beyond end of device [ 102.710028][ T9411] loop0: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 102.723630][ T9411] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 102.732921][ T9425] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 102.735085][ T9411] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 102.744797][ T9420] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.2622: mark_inode_dirty error [ 102.754776][ T9411] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 102.773742][ T9411] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 102.782989][ T9411] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 102.795492][ T9411] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 102.806399][ T9420] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.2622: mark inode dirty (error -117) [ 102.827573][ T9420] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 102.848926][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 102.858281][ T9432] netlink: 'syz.1.2629': attribute type 18 has an invalid length. [ 102.867965][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 102.868851][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.877059][ T9432] netlink: 'syz.1.2629': attribute type 18 has an invalid length. [ 102.896705][ T9433] vhci_hcd: invalid port number 96 [ 102.901966][ T9433] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 102.924146][ T9435] loop2: detected capacity change from 0 to 512 [ 102.946480][ T9435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.976138][ T9435] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.104689][ T9435] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.2643: corrupted inode contents [ 103.125728][ T9435] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm syz.2.2643: mark_inode_dirty error [ 103.144143][ T9435] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.2643: corrupted inode contents [ 103.158136][ T9435] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.2643: mark_inode_dirty error [ 103.170906][ T9435] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.2643: mark inode dirty (error -117) [ 103.183940][ T9435] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 103.225867][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.306967][ T9474] vhci_hcd: invalid port number 96 [ 103.312255][ T9474] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 103.429703][ T9501] SELinux: failed to load policy [ 103.495767][ T9511] netlink: 'syz.3.2668': attribute type 4 has an invalid length. [ 103.532987][ T9511] netlink: 'syz.3.2668': attribute type 4 has an invalid length. [ 103.577933][ T9519] vhci_hcd: invalid port number 96 [ 103.583234][ T9519] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 103.851103][ T9531] loop2: detected capacity change from 0 to 4096 [ 103.876512][ T9531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.886229][ T9531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.939238][ T9547] hub 9-0:1.0: USB hub found [ 103.965344][ T9547] hub 9-0:1.0: 8 ports detected [ 104.077167][ T9557] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 104.192730][ T9563] loop0: detected capacity change from 0 to 512 [ 104.226104][ T9563] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2690: missing EA_INODE flag [ 104.245397][ T9563] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2690: error while reading EA inode 11 err=-117 [ 104.277642][ T9563] EXT4-fs (loop0): 1 orphan inode deleted [ 104.281326][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.284005][ T9563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.335884][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.792844][ T9602] netlink: 'syz.4.2705': attribute type 4 has an invalid length. [ 104.808120][ T9602] netlink: 'syz.4.2705': attribute type 4 has an invalid length. [ 104.808123][ T9599] hub 9-0:1.0: USB hub found [ 104.822428][ T9601] netlink: 'syz.1.2706': attribute type 10 has an invalid length. [ 104.837066][ T9599] hub 9-0:1.0: 8 ports detected [ 104.858129][ T9601] team0: Port device geneve1 added [ 105.190766][ T9626] netlink: 'syz.3.2714': attribute type 3 has an invalid length. [ 105.317018][ T9638] netlink: 'syz.1.2732': attribute type 4 has an invalid length. [ 105.375365][ T9642] loop0: detected capacity change from 0 to 1024 [ 105.395632][ T9642] EXT4-fs: Ignoring removed orlov option [ 105.401364][ T9642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.451595][ T9642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.518874][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.672387][ T9660] loop2: detected capacity change from 0 to 512 [ 105.682996][ T9660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.697966][ T9660] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2725: invalid indirect mapped block 4294967295 (level 0) [ 105.730272][ T9660] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2725: invalid indirect mapped block 4294967295 (level 1) [ 105.749886][ T9660] EXT4-fs (loop2): 1 orphan inode deleted [ 105.755858][ T9660] EXT4-fs (loop2): 1 truncate cleaned up [ 105.762794][ T9660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.821798][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.906029][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 105.906054][ T29] audit: type=1400 audit(1758841943.561:3083): avc: denied { mounton } for pid=9673 comm="syz.4.2747" path="/551/bus" dev="tmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.974243][ T29] audit: type=1400 audit(1758841943.621:3084): avc: denied { connect } for pid=9682 comm="syz.0.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.999748][ T29] audit: type=1400 audit(1758841943.651:3085): avc: denied { write } for pid=9682 comm="syz.0.2736" path="socket:[25431]" dev="sockfs" ino=25431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.057093][ T9688] loop4: detected capacity change from 0 to 1024 [ 106.063936][ T9688] EXT4-fs: Ignoring removed orlov option [ 106.070003][ T9688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.086739][ T9691] vhci_hcd: invalid port number 96 [ 106.091921][ T9691] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 106.109663][ T9688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.143737][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.406319][ T29] audit: type=1400 audit(1758841944.051:3086): avc: denied { read } for pid=9705 comm="syz.4.2750" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.430180][ T29] audit: type=1400 audit(1758841944.051:3087): avc: denied { open } for pid=9705 comm="syz.4.2750" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.455105][ T29] audit: type=1400 audit(1758841944.051:3088): avc: denied { ioctl } for pid=9705 comm="syz.4.2750" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.501661][ T9710] validate_nla: 4 callbacks suppressed [ 106.501681][ T9710] netlink: 'syz.4.2752': attribute type 3 has an invalid length. [ 106.536392][ T29] audit: type=1400 audit(1758841944.191:3089): avc: denied { read write } for pid=9713 comm="syz.2.2766" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.577202][ T29] audit: type=1400 audit(1758841944.191:3090): avc: denied { open } for pid=9713 comm="syz.2.2766" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.581994][ T9718] hub 9-0:1.0: USB hub found [ 106.608338][ T9718] hub 9-0:1.0: 8 ports detected [ 106.618641][ T9722] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.632946][ T9722] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.736002][ T9730] vhci_hcd: invalid port number 96 [ 106.741196][ T9730] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 106.751815][ T9722] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.762244][ T9722] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.818115][ T9722] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.828489][ T9722] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.868510][ T9722] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.879034][ T9722] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.962442][ T5560] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.970830][ T5560] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.988289][ T29] audit: type=1326 audit(1758841944.641:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 106.992376][ T5560] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.012077][ T29] audit: type=1326 audit(1758841944.641:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 107.044239][ T5560] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.049672][ T9732] loop4: detected capacity change from 0 to 2048 [ 107.072860][ T5560] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.081195][ T5560] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.092273][ T5560] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.100644][ T5560] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.127038][ T9732] loop4: p1 < > p4 [ 107.131873][ T9732] loop4: p4 size 8388608 extends beyond EOD, truncated [ 107.166099][ T9747] hub 9-0:1.0: USB hub found [ 107.171536][ T9747] hub 9-0:1.0: 8 ports detected [ 107.261102][ T9758] openvswitch: netlink: Message has 6 unknown bytes. [ 107.345715][ T9765] hub 9-0:1.0: USB hub found [ 107.350605][ T9765] hub 9-0:1.0: 8 ports detected [ 107.412267][ T9775] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 107.781756][ T9795] netlink: 'syz.0.2786': attribute type 10 has an invalid length. [ 107.789729][ T9795] __nla_validate_parse: 3 callbacks suppressed [ 107.789748][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2786'. [ 107.849165][ T9795] team0: Port device geneve1 added [ 107.922627][ T9800] openvswitch: netlink: Message has 6 unknown bytes. [ 108.002815][ T9805] netlink: 'syz.2.2792': attribute type 3 has an invalid length. [ 108.203317][ T9807] loop0: detected capacity change from 0 to 2048 [ 108.235611][ T9807] loop0: p1 < > p4 [ 108.240257][ T9807] loop0: p4 size 8388608 extends beyond EOD, truncated [ 108.841732][ T9832] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 108.849669][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2805'. [ 108.876610][ T9832] team0: Port device geneve1 added [ 108.971142][ T9834] loop0: detected capacity change from 0 to 1024 [ 108.995575][ T9834] EXT4-fs: Ignoring removed bh option [ 109.001210][ T9834] EXT4-fs: inline encryption not supported [ 109.023934][ T9834] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.044992][ T9834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 109.057605][ T9834] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2806: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.083260][ T9834] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2806: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.128397][ T9834] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2806: Failed to acquire dquot type 0 [ 109.140363][ T9834] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 109.162648][ T9834] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2806: mark_inode_dirty error [ 109.174073][ T9834] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 109.184525][ T9834] EXT4-fs (loop0): 1 orphan inode deleted [ 109.191008][ T9834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.203732][ T5521] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.218589][ T5521] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 0 [ 109.260373][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.273743][ T9852] pim6reg: entered allmulticast mode [ 109.283722][ T9852] pim6reg: left allmulticast mode [ 109.302411][ T3300] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 109.334504][ T3300] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 109.345896][ T3300] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 109.691172][ T9897] loop2: detected capacity change from 0 to 512 [ 109.709277][ T9897] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 109.724245][ T9897] EXT4-fs (loop2): invalid journal inode [ 109.731444][ T9897] EXT4-fs (loop2): can't get journal size [ 109.743483][ T9897] EXT4-fs (loop2): 1 truncate cleaned up [ 109.750159][ T9897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.849228][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.935004][ T9929] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 110.148894][ T9960] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2867'. [ 110.177701][ T9952] loop0: detected capacity change from 0 to 8192 [ 110.338130][ T9980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.399656][ T2953] hid_parser_main: 19 callbacks suppressed [ 110.399678][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 