last executing test programs: 34.896494835s ago: executing program 0 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 33.891526876s ago: executing program 0 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x2ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 33.126302588s ago: executing program 0 (id=664): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x101, 0x400, 0xe}, {0xffffff44, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xf4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 32.425909265s ago: executing program 0 (id=678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x87) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, 0x0, 0x0) 32.200749903s ago: executing program 0 (id=682): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.171070985s ago: executing program 0 (id=683): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&-&&\t') r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 32.158433597s ago: executing program 32 (id=683): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&-&&\t') r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 28.856142143s ago: executing program 5 (id=755): symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 27.936059048s ago: executing program 5 (id=760): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r0) 27.504958153s ago: executing program 5 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x20040000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close(r3) 27.490099064s ago: executing program 5 (id=767): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x87) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, 0x0, 0x0) 27.278901192s ago: executing program 5 (id=769): clock_settime(0x6, &(0x7f0000000400)={0x0, 0x989680}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xbb15}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="415bdb95ff256ed8bee756ce95a88900000000000000252dfd4aaadb93030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 26.497314315s ago: executing program 5 (id=781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat$null(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000500", @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e00010077697265677561"], 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r3) 26.496826375s ago: executing program 33 (id=781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat$null(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000500", @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e00010077697265677561"], 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r3) 3.286955204s ago: executing program 6 (id=1221): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x80004, 0x10510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) signalfd4(r0, &(0x7f0000000740)={[0x43]}, 0x8, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 2.685303353s ago: executing program 6 (id=1223): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r0, 0x0, 0x800000009) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 2.251451928s ago: executing program 3 (id=1227): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0'}, 0xb) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.028882655s ago: executing program 6 (id=1228): r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) semget$private(0x0, 0x3, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.612783529s ago: executing program 3 (id=1232): mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 1.086641482s ago: executing program 2 (id=1242): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0xfe, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x0, @empty, @local}}}}}}, 0x0) 1.067343034s ago: executing program 6 (id=1244): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = eventfd2(0x9, 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) io_destroy(r1) 1.032705357s ago: executing program 2 (id=1245): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4003, &(0x7f00000000c0)={[{@errors_remount}]}, 0x2, 0x4e6, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000000)={0x6, 0xff, 0x3, 0xffffffff, 0x2627bc41, 0x10000000ba4, 0x3, 0xfffffffffffffff5}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x593, 0x0, &(0x7f0000000300), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x10000000) 987.54448ms ago: executing program 4 (id=1246): r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 976.751801ms ago: executing program 4 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 960.272652ms ago: executing program 4 (id=1248): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x20000000) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x55) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 920.946416ms ago: executing program 4 (id=1250): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="6402a6c6a113", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 906.632466ms ago: executing program 6 (id=1251): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x64, 0x2, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[r1, r1, r1], &(0x7f0000000340)=[{0x4, 0x4, 0x4, 0xa}, {0x1, 0x5, 0xa, 0xa}, {0x1, 0x2, 0xb, 0x6}, {0x0, 0x1, 0x9, 0x9}], 0x10, 0xe99}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r2, r1}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") 829.567033ms ago: executing program 2 (id=1252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 746.64418ms ago: executing program 6 (id=1253): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 629.319849ms ago: executing program 3 (id=1254): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe12}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 546.230806ms ago: executing program 3 (id=1255): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300001c004000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 451.056584ms ago: executing program 1 (id=1256): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 436.733525ms ago: executing program 2 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 377.16449ms ago: executing program 1 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 376.360609ms ago: executing program 1 (id=1259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 339.020373ms ago: executing program 3 (id=1260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = eventfd2(0x9, 