110.413124][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.416996][ T9987] vhci_hcd: invalid port number 96 [ 110.420607][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.425717][ T9987] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 110.433097][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.447679][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.505233][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.512811][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.520389][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 110.527943][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.535560][ T2953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.563798][ T2953] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 110.701400][T10015] netlink: 'syz.2.2893': attribute type 1 has an invalid length. [ 110.709508][T10015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2893'. [ 110.750130][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 111.025946][T10066] macvtap0: refused to change device tx_queue_len [ 111.032797][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 111.032865][ T29] audit: type=1326 audit(2000000000.910:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.089095][ T29] audit: type=1326 audit(2000000000.910:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.112897][ T29] audit: type=1326 audit(2000000000.960:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.136659][ T29] audit: type=1326 audit(2000000000.960:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.160180][ T29] audit: type=1326 audit(2000000000.960:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.183919][ T29] audit: type=1326 audit(2000000000.960:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.207582][ T29] audit: type=1326 audit(2000000000.960:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.231632][ T29] audit: type=1326 audit(2000000000.960:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.255256][ T29] audit: type=1326 audit(2000000000.960:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.278882][ T29] audit: type=1326 audit(2000000000.960:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.3.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 111.396984][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2926'. [ 111.502712][T10099] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2932'. [ 111.527880][T10104] loop4: detected capacity change from 0 to 512 [ 111.558728][T10104] EXT4-fs (loop4): too many log groups per flexible block group [ 111.566681][T10104] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 111.573710][T10104] EXT4-fs (loop4): mount failed [ 111.782437][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2946'. [ 111.816735][T10134] netlink: 'syz.1.2947': attribute type 10 has an invalid length. [ 111.824922][T10134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2947'. [ 111.835365][T10134] batman_adv: batadv0: Adding interface: veth1_vlan [ 111.842014][T10134] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.869281][T10134] batman_adv: batadv0: Interface activated: veth1_vlan [ 112.041954][ T1035] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 112.087636][T10161] loop9: detected capacity change from 0 to 7 [ 112.093965][T10161] buffer_io_error: 4 callbacks suppressed [ 112.093978][T10161] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.107812][T10161] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.115857][T10161] loop9: unable to read partition table [ 112.121543][T10161] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 112.121543][T10161] ) failed (rc=-5) [ 112.611025][T10190] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2973'. [ 112.680813][T10196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10196 comm=syz.0.2976 [ 113.334114][T10275] ref_ctr_offset mismatch. inode: 0xcb8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 114.072451][ T3406] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 114.476749][T10364] loop4: detected capacity change from 0 to 1024 [ 114.489666][T10364] EXT4-fs: Ignoring removed orlov option [ 114.499559][T10364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.748174][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.766471][T10387] loop2: detected capacity change from 0 to 164 [ 114.773770][T10387] Unable to read rock-ridge attributes [ 114.786379][T10387] Unable to read rock-ridge attributes [ 114.793559][T10387] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 114.877204][T10402] loop2: detected capacity change from 0 to 1024 [ 114.884604][T10402] EXT4-fs: Ignoring removed bh option [ 114.899699][T10402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.905167][T10404] syzkaller0: refused to change device tx_queue_len [ 114.928599][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.000787][T10410] vhci_hcd: invalid port number 96 [ 115.006086][T10410] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 115.383127][T10460] loop2: detected capacity change from 0 to 512 [ 115.420527][T10460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.436407][T10460] ext4 filesystem being mounted at /619/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.486300][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.557047][T10478] loop2: detected capacity change from 0 to 8192 [ 115.811037][T10500] hub 8-0:1.0: USB hub found [ 115.822753][T10500] hub 8-0:1.0: 8 ports detected [ 116.037012][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 116.037050][ T29] audit: type=1400 audit(2000000005.920:3647): avc: denied { mount } for pid=10524 comm="syz.4.3118" name="/" dev="hugetlbfs" ino=28230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 116.089530][ T29] audit: type=1326 audit(2000000005.920:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.113298][ T29] audit: type=1326 audit(2000000005.930:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.137532][ T29] audit: type=1326 audit(2000000005.930:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.161099][ T29] audit: type=1326 audit(2000000005.930:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.184815][ T29] audit: type=1326 audit(2000000005.930:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.208729][ T29] audit: type=1326 audit(2000000005.930:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.232793][ T29] audit: type=1326 audit(2000000005.930:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.256754][ T29] audit: type=1326 audit(2000000005.930:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.280370][ T29] audit: type=1326 audit(2000000005.930:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.1.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706d29eec9 code=0x7ffc0000 [ 116.433795][T10541] loop4: detected capacity change from 0 to 128 [ 116.537541][T10544] tipc: Can't bind to reserved service type 2 [ 116.727045][T10567] loop0: detected capacity change from 0 to 1024 [ 116.734832][T10567] EXT4-fs: Ignoring removed bh option [ 116.750744][T10567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.788544][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.801012][T10575] vhci_hcd: invalid port number 96 [ 116.806238][T10575] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 116.874814][T10584] loop2: detected capacity change from 0 to 1024 [ 116.884447][T10584] EXT4-fs: Ignoring removed orlov option [ 116.898512][T10584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.056202][T10591] loop9: detected capacity change from 0 to 7 [ 117.075309][T10591] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.087367][T10591] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.095293][T10591] loop9: unable to read partition table [ 117.126964][T10591] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 117.126964][T10591] ) failed (rc=-5) [ 117.231945][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.263430][T10608] __nla_validate_parse: 1 callbacks suppressed [ 117.263450][T10608] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3154'. [ 117.396467][T10624] loop1: detected capacity change from 0 to 1024 [ 117.403233][T10624] EXT4-fs: Ignoring removed orlov option [ 117.416898][T10624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.664351][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.680861][T10639] hub 8-0:1.0: USB hub found [ 117.685904][T10639] hub 8-0:1.0: 8 ports detected [ 118.049961][T10671] loop3: detected capacity change from 0 to 1024 [ 118.069623][T10671] EXT4-fs: Ignoring removed orlov option [ 118.087764][T10671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.292524][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 118.391361][T10698] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3194'. [ 118.437285][T10702] loop9: detected capacity change from 0 to 7 [ 118.454031][T10702] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.476290][T10702] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.484177][T10702] loop9: unable to read partition table [ 118.500047][T10702] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 118.500047][T10702] ) failed (rc=-5) [ 118.562777][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.832269][T10730] macvtap0: refused to change device tx_queue_len [ 118.906389][T10734] loop2: detected capacity change from 0 to 512 [ 119.009413][T10734] EXT4-fs (loop2): too many log groups per flexible block group [ 119.017237][T10734] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 119.036804][T10734] EXT4-fs (loop2): mount failed [ 119.078085][T10748] loop0: detected capacity change from 0 to 1024 [ 119.085265][T10748] EXT4-fs: Ignoring removed orlov option [ 119.114854][T10748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.159115][T10757] hub 8-0:1.0: USB hub found [ 119.173874][T10757] hub 8-0:1.0: 8 ports detected [ 119.239787][T10772] loop2: detected capacity change from 0 to 128 [ 119.309352][T10776] hub 8-0:1.0: USB hub found [ 119.328757][T10776] hub 8-0:1.0: 8 ports detected [ 119.488494][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.666859][T10796] vhci_hcd: invalid port number 96 [ 119.672260][T10796] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 119.695173][T10800] loop2: detected capacity change from 0 to 128 [ 119.833225][T10807] loop4: detected capacity change from 0 to 1024 [ 119.840149][T10807] EXT4-fs: Ignoring removed bh option [ 119.845769][T10807] EXT4-fs: inline encryption not supported [ 119.852168][T10807] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.863753][T10807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 119.879952][T10807] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3247: lblock 2 mapped to illegal pblock 2 (length 1) [ 119.896265][T10807] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3247: lblock 0 mapped to illegal pblock 48 (length 1) [ 119.910716][T10807] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3247: Failed to acquire dquot type 0 [ 119.931240][T10807] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 119.953719][T10807] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3247: mark_inode_dirty error [ 119.965465][T10807] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 119.978174][T10807] EXT4-fs (loop4): 1 orphan inode deleted [ 119.984792][T10807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.000482][ T291] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.018337][ T291] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 120.051849][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.061482][ T3309] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 120.077295][ T3309] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.088438][ T3309] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 120.107095][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3255'. [ 120.182554][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 120.191948][T10843] netlink: 'syz.3.3256': attribute type 18 has an invalid length. [ 120.197747][T10847] loop1: detected capacity change from 0 to 512 [ 120.207215][T10847] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 120.216282][T10847] EXT4-fs (loop1): invalid journal inode [ 120.222531][T10847] EXT4-fs (loop1): can't get journal size [ 120.230158][T10847] EXT4-fs (loop1): 1 truncate cleaned up [ 120.238406][T10847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.277615][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.407433][T10869] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3271'. [ 120.804305][T10902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.811792][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 120.819153][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 120.848469][T10906] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3286'. [ 120.932945][T10916] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 121.063980][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 121.063999][ T29] audit: type=1326 audit(2000000000.680:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.3.