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) io_destroy(r1) 314.683665ms ago: executing program 1 (id=1262): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def", 0x4}], 0x1}}], 0x2, 0x0) 295.140386ms ago: executing program 3 (id=1263): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 159.744987ms ago: executing program 2 (id=1264): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) write(r2, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 91.124813ms ago: executing program 1 (id=1266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) flock(r2, 0x2) dup3(r2, r1, 0x0) 15.770029ms ago: executing program 1 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) 0s ago: executing program 4 (id=1268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x100b28, 0x80, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x1, 0x80, 0x8000000, 0x8000021e}, &(0x7f0000000940)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) kernel console output (not intermixed with test programs): d in network mode [ 42.166287][ T4325] tipc: Node identity d257e47c106b, cluster identity 4711 [ 42.173458][ T4325] tipc: Enabled bearer , priority 0 [ 42.185007][ T4322] tipc: Resetting bearer [ 42.202355][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.215219][ T4329] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 42.231069][ T4331] loop2: detected capacity change from 0 to 512 [ 42.238288][ T4322] tipc: Disabling bearer [ 42.255229][ T4331] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.311: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 42.280014][ T4329] bond1: entered promiscuous mode [ 42.285238][ T4329] bond1: entered allmulticast mode [ 42.293415][ T4329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.300980][ T4331] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.311: Bad quota inode: 3, type: 0 [ 42.333052][ T4329] ip6gretap1: entered promiscuous mode [ 42.338904][ T4329] ip6gretap1: entered allmulticast mode [ 42.350429][ T4331] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 42.355041][ T4329] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 42.376956][ T4331] EXT4-fs (loop2): mount failed [ 42.394493][ T3711] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 42.457604][ T4345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.466493][ T4345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.523971][ T3711] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 42.611463][ T4360] unsupported nla_type 52263 [ 42.847710][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 42.847724][ T29] audit: type=1326 audit(42.825:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 42.876990][ T29] audit: type=1326 audit(42.835:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 42.899755][ T29] audit: type=1326 audit(42.845:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 42.922536][ T29] audit: type=1326 audit(42.855:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 42.945792][ T29] audit: type=1326 audit(42.865:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 42.968624][ T29] audit: type=1326 audit(42.875:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 42.991594][ T29] audit: type=1326 audit(42.885:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 43.014285][ T29] audit: type=1326 audit(42.895:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 43.037500][ T29] audit: type=1326 audit(42.925:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 43.060187][ T29] audit: type=1326 audit(42.925:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4338 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 43.209840][ T4380] loop0: detected capacity change from 0 to 736 [ 43.225502][ T4380] rock: directory entry would overflow storage [ 43.231765][ T4380] rock: sig=0x3b10, size=4, remaining=3 [ 43.243488][ T4380] netlink: 'syz.0.325': attribute type 27 has an invalid length. [ 43.533809][ T4385] syz_tun: entered allmulticast mode [ 43.551483][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.558785][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.577598][ T4392] bridge0: entered allmulticast mode [ 43.588714][ T4395] bridge_slave_1: left allmulticast mode [ 43.594519][ T4395] bridge_slave_1: left promiscuous mode [ 43.600337][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.618157][ T4395] bridge_slave_0: left allmulticast mode [ 43.624283][ T4395] bridge_slave_0: left promiscuous mode [ 43.630094][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.682166][ T4402] loop0: detected capacity change from 0 to 512 [ 43.695078][ T3711] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.705122][ T3711] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.715103][ T3711] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.715842][ T4402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.724959][ T3711] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.749492][ T4406] netlink: 'syz.1.334': attribute type 13 has an invalid length. [ 43.789767][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.798961][ T4406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.868859][ T4415] netlink: 87 bytes leftover after parsing attributes in process `syz.1.338'. [ 43.898191][ T4418] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 43.966118][ T4423] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 44.083477][ T4434] tipc: Failed to remove unknown binding: 66,1,1/0:493635066/493635068 [ 44.104238][ T4434] tipc: Failed to remove unknown binding: 66,1,1/0:493635066/493635068 [ 44.112530][ T4434] tipc: Failed to remove unknown binding: 66,1,1/0:493635066/493635068 [ 44.127241][ T4438] loop2: detected capacity change from 0 to 128 [ 44.134014][ T4438] msdos: Unknown parameter '' [ 44.143049][ T4438] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.348'. [ 44.162419][ T4442] loop1: detected capacity change from 0 to 128 [ 44.172176][ T4442] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 44.180965][ T4442] FAT-fs (loop1): Filesystem has been set read-only [ 44.363885][ T4467] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.373409][ T4466] loop3: detected capacity change from 0 to 2048 [ 44.385572][ T4466] EXT4-fs (loop3): failed to initialize system zone (-117) [ 44.393100][ T4466] EXT4-fs (loop3): mount failed [ 44.418583][ T4467] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.465472][ T4474] tipc: Enabled bearer , priority 0 [ 44.472711][ T4472] tipc: Resetting bearer [ 44.487948][ T4472] tipc: Disabling bearer [ 44.496174][ T4467] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.546657][ T4467] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.626045][ T3703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.653972][ T3703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.663779][ T3703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.672092][ T3703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.920039][ T4494] loop4: detected capacity change from 0 to 1024 [ 44.934247][ T4494] EXT4-fs: inline encryption not supported [ 44.958156][ T4494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.964933][ T4494] EXT4-fs: Ignoring removed i_version option [ 44.975921][ T4501] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.981558][ T4494] EXT4-fs: Ignoring removed bh option [ 45.011892][ T4494] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 45.028946][ T4501] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.078803][ T4507] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 45.093777][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.112985][ T4507] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 45.122229][ T4507] bond0: (slave batadv1): making interface the new active one [ 45.134960][ T4507] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 45.147049][ T4501] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.149045][ T4510] loop4: detected capacity change from 0 to 2048 [ 45.170066][ T4512] loop2: detected capacity change from 0 to 512 [ 45.180001][ T4512] EXT4-fs: Ignoring removed oldalloc option [ 45.190575][ T4510] EXT4-fs (loop4): failed to initialize system zone (-117) [ 45.198169][ T4510] EXT4-fs (loop4): mount failed [ 45.211339][ T4512] EXT4-fs (loop2): 1 truncate cleaned up [ 45.219872][ T4516] netlink: 'syz.3.374': attribute type 30 has an invalid length. [ 45.220185][ T4512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.242142][ T4501] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.294779][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.321251][ T4523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.331946][ T4523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.413432][ T4528] loop3: detected capacity change from 0 to 128 [ 45.423156][ T4528] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.423360][ T4523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.436304][ T4528] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.446052][ T4523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.501304][ T3711] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.517893][ T4523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.528404][ T4523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.597616][ T4523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.607986][ T4523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.680051][ T3703] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.688321][ T3703] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.700707][ T3703] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.709094][ T3703] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.720727][ T3703] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.729039][ T3703] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.740307][ T3703] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.748741][ T3703] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.972875][ T4548] loop2: detected capacity change from 0 to 512 [ 45.986821][ T4548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.083380][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.591412][ T4568] loop2: detected capacity change from 0 to 128 [ 46.615483][ T4568] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.651671][ T4568] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.724888][ T3711] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.170684][ T4580] mmap: syz.4.399 (4580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.560446][ T4588] loop4: detected capacity change from 0 to 512 [ 47.762313][ T4588] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.772352][ T4592] loop3: detected capacity change from 0 to 736 [ 47.779983][ T4588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.791117][ T4592] rock: directory entry would overflow storage [ 47.797366][ T4592] rock: sig=0x3b10, size=4, remaining=3 [ 47.805214][ T4588] EXT4-fs (loop4): 1 truncate cleaned up [ 47.811305][ T4588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.816171][ T4592] netlink: 'syz.3.406': attribute type 27 has an invalid length. [ 47.855529][ T4592] syz_tun: entered allmulticast mode [ 47.862439][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.896440][ T4601] loop3: detected capacity change from 0 to 2048 [ 47.915185][ T4601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.076369][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 48.076387][ T29] audit: type=1400 audit(47.863:1577): avc: denied { map } for pid=4598 comm="syz.3.408" path="/84/file2/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.105863][ T29] audit: type=1400 audit(47.863:1578): avc: denied { write } for pid=4598 comm="syz.3.408" path="/84/file2/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.106490][ T4601] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.145765][ T4601] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.158417][ T4601] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.158417][ T4601] [ 48.168289][ T4601] EXT4-fs (loop3): Total free blocks count 0 [ 48.174326][ T4601] EXT4-fs (loop3): Free/Dirty block details [ 48.180247][ T4601] EXT4-fs (loop3): free_blocks=2415919104 [ 48.185996][ T4615] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 48.186071][ T4601] EXT4-fs (loop3): dirty_blocks=5344 [ 48.199004][ T4601] EXT4-fs (loop3): Block reservation details [ 48.205051][ T4601] EXT4-fs (loop3): i_reserved_data_blocks=334 [ 48.206092][ T4615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.228477][ T29] audit: type=1326 audit(48.001:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.253928][ T29] audit: type=1326 audit(48.001:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.276851][ T29] audit: type=1326 