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 121.097253][ T29] audit: type=1326 audit(2000000000.680:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.3.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 121.121277][ T29] audit: type=1400 audit(2000000000.680:3914): avc: denied { create } for pid=10933 comm="syz.3.3303" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.142452][ T29] audit: type=1326 audit(2000000000.680:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.3.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 121.166443][ T29] audit: type=1326 audit(2000000000.680:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.3.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 121.190314][ T29] audit: type=1326 audit(2000000000.680:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.3.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 121.214652][ T29] audit: type=1400 audit(2000000000.690:3918): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=3468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.237830][ T29] audit: type=1326 audit(2000000000.790:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz.0.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 121.256716][T10938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3304'. [ 121.261496][ T29] audit: type=1326 audit(2000000000.790:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz.0.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 121.324329][ T29] audit: type=1400 audit(2000000000.940:3921): avc: denied { setopt } for pid=10942 comm="syz.4.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.414999][T10957] loop0: detected capacity change from 0 to 512 [ 121.426796][T10957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.444218][T10957] EXT4-fs (loop0): 1 truncate cleaned up [ 121.450517][T10957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.516085][T10967] random: crng reseeded on system resumption [ 121.550884][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.676713][T10991] IPVS: stopping backup sync thread 10994 ... [ 121.677048][T10994] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 121.733361][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3335'. [ 121.991248][T11032] SELinux: security policydb version 17 (MLS) not backwards compatible [ 122.015170][T11032] SELinux: failed to load policy [ 122.050697][T11035] loop0: detected capacity change from 0 to 1024 [ 122.078423][T11035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.127638][T11035] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3352: Allocating blocks 449-513 which overlap fs metadata [ 122.181294][T11045] EXT4-fs (loop0): pa ffff8881076e9930: logic 48, phys. 177, len 21 [ 122.189449][T11045] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 122.429579][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.469738][T11053] IPVS: stopping master sync thread 11054 ... [ 122.483468][T11054] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 122.601198][T11059] random: crng reseeded on system resumption [ 122.774966][T11065] netlink: 'syz.4.3365': attribute type 10 has an invalid length. [ 122.788019][T11067] bond0: entered promiscuous mode [ 122.793111][T11067] bond_slave_0: entered promiscuous mode [ 122.799144][T11067] bond_slave_1: entered promiscuous mode [ 122.822952][T11067] dummy0: entered promiscuous mode [ 122.846011][T11067] batadv0: entered promiscuous mode [ 122.852225][T11067] hsr1: entered allmulticast mode [ 122.853601][T11076] netlink: 'syz.4.3365': attribute type 10 has an invalid length. [ 122.857452][T11067] bond0: entered allmulticast mode [ 122.870452][T11067] bond_slave_0: entered allmulticast mode [ 122.876387][T11067] bond_slave_1: entered allmulticast mode [ 122.883597][T11067] dummy0: entered allmulticast mode [ 122.889128][T11067] batadv0: entered allmulticast mode [ 122.900051][T11067] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 122.913074][T11067] bond0: left promiscuous mode [ 122.917947][T11067] bond_slave_0: left promiscuous mode [ 122.923487][T11067] bond_slave_1: left promiscuous mode [ 122.930061][T11067] dummy0: left promiscuous mode [ 122.936495][T11067] batadv0: left promiscuous mode [ 122.959730][T11065] team0: Port device dummy0 added [ 122.961748][T11085] loop0: detected capacity change from 0 to 128 [ 122.985968][T11076] team0: Port device dummy0 removed [ 122.994233][T11076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.032760][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 123.111873][T11104] loop3: detected capacity change from 0 to 512 [ 123.131972][T11100] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 123.139923][T11100] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3379'. [ 123.156510][T11104] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.194968][T11104] EXT4-fs (loop3): mount failed [ 123.216241][T11121] tipc: New replicast peer: 255.255.255.255 [ 123.222455][T11121] tipc: Enabled bearer , priority 10 [ 123.509298][T11156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11156 comm=syz.0.3400 [ 123.537719][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3400'. [ 123.628125][T11158] SELinux: failed to load policy [ 123.704062][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.713085][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.735109][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.794759][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.803768][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.818728][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.867900][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 123.950841][T11202] loop0: detected capacity change from 0 to 1024 [ 123.981852][T11202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.039048][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.188912][T11242] loop0: detected capacity change from 0 to 512 [ 124.201400][T11242] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.209740][T11242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.232221][T11242] EXT4-fs (loop0): 1 truncate cleaned up [ 124.238762][T11242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.528172][T11262] loop4: detected capacity change from 0 to 128 [ 124.650734][T11272] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 124.659738][T11272] SELinux: failed to load policy [ 124.785459][ T5519] bio_check_eod: 18 callbacks suppressed [ 124.785476][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.785476][ T5519] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 124.806338][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.806338][ T5519] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 124.835142][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.835142][ T5519] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 124.848758][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.848758][ T5519] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 124.874124][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.874124][ T5519] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 124.911349][T11283] infiniband syz!: set active [ 124.916294][T11283] infiniband syz!: added team_slave_0 [ 124.922313][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.922313][ T5519] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 124.939107][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.939107][ T5519] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 124.960260][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.960260][ T5519] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 124.975103][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.975103][ T5519] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 124.990256][ T5519] kworker/u8:22: attempt to access beyond end of device [ 124.990256][ T5519] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 125.002459][T11283] RDS/IB: syz!: added [ 125.035348][T11283] smc: adding ib device syz! with port count 1 [ 125.048268][T11283] smc: ib device syz! port 1 has pnetid [ 125.071347][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.279315][T11290] loop0: detected capacity change from 0 to 512 [ 125.333518][T11290] EXT4-fs (loop0): too many log groups per flexible block group [ 125.341514][T11290] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 125.475279][T11299] loop2: detected capacity change from 0 to 8192 [ 125.490272][T11290] EXT4-fs (loop0): mount failed [ 125.496473][T11299] loop2: p1 p2[DM] p4 [ 125.500591][T11299] loop2: p1 size 196608 extends beyond EOD, truncated [ 125.508376][T11299] loop2: p2 start 4292936063 is beyond EOD, truncated [ 125.515281][T11299] loop2: p4 size 50331648 extends beyond EOD, truncated [ 125.793251][T11338] loop1: detected capacity change from 0 to 164 [ 125.810272][T11340] loop2: detected capacity change from 0 to 512 [ 125.817169][T11340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.824625][T11340] EXT4-fs (loop2): filesystem is read-only [ 125.833492][T11340] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 125.845397][T11342] netlink: 'syz.0.3472': attribute type 12 has an invalid length. [ 125.854248][T11340] EXT4-fs (loop2): filesystem is read-only [ 125.858687][T11342] netlink: 'syz.0.3472': attribute type 12 has an invalid length. [ 125.860598][T11340] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.868595][ T5511] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.884942][ T5511] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.893335][ T5511] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.895606][T11340] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.3471: iget: bad i_size value: 648518346341360424 [ 125.910367][ T5511] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.925531][T11340] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3471: couldn't read orphan inode 16 (err -117) [ 125.943677][T11340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.003842][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.096621][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 126.096658][ T29] audit: type=1400 audit(2000000005.720:4043): avc: denied { relabelto } for pid=11353 comm="syz.2.3477" name="file0" dev="tmpfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.129646][ T29] audit: type=1400 audit(2000000005.720:4044): avc: denied { associate } for pid=11353 comm="syz.2.3477" name="file0" dev="tmpfs" ino=3550 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 126.160814][ T29] audit: type=1326 audit(2000000005.720:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.184869][ T29] audit: type=1326 audit(2000000005.720:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.208898][ T29] audit: type=1326 audit(2000000005.720:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.232664][ T29] audit: type=1326 audit(2000000005.720:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.256397][ T29] audit: type=1326 audit(2000000005.720:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.280075][ T29] audit: type=1326 audit(2000000005.720:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.303762][ T29] audit: type=1326 audit(2000000005.720:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.327295][ T29] audit: type=1326 audit(2000000005.720:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.0.