audit(48.001:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.299578][ T29] audit: type=1326 audit(48.001:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.322256][ T29] audit: type=1326 audit(48.001:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.322578][ T4610] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3074 with max blocks 30 with error 28 [ 48.344971][ T29] audit: type=1326 audit(48.001:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.345003][ T29] audit: type=1400 audit(48.001:1585): avc: denied { connect } for pid=4616 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.399045][ T29] audit: type=1326 audit(48.001:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882dd9ebe9 code=0x7ffc0000 [ 48.554324][ T3701] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.585386][ T3713] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.603069][ T3724] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.614680][ T3724] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.638018][ T4630] loop3: detected capacity change from 0 to 1024 [ 48.668625][ T4630] EXT4-fs: Ignoring removed orlov option [ 48.689486][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.703594][ T4638] wireguard0: entered promiscuous mode [ 48.709295][ T4638] wireguard0: entered allmulticast mode [ 48.733183][ T4645] loop4: detected capacity change from 0 to 1024 [ 48.748708][ T4646] bond2: entered promiscuous mode [ 48.753901][ T4646] bond2: entered allmulticast mode [ 48.759453][ T4646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.767558][ T4645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.783247][ T4646] bond2 (unregistering): Released all slaves [ 48.800095][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.916264][ T4657] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.926294][ T4657] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.989746][ T4657] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.989931][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.999681][ T4657] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.063758][ T4657] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.073823][ T4657] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.128981][ T4657] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.138883][ T4657] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.205581][ T4671] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.248266][ T4671] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.302443][ T4671] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.356309][ T4671] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.405859][ T3713] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.417981][ T3703] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.429958][ T3703] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.441367][ T3724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.567847][ T3724] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.576227][ T3724] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.587717][ T3724] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.596558][ T3724] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.611257][ T3713] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.619542][ T3713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.631845][ T3713] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.640135][ T3713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.691756][ T4689] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 49.706438][ T4689] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 49.760599][ T4698] loop2: detected capacity change from 0 to 1024 [ 49.769515][ T4698] EXT4-fs: Ignoring removed orlov option [ 49.778580][ T4698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.819315][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.920418][ T4708] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.444'. [ 49.983661][ T4712] vhci_hcd: invalid port number 96 [ 49.988942][ T4712] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 50.234127][ T4729] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.244001][ T4729] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.298519][ T4729] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.308362][ T4729] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.363915][ T4729] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.373758][ T4729] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.418199][ T4729] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.428092][ T4729] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.524055][ T4732] loop4: detected capacity change from 0 to 512 [ 50.533080][ T4733] loop0: detected capacity change from 0 to 2048 [ 50.548118][ T4732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.551063][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 50.621102][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.715607][ T4740] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.732485][ T4740] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 50.744927][ T4740] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.744927][ T4740] [ 50.754635][ T4740] EXT4-fs (loop0): Total free blocks count 0 [ 50.760654][ T4740] EXT4-fs (loop0): Free/Dirty block details [ 50.766621][ T4740] EXT4-fs (loop0): free_blocks=2415919104 [ 50.772370][ T4740] EXT4-fs (loop0): dirty_blocks=2160 [ 50.777798][ T4740] EXT4-fs (loop0): Block reservation details [ 50.783872][ T4740] EXT4-fs (loop0): i_reserved_data_blocks=135 [ 50.792810][ T4733] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 2048 with error 28 [ 50.843371][ T4750] netlink: 664 bytes leftover after parsing attributes in process `syz.1.459'. [ 51.083979][ T4767] loop4: detected capacity change from 0 to 512 [ 51.090865][ T4767] EXT4-fs: Ignoring removed i_version option [ 51.096988][ T4767] EXT4-fs: Ignoring removed nobh option [ 51.105286][ T4767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.109998][ T4763] SELinux: failed to load policy [ 51.116574][ T4767] EXT4-fs (loop4): 1 truncate cleaned up [ 51.127042][ T4767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.186016][ T4772] loop3: detected capacity change from 0 to 1024 [ 51.193822][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.212779][ T4772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.245964][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.888730][ T4794] loop1: detected capacity change from 0 to 2048 [ 51.918183][ T4794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 52.085615][ T4802] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.113400][ T4802] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 52.125961][ T4802] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.125961][ T4802] [ 52.135771][ T4802] EXT4-fs (loop1): Total free blocks count 0 [ 52.141813][ T4802] EXT4-fs (loop1): Free/Dirty block details [ 52.147802][ T4802] EXT4-fs (loop1): free_blocks=2415919104 [ 52.153690][ T4802] EXT4-fs (loop1): dirty_blocks=2032 [ 52.158987][ T4802] EXT4-fs (loop1): Block reservation details [ 52.165002][ T4802] EXT4-fs (loop1): i_reserved_data_blocks=127 [ 52.433211][ T4807] loop0: detected capacity change from 0 to 512 [ 52.441031][ T4807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.452963][ T4807] EXT4-fs (loop0): 1 truncate cleaned up [ 52.460252][ T4807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.474480][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 52.487551][ T4807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.769022][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 53.668802][ T4838] bridge: RTM_NEWNEIGH with invalid ether address [ 53.760154][ T4842] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 53.783510][ T4842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.800553][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 53.809257][ T4841] SELinux: failed to load policy [ 53.830676][ T4842] bond1 (unregistering): Released all slaves [ 53.882315][ T3711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.890759][ T3711] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.999014][ T4852] loop4: detected capacity change from 0 to 1024 [ 54.008684][ T4852] EXT4-fs: Ignoring removed orlov option [ 54.013021][ T3711] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.022677][ T3711] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.045982][ T3711] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.051757][ T4852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.054534][ T3711] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.110898][ T3711] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.119393][ T3711] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.153030][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.264082][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 54.264100][ T29] audit: type=1400 audit(53.576:2018): avc: denied { create } for pid=4868 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.285329][ T4864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.300997][ T29] audit: type=1400 audit(53.604:2019): avc: denied { setopt } for pid=4868 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.321168][ T1027] IPVS: starting estimator thread 0... [ 54.413913][ T4873] IPVS: using max 2784 ests per chain, 139200 per kthread [ 54.443432][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 54.471177][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 54.475192][ T29] audit: type=1326 audit(53.752:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.503480][ T29] audit: type=1326 audit(53.752:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.526206][ T29] audit: type=1326 audit(53.752:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.549303][ T29] audit: type=1326 audit(53.752:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.572135][ T29] audit: type=1326 audit(53.752:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.594820][ T29] audit: type=1326 audit(53.752:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.617831][ T29] audit: type=1326 audit(53.752:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 54.675840][ T4885] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 54.717235][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 54.737873][ T4885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.760844][ T4890] loop1: detected capacity change from 0 to 1024 [ 54.771817][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 54.807544][ T4893] bond3 (unregistering): Released all slaves [ 54.822030][ T4890] EXT4-fs: Ignoring removed orlov option [ 54.865220][ T29] audit: type=1400 audit(54.121:2027): avc: denied { bind } for pid=4897 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.907167][ T4890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.951970][ T4899] loop4: detected capacity change from 0 to 8192 [ 54.971903][ T3713] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 55.029942][ T4913] loop2: detected capacity change from 0 to 1024 [ 55.039972][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.043538][ T4913] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.060469][ T4913] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.072354][ T4913] JBD2: no valid journal superblock found [ 55.078169][ T4913] EXT4-fs (loop2): Could not load journal inode [ 55.104304][ T4913] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 55.159681][ T4916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.854107][ T4953] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 55.893024][ T4953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.912466][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 55.945487][ T4956] bond1 (unregistering): Released all slaves [ 56.058611][ T4964] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 56.286988][ T4968] loop1: detected capacity change from 0 to 512 [ 56.497206][ T4968] EXT4-fs (loop1): 1 orphan inode deleted [ 56.504468][ T4968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.518322][ T3695] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 56.549383][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.579356][ T4993] loop0: detected capacity change from 0 to 128 [ 56.604031][ T4997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.617898][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 56.627891][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.641349][ T4997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.677766][ T5002] syz.0.551: attempt to access beyond end of device [ 56.677766][ T5002] loop0: rw=2049, sector=145, nr_sectors = 32 limit=128 [ 56.708860][ T5002] syz.0.551: attempt to access beyond