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5e8beec9 code=0x7ffc0000 [ 126.380516][T11358] bond0: entered promiscuous mode [ 126.385778][T11358] bond_slave_0: entered promiscuous mode [ 126.391596][T11358] bond_slave_1: entered promiscuous mode [ 126.398046][T11358] dummy0: entered promiscuous mode [ 126.405753][T11358] batadv0: entered promiscuous mode [ 126.411787][T11358] hsr1: entered allmulticast mode [ 126.416991][T11358] bond0: entered allmulticast mode [ 126.422296][T11358] bond_slave_0: entered allmulticast mode [ 126.428123][T11358] bond_slave_1: entered allmulticast mode [ 126.434072][T11358] dummy0: entered allmulticast mode [ 126.439583][T11358] batadv0: entered allmulticast mode [ 126.445416][T11358] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 126.456581][T11358] bond0: left promiscuous mode [ 126.461403][T11358] bond_slave_0: left promiscuous mode [ 126.466940][T11358] bond_slave_1: left promiscuous mode [ 126.475728][T11358] dummy0: left promiscuous mode [ 126.482028][T11358] batadv0: left promiscuous mode [ 126.644462][T11386] loop3: detected capacity change from 0 to 128 [ 126.665626][T11386] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.702151][T11386] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.796324][ T5511] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.898532][T11375] chnl_net:caif_netlink_parms(): no params data found [ 127.040208][T11375] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.047713][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.096421][T11375] bridge_slave_0: entered allmulticast mode [ 127.107193][T11375] bridge_slave_0: entered promiscuous mode [ 127.127233][T11375] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.134452][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.149155][T11375] bridge_slave_1: entered allmulticast mode [ 127.156523][T11375] bridge_slave_1: entered promiscuous mode [ 127.201450][T11375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.213101][T11375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.307673][T11375] team0: Port device team_slave_0 added [ 127.314131][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.319050][T11375] team0: Port device team_slave_1 added [ 127.346008][T11438] loop3: detected capacity change from 0 to 512 [ 127.353639][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.365204][T11438] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.375239][T11375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.382224][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.384996][T11438] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #11: block 1728053262: comm syz.3.3506: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 127.408456][T11375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.436085][T11375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.443107][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.469302][T11375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.486553][T11438] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.501493][T11438] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3506: corrupted inode contents [ 127.514606][T11438] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.3506: mark_inode_dirty error [ 127.528605][T11438] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3506: corrupted inode contents [ 127.541127][T11438] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.3506: mark_inode_dirty error [ 127.559337][T11438] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.3506: mark inode dirty (error -117) [ 127.572236][T11438] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 127.584710][T11375] hsr_slave_0: entered promiscuous mode [ 127.591655][T11375] hsr_slave_1: entered promiscuous mode [ 127.597815][T11375] debugfs: 'hsr0' already exists in 'hsr' [ 127.603572][T11375] Cannot create hsr debugfs directory [ 127.610625][T11438] EXT4-fs (loop3): 1 orphan inode deleted [ 127.616894][T11438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.635681][T11443] loop2: detected capacity change from 0 to 1024 [ 127.643481][T11443] EXT4-fs: Ignoring removed orlov option [ 127.649519][T11443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.674453][ T36] hid_parser_main: 85 callbacks suppressed [ 127.674476][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.694288][T11443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.699216][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.708069][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.737453][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.793762][T11375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.802968][T11375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.812086][T11375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.821301][T11375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.863850][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.878558][T11375] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.888822][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.896006][ T5514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.907385][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.914549][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.986946][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.032889][T11470] loop3: detected capacity change from 0 to 1024 [ 128.053701][T11468] loop2: detected capacity change from 0 to 4096 [ 128.061312][T11470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.063955][T11468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.078094][T11470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.082472][T11468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.138574][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.228261][T11375] veth0_vlan: entered promiscuous mode [ 128.236762][T11375] veth1_vlan: entered promiscuous mode [ 128.267834][T11375] veth0_macvtap: entered promiscuous mode [ 128.290903][T11497] __nla_validate_parse: 26 callbacks suppressed [ 128.290922][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.295467][T11375] veth1_macvtap: entered promiscuous mode [ 128.297336][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.314800][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.331045][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.339712][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.355199][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.369922][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.379064][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.395467][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.412367][ T5514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.442269][ T5514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.456256][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.465474][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.467278][ T5514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.497420][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 128.515099][ T5514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.532780][T11512] netlink: 'syz.5.3484': attribute type 10 has an invalid length. [ 128.571997][T11512] team0: Port device dummy0 added [ 128.580964][T11512] netlink: 'syz.5.3484': attribute type 10 has an invalid length. [ 128.592830][T11512] team0: Port device dummy0 removed [ 128.600647][T11512] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.784597][T11540] loop3: detected capacity change from 0 to 512 [ 128.792475][T11540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.795226][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3536'. [ 128.810065][T11540] EXT4-fs (loop3): filesystem is read-only [ 128.816495][T11538] SELinux: ebitmap: truncated map [ 128.822708][T11538] SELinux: failed to load policy [ 128.827982][T11540] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 128.842586][T11540] EXT4-fs (loop3): filesystem is read-only [ 128.848664][T11540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.863356][T11540] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #16: comm syz.3.3545: iget: bad i_size value: 648518346341360424 [ 128.879744][T11540] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3545: couldn't read orphan inode 16 (err -117) [ 128.970815][T11559] netlink: 'syz.0.3540': attribute type 10 has an invalid length. [ 129.016201][T11559] bond0: (slave dummy0): Releasing backup interface [ 129.030999][T11557] SELinux: failed to load policy [ 129.033847][T11559] dummy0: left allmulticast mode [ 129.044857][T11559] team0: Port device dummy0 added [ 129.061698][T11563] netlink: 'syz.0.3540': attribute type 10 has an invalid length. [ 129.128619][T11563] team0: Port device dummy0 removed [ 129.146154][T11563] dummy0: entered allmulticast mode [ 129.152558][T11563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.261720][T11580] SELinux: ebitmap: truncated map [ 129.270419][T11580] SELinux: failed to load policy [ 129.280116][T11584] loop3: detected capacity change from 0 to 128 [ 129.370880][T11596] loop5: detected capacity change from 0 to 512 [ 129.377959][T11596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.395523][T11596] EXT4-fs (loop5): filesystem is read-only [ 129.402057][T11596] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 129.414808][T11596] EXT4-fs (loop5): filesystem is read-only [ 129.420785][T11596] EXT4-fs (loop5): orphan cleanup on readonly fs [ 129.439762][T11596] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.3556: iget: bad i_size value: 648518346341360424 [ 129.476137][T11596] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3556: couldn't read orphan inode 16 (err -117) [ 129.554970][T11613] syzkaller1: entered promiscuous mode [ 129.560647][T11613] syzkaller1: entered allmulticast mode [ 129.691230][T11626] SELinux: failed to load policy [ 129.828337][T11627] loop3: detected capacity change from 0 to 512 [ 129.842346][T11627] msdos: Bad value for 'errors' [ 129.945559][T11645] vlan2: entered allmulticast mode [ 130.003552][T11649] bridge0: port 3(syz_tun) entered blocking state [ 130.010150][T11649] bridge0: port 3(syz_tun) entered disabled state [ 130.026828][T11649] syz_tun: entered allmulticast mode [ 130.033188][T11649] syz_tun: entered promiscuous mode [ 130.044287][T11649] bridge0: port 3(syz_tun) entered blocking state [ 130.050813][T11649] bridge0: port 3(syz_tun) entered forwarding state [ 130.144542][T11660] loop2: detected capacity change from 0 to 512 [ 130.194516][T11672] rdma_op ffff88811b6bf180 conn xmit_rdma 0000000000000000 [ 130.209349][T11660] EXT4-fs (loop2): too many log groups per flexible block group [ 130.217189][T11660] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 130.234900][T11660] EXT4-fs (loop2): mount failed [ 130.271579][T11679] loop0: detected capacity change from 0 to 1024 [ 130.304188][T11679] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.315190][T11679] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.329380][T11679] JBD2: no valid journal superblock found [ 130.335334][T11679] EXT4-fs (loop0): Could not load journal inode [ 130.351405][T11679] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 130.447333][T11712] loop3: detected capacity change from 0 to 164 [ 130.470657][T11714] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 130.488060][T11712] bio_check_eod: 102 callbacks suppressed [ 130.488075][T11712] syz.3.3607: attempt to access beyond end of device [ 130.488075][T11712] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 130.512453][T11712] syz.3.3607: attempt to access beyond end of device [ 130.512453][T11712] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 130.570245][T11726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11726 comm=syz.3.3613 [ 130.613482][T11734] loop9: detected capacity change from 0 to 7 [ 130.619836][T11734] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.628541][T11734] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.636583][T11734] loop9: unable to read partition table [ 130.642464][T11734] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 130.642464][T11734] ) failed (rc=-5) [ 130.719055][T11743] netlink: 'syz.3.3622': attribute type 39 has an invalid length. [ 130.766767][T11755] loop4: detected capacity change from 0 to 512 [ 130.778076][T11755] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 130.793258][T11755] EXT4-fs (loop4): mount failed [ 130.794813][T11759] sch_fq: defrate 4294967295 ignored. [ 130.817224][T11755] cgroup: Unknown subsys name 'cpuset' [ 130.825590][T11755] loop4: detected capacity change from 0 to 128 [ 131.056543][T11799] loop3: detected capacity change from 0 to 512 [ 131.063595][T11799] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 131.073474][T11799] EXT4-fs (loop3): invalid journal inode [ 131.079325][T11799] EXT4-fs (loop3): can't get journal size [ 131.094218][T11799] EXT4-fs (loop3): 1 truncate cleaned up [ 131.105613][T11799] EXT4-fs mount: 4 callbacks suppressed [ 131.105630][T11799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.192113][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.238426][T11815] SELinux: failed to load policy [ 131.267916][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 131.267934][ T29] audit: type=1400 audit(2000000010.890:4202): avc: denied { mount } for pid=11821 comm="syz.3.3654" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.347133][T11834] serio: Serial port ttyS3 [ 131.436539][T11842] wireguard0: entered promiscuous mode [ 131.442326][T11842] wireguard0: entered allmulticast mode [ 131.465869][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.474586][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.554983][T11848] loop5: detected capacity change from 0 to 512 [ 131.562369][ T29] audit: type=1400 audit(2000000011.180:4203): avc: denied { mounton } for pid=11846 comm="gtp" path="/28/bus" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.586510][T11848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.607187][T11848] EXT4-fs (loop5): 1 truncate cleaned up [ 131.613273][T11848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.646250][T11848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.708989][T11859] lo speed is unknown, defaulting to 1000 [ 131.729874][ T29] audit: type=1400 audit(2000000011.340:4204): avc: denied { unmount } for pid=11375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 131.758796][T11859] lo speed is unknown, defaulting to 1000 [ 131.765210][T11859] lo speed is unknown, defaulting to 1000 [ 131.814437][T11867] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.844511][T11859] infiniband sz1: set active [ 131.849412][T11859] infiniband sz1: added lo [ 131.854079][ T23] lo speed is unknown, defaulting to 1000 [ 131.881313][T11859] RDS/IB: sz1: added [ 131.885866][T11859] smc: adding ib device sz1 with port count 1 [ 131.892199][T11859] smc: ib device sz1 port 1 has pnetid [ 131.898416][ T23] lo speed is unknown, defaulting to 1000 [ 131.901916][T11874] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 131.904634][T11859] lo speed is unknown, defaulting to 1000 [ 131.932669][ T5514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.943073][ T5514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.974018][T11859] lo speed is unknown, defaulting to 1000 [ 132.021916][ T5514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.032398][ T5514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.078128][ T29] audit: type=1326 audit(2000000011.700:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.104919][T11859] lo speed is unknown, defaulting to 1000 [ 132.117609][ T29] audit: type=1326 audit(2000000011.700:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.141308][ T29] audit: type=1326 audit(2000000011.700:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.164851][ T29] audit: type=1326 audit(2000000011.700:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.188602][ T29] audit: type=1326 audit(2000000011.700:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.212103][ T29] audit: type=1326 audit(2000000011.700:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.235715][ T29] audit: type=1326 audit(2000000011.700:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603256eec9 code=0x7ffc0000 [ 132.282773][T11889] wireguard0: entered promiscuous mode [ 132.288386][T11889] wireguard0: entered allmulticast mode [ 132.300060][T11859] lo speed is unknown, defaulting to 1000 [ 132.314639][T11893] loop0: detected capacity change from 0 to 512 [ 132.328785][ T5514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.339287][ T5514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.344587][T11893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.360357][T11859] lo speed is unknown, defaulting to 1000 [ 132.367685][T11893] EXT4-fs (loop0): 1 truncate cleaned up [ 132.375700][T11893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.405694][ T5514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.407804][T11893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.416200][ T5514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.441462][T11859] lo speed is unknown, defaulting to 1000 [ 132.523199][T11859] lo speed is unknown, defaulting to 1000 [ 132.570881][T11903] serio: Serial port ptm0 [ 132.602574][ T5514] team0: Port device geneve1 removed [ 132.639127][T11911] random: crng reseeded on system resumption [ 132.657858][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.668992][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.680136][ T5514] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 132.689855][ T5514] bond0 (unregistering): Released all slaves [ 132.747511][ T5514] tipc: Disabling bearer [ 132.752861][ T5514] tipc: Left network mode [ 132.858654][T11928] loop4: detected capacity change from 0 to 1024 [ 132.904472][T11933] syzkaller1: entered promiscuous mode [ 132.910087][T11933] syzkaller1: entered allmulticast mode [ 132.918033][T11879] chnl_net:caif_netlink_parms(): no params data found [ 132.932734][T11928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.950482][ T5514] hsr_slave_0: left promiscuous mode [ 132.965327][ T5514] hsr_slave_1: left promiscuous mode [ 132.971055][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.978510][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.995201][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.002630][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.012404][T11928] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3700: Allocating blocks 449-513 which overlap fs metadata [ 133.027390][T11941] loop3: detected capacity change from 0 to 8192 [ 133.034471][ T5514] veth1_macvtap: left promiscuous mode [ 133.034650][T11942] EXT4-fs (loop4): pa ffff8881076e9a10: logic 48, phys. 177, len 21 [ 133.041788][ T5514] veth0_macvtap: left promiscuous mode [ 133.048211][T11942] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 133.053839][ T5514] veth1_vlan: left promiscuous mode [ 133.068997][ T5514] veth0_vlan: left promiscuous mode [ 133.107513][T11941] loop3: p1 p2[DM] p4 [ 133.111813][T11941] loop3: p1 size 196608 extends beyond EOD, truncated [ 133.127051][T11941] loop3: p2 start 4292936063 is beyond EOD, truncated [ 133.133985][T11941] loop3: p4 size 50331648 extends beyond EOD, truncated [ 133.146818][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.249128][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 133.265457][ T5514] team0 (unregistering): Port device team_slave_0 removed [ 133.318580][T11964] __nla_validate_parse: 22 callbacks suppressed [ 133.318595][T11964] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3712'. [ 133.373588][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.380854][T11879] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.388118][T11879] bridge_slave_0: entered allmulticast mode [ 133.394877][T11879] bridge_slave_0: entered promiscuous mode [ 133.402125][T11879] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.409364][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.416823][T11879] bridge_slave_1: entered allmulticast mode [ 133.423335][T11879] bridge_slave_1: entered promiscuous mode [ 133.457706][T11879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.468393][T11879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.490369][T11879] team0: Port device team_slave_0 added [ 133.496938][T11879] team0: Port device team_slave_1 added [ 133.515368][T11879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.522400][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.533143][T11976] loop4: detected capacity change from 0 to 2048 [ 133.548633][T11879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.566779][T11879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.573788][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.599826][T11879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.636160][T11976] Alternate GPT is invalid, using primary GPT. [ 133.642465][T11976] loop4: p1 p2 p3 [ 133.651870][T11879] hsr_slave_0: entered promiscuous mode [ 133.667196][T11879] hsr_slave_1: entered promiscuous mode [ 133.696102][T11879] debugfs: 'hsr0' already exists in 'hsr' [ 133.701905][T11879] Cannot create hsr debugfs directory [ 133.714267][T11996] hub 9-0:1.0: USB hub found [ 133.721823][ T5514] IPVS: stop unused estimator thread 0... [ 133.729017][T11996] hub 9-0:1.0: 8 ports detected [ 133.737557][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'. [ 133.750896][T12000] loop5: detected capacity change from 0 to 128 [ 133.844271][T12011] loop0: detected capacity change from 0 to 512 [ 133.864686][T12011] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.881358][T12011] EXT4-fs (loop0): mount failed [ 133.969141][T12027] bridge: RTM_NEWNEIGH with invalid ether address [ 134.205611][ T5511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.248678][ T5511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.298247][ T5511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.339078][ T5511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.361742][T12032] lo speed is unknown, defaulting to 1000 [ 134.470916][ T5511] team0: Port device geneve1 removed [ 134.507609][ T5511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.518448][ T5511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.528387][ T5511] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 134.537624][ T5511] bond0 (unregistering): Released all slaves [ 134.567342][T12032] chnl_net:caif_netlink_parms(): no params data found [ 134.588362][ T5511] tipc: Disabling bearer [ 134.593707][ T5511] tipc: Disabling bearer [ 134.598903][ T5511] tipc: Left network mode [ 134.627303][T12032] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.634414][T12032] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.643691][T12032] bridge_slave_0: entered allmulticast mode [ 134.650535][T12032] bridge_slave_0: entered promiscuous mode [ 134.657907][T12032] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.665177][T12032] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.672359][T12032] bridge_slave_1: entered allmulticast mode [ 134.672915][T12021] netlink: 'syz.0.3734': attribute type 1 has an invalid length. [ 134.680342][T12032] bridge_slave_1: entered promiscuous mode [ 134.686408][T12021] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3734'. [ 134.705416][ T5511] hsr_slave_0: left promiscuous mode [ 134.719031][ T5511] hsr_slave_1: left promiscuous mode [ 134.727192][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.734650][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.743249][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3743'. [ 134.753082][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.760631][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.770623][ T5511] veth1_macvtap: left promiscuous mode [ 134.776275][ T5511] veth0_macvtap: left promiscuous mode [ 134.781939][ T5511] veth1_vlan: left promiscuous mode [ 134.787472][ T5511] veth0_vlan: left promiscuous mode [ 134.863845][T12058] ALSA: seq fatal error: cannot create timer (-22) [ 134.889503][ T5511] team0 (unregistering): Port device team_slave_1 removed [ 134.900555][ T5511] team0 (unregistering): Port device team_slave_0 removed [ 134.912101][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3747'. [ 134.950900][T11879] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.961383][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3745'. [ 134.967538][T12052] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3742'. [ 134.989239][T11879] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.006021][T12032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.017003][T12032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.030222][T11879] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.050003][T11879] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.071865][T12032] team0: Port device team_slave_0 added [ 135.080940][T12032] team0: Port device team_slave_1 added [ 135.113459][T12032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.120506][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.146989][T12032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.181568][T12032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.188700][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.214658][T12032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.249933][T12032] hsr_slave_0: entered promiscuous mode [ 135.267776][T12032] hsr_slave_1: entered promiscuous mode [ 135.274185][T12032] debugfs: 'hsr0' already exists in 'hsr' [ 135.280061][T12032] Cannot create hsr debugfs directory [ 135.292633][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3752'. [ 135.311643][T12086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12086 comm=syz.0.3753 [ 135.324562][T12086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12086 comm=syz.0.3753 [ 135.356767][T11879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.371111][T11879] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.393563][ T2647] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.400665][ T2647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.414405][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.421519][ T5514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.487755][T12032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 135.500923][T12032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 135.510675][T12032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 135.520845][T12032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 135.554028][T11879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.581209][T12032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.598296][T12032] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.617903][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.625057][ T5514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.633999][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.641228][ T5514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.670534][T12032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.739952][T11879] veth0_vlan: entered promiscuous mode [ 135.749276][T11879] veth1_vlan: entered promiscuous mode [ 135.756460][T12032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.777836][T11879] veth0_macvtap: entered promiscuous mode [ 135.785976][T11879] veth1_macvtap: entered promiscuous mode [ 135.798662][T11879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.811603][T11879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.823559][ T5514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.833681][ T5514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.844641][ T5514] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.857617][ T5514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.949906][T12032] veth0_vlan: entered promiscuous mode [ 135.958059][T12032] veth1_vlan: entered promiscuous mode [ 135.979501][T12032] veth0_macvtap: entered promiscuous mode [ 135.998532][T12135] loop6: detected capacity change from 0 to 512 [ 136.007235][T12135] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.007808][T12032] veth1_macvtap: entered promiscuous mode [ 136.028692][T12136] loop3: detected capacity change from 0 to 1024 [ 136.032826][T12032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.044623][T12135] EXT4-fs (loop6): 1 truncate cleaned up [ 136.048658][T12032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.061622][ T2647] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.066493][T12135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.092258][ T2647] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.100111][T12135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.122442][ T2647] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.126372][T12136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.147950][ T5562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.223100][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.288282][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 136.288298][ T29] audit: type=1326 audit(2000000015.910:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.318161][ T29] audit: type=1326 audit(2000000015.910:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.342892][ T29] audit: type=1326 audit(2000000015.920:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.342972][ T29] audit: type=1326 audit(2000000015.920:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.343006][ T29] audit: type=1326 audit(2000000015.940:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.343040][ T29] audit: type=1326 audit(2000000015.940:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.343143][ T29] audit: type=1326 audit(2000000015.940:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.370673][ T29] audit: type=1326 audit(2000000015.960:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.370711][ T29] audit: type=1326 audit(2000000015.960:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.370744][ T29] audit: type=1326 audit(2000000015.990:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12162 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40dcbceec9 code=0x7ffc0000 [ 136.612850][T12179] loop7: detected capacity change from 0 to 512 [ 136.623914][T12179] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 136.639539][T12186] smc: net device bond0 applied user defined pnetid SYZ0 [ 136.648570][T12183] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 136.659457][T12186] smc: net device bond0 erased user defined pnetid SYZ0 [ 136.659462][T12179] EXT4-fs (loop7): 1 truncate cleaned up [ 136.659971][T12179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.705900][T12179] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.734019][T12194] bridge0: entered promiscuous mode [ 136.742517][T12194] bridge0: port 3(macsec1) entered blocking state [ 136.749149][T12194] bridge0: port 3(macsec1) entered disabled state [ 136.787988][T12194] macsec1: entered allmulticast mode [ 136.793351][T12194] bridge0: entered allmulticast mode [ 136.809220][T12194] macsec1: left allmulticast mode [ 136.814316][T12194] bridge0: left allmulticast mode [ 136.827025][T12194] bridge0: left promiscuous mode [ 136.979147][T12218] lo speed is unknown, defaulting to 1000 [ 137.147875][T12231] loop6: detected capacity change from 0 to 512 [ 137.164594][T12231] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.196690][T12231] EXT4-fs (loop6): 1 truncate cleaned up [ 137.203286][T12231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.250855][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.337616][T12256] loop3: detected capacity change from 0 to 512 [ 137.354311][T12256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.371948][T12256] EXT4-fs (loop3): 1 truncate cleaned up [ 137.378463][T12256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.452592][T12263] lo speed is unknown, defaulting to 1000 [ 137.472676][T12268] netlink: 'syz.0.3812': attribute type 5 has an invalid length. [ 137.519713][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.546212][T12272] bridge0: entered promiscuous mode [ 137.551664][T12272] macvtap1: entered allmulticast mode [ 137.557229][T12272] bridge0: entered allmulticast mode [ 137.562941][T12274] loop3: detected capacity change from 0 to 1024 [ 137.564912][T12272] bridge0: port 3(macvtap1) entered blocking state [ 137.576028][T12272] bridge0: port 3(macvtap1) entered disabled state [ 137.585372][T12272] bridge0: left allmulticast mode [ 137.590537][T12272] bridge0: left promiscuous mode [ 137.606132][T12274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.646152][T12274] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3814: Allocating blocks 449-513 which overlap fs metadata [ 137.719152][T12291] loop7: detected capacity change from 0 to 128 [ 137.725703][T12274] EXT4-fs (loop3): pa ffff88810762c930: logic 48, phys. 177, len 21 [ 137.733851][T12274] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 137.786826][T12293] loop5: detected capacity change from 0 to 1024 [ 137.855289][T12293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.894886][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.949900][T11375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.349113][T12328] loop3: detected capacity change from 0 to 128 [ 138.503041][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3843'. [ 138.512156][T12349] netlink: 'syz.5.3843': attribute type 12 has an invalid length. [ 138.524622][ T5513] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.524747][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3843'. [ 138.542674][T12349] netlink: 'syz.5.3843': attribute type 12 has an invalid length. [ 138.546808][ T5513] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.592519][ T5513] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.601490][ T5513] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.613924][T12354] pimreg: entered allmulticast mode [ 138.621447][T12354] pimreg: left allmulticast mode [ 138.919098][T12371] bridge0: entered promiscuous mode [ 138.924515][T12371] macvtap1: entered allmulticast mode [ 138.930036][T12371] bridge0: entered allmulticast mode [ 138.937158][T12371] bridge0: port 3(macvtap1) entered blocking state [ 138.943751][T12371] bridge0: port 3(macvtap1) entered disabled state [ 138.951716][T12371] bridge0: left allmulticast mode [ 138.957004][T12371] bridge0: left promiscuous mode [ 139.038825][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3857'. [ 139.047993][T12384] netlink: 'syz.7.3857': attribute type 12 has an invalid length. [ 139.060527][ T5562] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.060564][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3857'. [ 139.060617][T12384] netlink: 'syz.7.3857': attribute type 12 has an invalid length. [ 139.071266][ T5562] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.096609][ T5562] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.105701][ T5562] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.223134][T12399] netlink: 1902 bytes leftover after parsing attributes in process `syz.0.3865'. [ 139.288895][T12405] lo speed is unknown, defaulting to 1000 [ 139.294776][T12405] lo speed is unknown, defaulting to 1000 [ 139.301722][T12405] lo speed is unknown, defaulting to 1000 [ 139.309279][T12405] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.318642][T12405] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.337991][T12405] lo speed is unknown, defaulting to 1000 [ 139.344550][T12405] lo speed is unknown, defaulting to 1000 [ 139.352763][T12405] lo speed is unknown, defaulting to 1000 [ 139.365722][T12405] lo speed is unknown, defaulting to 1000 [ 139.374242][T12405] lo speed is unknown, defaulting to 1000 [ 139.384379][T12405] lo speed is unknown, defaulting to 1000 [ 139.520875][T12418] SELinux: failed to load policy [ 139.918169][T12487] loop6: detected capacity change from 0 to 512 [ 139.941153][T12487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.968440][T12487] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.002196][T12487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.050203][T12496] loop7: detected capacity change from 0 to 1024 [ 140.089822][T12496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.126468][T12496] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3911: Allocating blocks 497-513 which overlap fs metadata [ 140.171591][T12496] EXT4-fs (loop7): pa ffff88810762c850: logic 256, phys. 369, len 9 [ 140.179740][T12496] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 140.222139][T12496] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 140.241324][T12517] openvswitch: netlink: Message has 6 unknown bytes. [ 140.250070][T12516] loop5: detected capacity change from 0 to 1024 [ 140.261353][T12032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.272877][T12516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.292544][T12516] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.317374][T12519] loop6: detected capacity change from 0 to 1024 [ 140.335284][T12523] 9pnet: Could not find request transport: fd.ø [ 140.348140][T12519] EXT4-fs: inline encryption not supported [ 140.355061][T12516] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3919: bg 0: block 393: padding at end of block bitmap is not set [ 140.371999][T12516] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 140.377437][T12519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.421514][T11375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.446718][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.497348][T12540] SELinux: failed to load policy [ 140.503171][T12543] loop0: detected capacity change from 0 to 1024 [ 140.510897][T12544] capability: warning: `syz.5.3926' uses 32-bit capabilities (legacy support in use) [ 140.515537][T12543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.537757][T12543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.670260][T12562] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3936'. [ 140.712987][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.814357][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3951'. [ 140.949022][T12584] SELinux: failed to load policy [ 141.065706][T12607] syzkaller1: entered promiscuous mode [ 141.071271][T12607] syzkaller1: entered allmulticast mode [ 141.194340][T12622] SELinux: failed to load policy [ 141.240980][T12620] lo speed is unknown, defaulting to 1000 [ 141.298322][T12620] lo speed is unknown, defaulting to 1000 [ 141.338239][T12638] vlan2: entered allmulticast mode [ 141.343430][T12638] bridge_slave_0: entered allmulticast mode [ 141.356375][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 141.356393][ T29] audit: type=1326 audit(2000000020.980:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.7.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449b8eec9 code=0x7ffc0000 [ 141.386331][ T29] audit: type=1326 audit(2000000020.980:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.7.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7449b8eec9 code=0x7ffc0000 [ 141.423600][ T29] audit: type=1326 audit(2000000021.040:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.7.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449b8eec9 code=0x7ffc0000 [ 141.452005][ T29] audit: type=1326 audit(2000000021.070:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.7.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449b8eec9 code=0x7ffc0000 [ 141.509842][ T29] audit: type=1400 audit(2000000021.120:4491): avc: denied { setopt } for pid=12643 comm="syz.0.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.537639][ T29] audit: type=1400 audit(2000000021.160:4492): avc: denied { ioctl } for pid=12646 comm="syz.6.3976" path="socket:[36614]" dev="sockfs" ino=36614 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.625059][ T29] audit: type=1326 audit(2000000021.220:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12653 comm="syz.6.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 141.648744][ T29] audit: type=1326 audit(2000000021.220:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12653 comm="syz.6.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 141.672322][ T29] audit: type=1326 audit(2000000021.220:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12653 comm="syz.6.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 141.695984][ T29] audit: type=1326 audit(2000000021.220:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12653 comm="syz.6.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 141.724347][T12661] loop5: detected capacity change from 0 to 512 [ 141.769871][T12661] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.793204][T12661] EXT4-fs (loop5): mount failed [ 141.820138][T12676] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 141.836157][T12669] IPVS: stopping master sync thread 12676 ... [ 141.853528][T12678] loop5: detected capacity change from 0 to 1024 [ 141.880012][T12678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.909482][T12678] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 141.933791][T12690] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3993'. [ 141.969455][T11375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.040764][T12704] loop5: detected capacity change from 0 to 1024 [ 142.048314][T12704] EXT4-fs: inline encryption not supported [ 142.055166][T12704] EXT4-fs: Ignoring removed nobh option [ 142.060807][T12704] EXT4-fs: Ignoring removed bh option [ 142.074187][T12707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12707 comm=syz.7.4002 [ 142.088358][T12704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.130840][T12704] Trying to write to read-only block-device loop5 [ 142.163398][T11375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.249456][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4011'. [ 142.258572][T12738] netlink: 'syz.0.4011': attribute type 15 has an invalid length. [ 142.266574][T12738] netlink: 'syz.0.4011': attribute type 18 has an invalid length. [ 142.390091][T12748] lo speed is unknown, defaulting to 1000 [ 142.408879][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4026'. [ 142.440850][T12748] lo speed is unknown, defaulting to 1000 [ 142.609192][T12779] loop6: detected capacity change from 0 to 164 [ 142.621277][T12779] syz.6.4032: attempt to access beyond end of device [ 142.621277][T12779] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.635504][T12779] syz.6.4032: attempt to access beyond end of device [ 142.635504][T12779] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.697262][T12768] loop5: detected capacity change from 0 to 512 [ 142.713274][T12768] msdos: Bad value for 'errors' [ 142.884163][T12801] ip6tnl1: entered promiscuous mode [ 142.978888][T12800] SELinux: failed to load policy [ 143.055589][T12805] serio: Serial port ttyS3 [ 143.062566][T12807] loop6: detected capacity change from 0 to 2048 [ 143.103505][T12807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.122094][T12807] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.218112][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.252047][T12829] random: crng reseeded on system resumption [ 143.281843][ T5562] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.291737][ T5562] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.337552][T12821] lo speed is unknown, defaulting to 1000 [ 143.392795][ T5562] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.402645][ T5562] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.430987][T12843] netlink: 'syz.6.4061': attribute type 1 has an invalid length. [ 143.467609][T12843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.478524][T12821] lo speed is unknown, defaulting to 1000 [ 143.485283][ T5562] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.495146][ T5562] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.520452][T12843] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 143.529632][T12843] bond1: (slave batadv1): making interface the new active one [ 143.539535][T12843] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 143.559865][T12843] __nla_validate_parse: 4 callbacks suppressed [ 143.559883][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4061'. [ 143.560565][ T5562] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.584956][ T5562] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.616964][T12843] bond1 (unregistering): (slave batadv1): Releasing active interface [ 143.628349][T12843] bond1 (unregistering): Released all slaves [ 143.723058][T12864] loop7: detected capacity change from 0 to 2048 [ 143.739084][T12864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 143.811598][T12032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 143.845292][ T5562] team0: Port device geneve1 removed [ 143.872608][ T5562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.897538][ T5562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.917866][ T5562] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 143.940276][ T5562] bond0 (unregistering): Released all slaves [ 143.946518][T12878] loop5: detected capacity change from 0 to 8192 [ 143.959253][T12845] lo speed is unknown, defaulting to 1000 [ 143.986900][T12878] loop5: p1 p2[DM] p4 [ 143.991050][T12878] loop5: p1 size 196608 extends beyond EOD, truncated [ 144.011731][T12878] loop5: p2 start 4292936063 is beyond EOD, truncated [ 144.018603][T12878] loop5: p4 size 50331648 extends beyond EOD, truncated [ 144.041162][T12885] hub 9-0:1.0: USB hub found [ 144.050007][T12885] hub 9-0:1.0: 8 ports detected [ 144.062724][T12845] lo speed is unknown, defaulting to 1000 [ 144.208314][ T5562] hsr_slave_0: left promiscuous mode [ 144.215133][ T5562] hsr_slave_1: left promiscuous mode [ 144.227366][ T5562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.234815][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.277403][ T5562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.284951][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.294805][ T5562] veth1_macvtap: left promiscuous mode [ 144.302860][ T5562] veth0_macvtap: left promiscuous mode [ 144.310520][ T5562] veth1_vlan: left promiscuous mode [ 144.318259][ T5562] veth0_vlan: left promiscuous mode [ 144.507406][T12923] SELinux: failed to load policy [ 144.519446][ T5562] team0 (unregistering): Port device team_slave_1 removed [ 144.537134][ T5562] team0 (unregistering): Port device team_slave_0 removed [ 144.603401][T12898] lo speed is unknown, defaulting to 1000 [ 144.609458][ T36] lo speed is unknown, defaulting to 1000 [ 144.615325][ T36] sz1: Port: 1 Link DOWN [ 144.625099][ T36] lo speed is unknown, defaulting to 1000 [ 144.687941][T12845] chnl_net:caif_netlink_parms(): no params data found [ 144.726954][T12933] loop0: detected capacity change from 0 to 1024 [ 144.737134][T12898] lo speed is unknown, defaulting to 1000 [ 144.744823][ T5926] smc: removing ib device syz! [ 144.744953][ T5513] smc: removing ib device sz1 [ 144.798955][T12935] loop6: detected capacity change from 0 to 4096 [ 144.828651][T12933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.843342][T12935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.854389][T12935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.857777][T12933] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4093: Allocating blocks 497-513 which overlap fs metadata [ 144.890765][T12933] EXT4-fs (loop0): pa ffff8881076e9a80: logic 256, phys. 369, len 9 [ 144.898873][T12933] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 144.938166][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.988626][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.995835][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.004822][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.012157][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4096'. [ 145.033177][T12845] bridge_slave_0: entered allmulticast mode [ 145.057037][T12845] bridge_slave_0: entered promiscuous mode [ 145.086541][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.093693][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.116531][T12845] bridge_slave_1: entered allmulticast mode [ 145.124793][T12845] bridge_slave_1: entered promiscuous mode [ 145.183142][T12845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.204304][T12845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.345941][T12845] team0: Port device team_slave_0 added [ 145.353232][T12845] team0: Port device team_slave_1 added [ 145.389803][T12965] SELinux: failed to load policy [ 145.432212][T12845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.439364][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.465670][T12845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.482079][T12845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.489149][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.493248][T12975] ALSA: seq fatal error: cannot create timer (-19) [ 145.515165][T12845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.574013][T12845] hsr_slave_0: entered promiscuous mode [ 145.580335][T12845] hsr_slave_1: entered promiscuous mode [ 145.588418][T12845] debugfs: 'hsr0' already exists in 'hsr' [ 145.594191][T12845] Cannot create hsr debugfs directory [ 145.608675][T12978] bridge: RTM_NEWNEIGH with invalid ether address [ 146.040372][T13012] loop5: detected capacity change from 0 to 2048 [ 146.402897][T12845] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 146.417225][T12845] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 146.428750][T12845] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 146.441066][T12845] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 146.535248][T12845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.574568][T12845] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.616479][ T5513] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.623675][ T5513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.645957][ T5513] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.653213][ T5513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.681197][T13059] lo speed is unknown, defaulting to 1000 [ 146.685425][T12845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.697491][T12845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.801457][T12845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.953818][T12845] veth0_vlan: entered promiscuous mode [ 146.962541][T12845] veth1_vlan: entered promiscuous mode [ 146.979138][T12845] veth0_macvtap: entered promiscuous mode [ 146.986830][T12845] veth1_macvtap: entered promiscuous mode [ 146.998361][T12845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.009732][T12845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.021514][ T5926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.031882][ T5926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.043651][ T5926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.053988][ T5926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.175746][T13097] loop8: detected capacity change from 0 to 1024 [ 147.190594][T13097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.212390][T13097] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.4143: Allocating blocks 497-513 which overlap fs metadata [ 147.227618][T13097] EXT4-fs (loop8): pa ffff88810762c930: logic 256, phys. 369, len 9 [ 147.235710][T13097] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 147.258991][T12845] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.269473][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 147.269493][ T29] audit: type=1400 audit(2000000026.890:4563): avc: denied { read } for pid=13102 comm="syz.0.4144" lport=46582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.319435][T13108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13108 comm=syz.8.4145 [ 147.332340][T13108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13108 comm=syz.8.4145 [ 147.474910][T13119] lo speed is unknown, defaulting to 1000 [ 147.618996][T13126] netlink: 'syz.7.4155': attribute type 10 has an invalid length. [ 147.644065][T13126] team0: Device hsr_slave_0 failed to register rx_handler [ 147.683593][ T29] audit: type=1326 audit(2000000027.300:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.707294][ T29] audit: type=1326 audit(2000000027.300:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.733213][ T29] audit: type=1326 audit(2000000027.350:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.757031][ T29] audit: type=1326 audit(2000000027.350:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.780784][ T29] audit: type=1326 audit(2000000027.350:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.805582][ T29] audit: type=1326 audit(2000000027.420:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.829307][ T29] audit: type=1326 audit(2000000027.430:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.842388][T13138] lo speed is unknown, defaulting to 1000 [ 147.853037][ T29] audit: type=1326 audit(2000000027.430:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 147.932156][ T29] audit: type=1326 audit(2000000027.500:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.6.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cc8ceec9 code=0x7ffc0000 [ 148.292252][T13145] 9pnet: Could not find request transport: fd.ø [ 148.420350][T13154] loop6: detected capacity change from 0 to 1024 [ 148.426903][T13156] lo speed is unknown, defaulting to 1000 [ 148.461695][T13159] loop0: detected capacity change from 0 to 8192 [ 148.489417][T13154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.501868][T13159] loop0: p1 p2[DM] p4 [ 148.506099][T13159] loop0: p1 size 196608 extends beyond EOD, truncated [ 148.513440][T13159] loop0: p2 start 4292936063 is beyond EOD, truncated [ 148.520388][T13159] loop0: p4 size 50331648 extends beyond EOD, truncated [ 148.552205][T13154] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4167: Allocating blocks 497-513 which overlap fs metadata [ 148.576588][T13154] EXT4-fs (loop6): pa ffff8881076e99a0: logic 256, phys. 369, len 9 [ 148.584653][T13154] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 148.624830][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.693938][T13183] loop5: detected capacity change from 0 to 128 [ 148.834849][T13195] loop7: detected capacity change from 0 to 512 [ 148.851696][T13195] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.868137][T13195] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 148.897163][T13195] EXT4-fs (loop7): 1 truncate cleaned up [ 148.909358][T13195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.028315][T13205] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 149.038494][T13205] SELinux: failed to load policy [ 149.071393][T13208] siw: device registration error -23 [ 149.101211][T13202] SELinux: failed to load policy [ 149.262249][T13218] loop6: detected capacity change from 0 to 1024 [ 149.277918][T13218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.299124][T13218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.519787][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.565970][T13228] rdma_op ffff88811ca99580 conn xmit_rdma 0000000000000000 [ 149.601327][T13232] loop5: detected capacity change from 0 to 164 [ 149.618073][T13232] syz.5.4200: attempt to access beyond end of device [ 149.618073][T13232] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 149.632254][T13232] syz.5.4200: attempt to access beyond end of device [ 149.632254][T13232] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.634124][T13230] 9pnet: Could not find request transport: fd.ø [ 149.730759][T13238] serio: Serial port ttyS3 [ 149.878337][T12032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.947396][T13244] loop7: detected capacity change from 0 to 8192 [ 149.960846][T13248] serio: Serial port ttyS3 [ 149.997143][T13244] loop7: p1 p2[DM] p4 [ 150.001506][T13244] loop7: p1 size 196608 extends beyond EOD, truncated [ 150.021389][T13257] netlink: 'syz.0.4211': attribute type 1 has an invalid length. [ 150.025781][T13244] loop7: p2 start 4292936063 is beyond EOD, truncated [ 150.036263][T13244] loop7: p4 size 50331648 extends beyond EOD, truncated [ 150.065449][T13257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.112180][T13257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.121998][T13262] loop8: detected capacity change from 0 to 164 [ 150.129048][T13257] bond2: (slave batadv1): making interface the new active one [ 150.146234][T13257] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 150.162052][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4211'. [ 150.174295][T13257] bond2 (unregistering): (slave batadv1): Releasing active interface [ 150.193466][T13262] syz.8.4213: attempt to access beyond end of device [ 150.193466][T13262] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.195903][T13257] bond2 (unregistering): Released all slaves [ 150.213715][T13264] siw: device registration error -23 [ 150.219388][T13260] loop6: detected capacity change from 0 to 8192 [ 150.230371][T13262] syz.8.4213: attempt to access beyond end of device [ 150.230371][T13262] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.265536][T13260] loop6: p1 p2[DM] p4 [ 150.269735][T13260] loop6: p1 size 196608 extends beyond EOD, truncated [ 150.283032][T13260] loop6: p2 start 4292936063 is beyond EOD, truncated [ 150.290016][T13260] loop6: p4 size 50331648 extends beyond EOD, truncated [ 150.295312][T13269] loop7: detected capacity change from 0 to 1024 [ 150.307852][T13270] loop8: detected capacity change from 0 to 512 [ 150.317650][T13269] EXT4-fs: Ignoring removed orlov option [ 150.338217][T13269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.339695][T13270] EXT4-fs (loop8): too many log groups per flexible block group [ 150.358664][T13270] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 150.365601][T13270] EXT4-fs (loop8): mount failed [ 150.395672][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4218'. [ 150.397210][T13280] loop6: detected capacity change from 0 to 1024 [ 150.420322][T13276] loop0: detected capacity change from 0 to 2048 [ 150.430204][T13280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.459411][T13276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.483389][T13280] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 150.500657][T13276] ext4 filesystem being mounted at /869/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.517546][T13289] pimreg: entered allmulticast mode [ 150.525294][T13289] pimreg: left allmulticast mode [ 150.589781][T11879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.685096][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.923331][T12032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.971242][T13306] loop7: detected capacity change from 0 to 164 [ 151.018175][T13306] syz.7.4228: attempt to access beyond end of device [ 151.018175][T13306] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 151.042860][T13308] loop6: detected capacity change from 0 to 512 [ 151.076204][T13308] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.100068][T13308] EXT4-fs (loop6): mount failed [ 151.134445][T13306] syz.7.4228: attempt to access beyond end of device [ 151.134445][T13306] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.163608][T13312] serio: Serial port ttyS3 [ 151.336890][T13327] lo speed is unknown, defaulting to 1000 [ 151.379101][T13333] loop8: detected capacity change from 0 to 1024 [ 151.388255][T13333] EXT4-fs: Ignoring removed orlov option [ 151.388782][T13335] random: crng reseeded on system resumption [ 151.397998][T13333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.593380][T13333] ================================================================== [ 151.601542][T13333] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 151.609574][T13333] [ 151.611929][T13333] write to 0xffff888100792460 of 4 bytes by task 13338 on cpu 0: [ 151.619755][T13333] writeback_single_inode+0x14a/0x3e0 [ 151.625177][T13333] sync_inode_metadata+0x5b/0x90 [ 151.630131][T13333] generic_buffers_fsync_noflush+0xd9/0x120 [ 151.636047][T13333] ext4_sync_file+0x1ab/0x690 [ 151.640730][T13333] vfs_fsync_range+0x10d/0x130 [ 151.645504][T13333] ext4_buffered_write_iter+0x34f/0x3c0 [ 151.651097][T13333] ext4_file_write_iter+0x383/0xf00 [ 151.656312][T13333] iter_file_splice_write+0x663/0xa60 [ 151.661741][T13333] direct_splice_actor+0x153/0x2a0 [ 151.666878][T13333] splice_direct_to_actor+0x30f/0x680 [ 151.672282][T13333] do_splice_direct+0xda/0x150 [ 151.677072][T13333] do_sendfile+0x380/0x650 [ 151.681507][T13333] __x64_sys_sendfile64+0x105/0x150 [ 151.686721][T13333] x64_sys_call+0x2bb0/0x2ff0 [ 151.691418][T13333] do_syscall_64+0xd2/0x200 [ 151.695946][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.701878][T13333] [ 151.704204][T13333] read to 0xffff888100792460 of 4 bytes by task 13333 on cpu 1: [ 151.712009][T13333] vfs_fsync_range+0x9b/0x130 [ 151.716723][T13333] ext4_buffered_write_iter+0x34f/0x3c0 [ 151.722335][T13333] ext4_file_write_iter+0x383/0xf00 [ 151.727561][T13333] iter_file_splice_write+0x663/0xa60 [ 151.732954][T13333] direct_splice_actor+0x153/0x2a0 [ 151.738157][T13333] splice_direct_to_actor+0x30f/0x680 [ 151.743566][T13333] do_splice_direct+0xda/0x150 [ 151.748341][T13333] do_sendfile+0x380/0x650 [ 151.752777][T13333] __x64_sys_sendfile64+0x105/0x150 [ 151.757989][T13333] x64_sys_call+0x2bb0/0x2ff0 [ 151.762674][T13333] do_syscall_64+0xd2/0x200 [ 151.767190][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.773104][T13333] [ 151.775422][T13333] value changed: 0x00000038 -> 0x00000002 [ 151.781136][T13333] [ 151.783455][T13333] Reported by Kernel Concurrency Sanitizer on: [ 151.789613][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.8.4239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.799422][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.809622][T13333] ================================================================== [ 151.858101][T12845] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.921871][ T5514] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.932336][ T5514] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.977681][ T5514] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.988107][ T5514] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.040267][ T5514] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.050633][ T5514] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.118111][ T5514] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.128490][ T5514] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.193704][ T5514] bridge_slave_1: left allmulticast mode [ 152.199572][ T5514] bridge_slave_1: left promiscuous mode [ 152.205269][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.215303][ T5514] bridge_slave_0: left allmulticast mode [ 152.220979][ T5514] bridge_slave_0: left promiscuous mode [ 152.226753][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.318092][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.328350][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.338297][ T5514] bond0 (unregistering): Released all slaves [ 152.400887][ T5514] hsr_slave_0: left promiscuous mode [ 152.408381][ T5514] hsr_slave_1: left promiscuous mode [ 152.414203][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.421625][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.431017][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.438481][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.451218][ T5514] veth1_macvtap: left promiscuous mode [ 152.457170][ T5514] veth0_macvtap: left promiscuous mode [ 152.462692][ T5514] veth1_vlan: left promiscuous mode [ 152.470834][ T5514] veth0_vlan: left promiscuous mode [ 152.542508][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 152.552708][ T5514] team0 (unregistering): Port device team_slave_0 removed