end of device [ 56.708860][ T5002] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 56.733458][ T4993] syz.0.551: attempt to access beyond end of device [ 56.733458][ T4993] loop0: rw=2049, sector=209, nr_sectors = 16 limit=128 [ 56.748328][ T5002] syz.0.551: attempt to access beyond end of device [ 56.748328][ T5002] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 56.766059][ T4993] syz.0.551: attempt to access beyond end of device [ 56.766059][ T4993] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 56.779989][ T5002] syz.0.551: attempt to access beyond end of device [ 56.779989][ T5002] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 56.794850][ T4993] syz.0.551: attempt to access beyond end of device [ 56.794850][ T4993] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 56.809514][ T5002] syz.0.551: attempt to access beyond end of device [ 56.809514][ T5002] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 56.825180][ T4993] syz.0.551: attempt to access beyond end of device [ 56.825180][ T4993] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 56.840041][ T4993] syz.0.551: attempt to access beyond end of device [ 56.840041][ T4993] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 56.931395][ T5004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.187318][ T5027] loop1: detected capacity change from 0 to 512 [ 57.195236][ T5027] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 57.351471][ T5036] loop1: detected capacity change from 0 to 1024 [ 57.373152][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.410629][ T5036] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.569: Allocating blocks 449-513 which overlap fs metadata [ 57.483348][ T5035] EXT4-fs (loop1): pa ffff888108e2f620: logic 48, phys. 177, len 21 [ 57.491628][ T5035] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 57.537925][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.635263][ T5060] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 57.651133][ T5060] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 57.995998][ T5077] vlan2: entered allmulticast mode [ 58.085702][ T5084] loop4: detected capacity change from 0 to 512 [ 58.098748][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.112318][ T5084] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.590: corrupted inode contents [ 58.124551][ T5084] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.590: mark_inode_dirty error [ 58.136129][ T5084] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.590: corrupted inode contents [ 58.148893][ T5084] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.590: corrupted inode contents [ 58.161771][ T5084] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.590: mark_inode_dirty error [ 58.183188][ T5084] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.590: corrupted inode contents [ 58.209016][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.262569][ T3695] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 58.273805][ T5100] bond_slave_0: entered promiscuous mode [ 58.279721][ T5100] bond_slave_1: entered promiscuous mode [ 58.286215][ T5100] macvtap1: entered allmulticast mode [ 58.291640][ T5100] bond0: entered allmulticast mode [ 58.296917][ T5100] bond_slave_0: entered allmulticast mode [ 58.302744][ T5100] bond_slave_1: entered allmulticast mode [ 58.309661][ T5100] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 58.318001][ T5100] bond0: left allmulticast mode [ 58.322932][ T5100] bond_slave_0: left allmulticast mode [ 58.328446][ T5100] bond_slave_1: left allmulticast mode [ 58.333997][ T5100] bond_slave_0: left promiscuous mode [ 58.339565][ T5100] bond_slave_1: left promiscuous mode [ 58.411468][ T5103] netlink: 'syz.4.595': attribute type 4 has an invalid length. [ 59.422614][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 59.434408][ T5137] netlink: 'syz.4.609': attribute type 10 has an invalid length. [ 59.465792][ T5137] team0: Port device dummy0 added [ 59.473289][ T5137] netlink: 'syz.4.609': attribute type 10 has an invalid length. [ 59.496713][ T5141] loop2: detected capacity change from 0 to 8192 [ 59.510728][ T5143] loop3: detected capacity change from 0 to 128 [ 59.517930][ T5137] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.529359][ T5137] team0: Failed to send options change via netlink (err -105) [ 59.537100][ T5137] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.546284][ T5137] team0: Port device dummy0 removed [ 59.559678][ T5137] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.731681][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 59.731700][ T29] audit: type=1400 audit(58.616:2612): avc: denied { write } for pid=5147 comm="syz.0.615" name="file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.759751][ T29] audit: type=1400 audit(58.616:2613): avc: denied { open } for pid=5147 comm="syz.0.615" path="/103/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.797769][ T29] audit: type=1400 audit(58.671:2614): avc: denied { ioctl } for pid=5147 comm="syz.0.615" path="/103/file0" dev="tmpfs" ino=562 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.838368][ T5152] netlink: 'syz.4.617': attribute type 29 has an invalid length. [ 59.853613][ T5152] netlink: 'syz.4.617': attribute type 29 has an invalid length. [ 59.880845][ T5154] all: renamed from lo (while UP) [ 60.158405][ T5174] loop2: detected capacity change from 0 to 512 [ 60.215470][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 60.253263][ T5174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.285917][ T5180] tipc: Started in network mode [ 60.291061][ T5180] tipc: Node identity a2f08aacdae3, cluster identity 4711 [ 60.298357][ T5180] tipc: Enabled bearer , priority 0 [ 60.307163][ T5178] tipc: Resetting bearer [ 60.318957][ T5174] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.625: corrupted inode contents [ 60.335270][ T5174] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.625: mark_inode_dirty error [ 60.353644][ T5178] tipc: Disabling bearer [ 60.360424][ T5174] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.625: corrupted inode contents [ 60.409480][ T5190] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.625: corrupted inode contents [ 60.505494][ T5190] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.625: mark_inode_dirty error [ 60.544054][ T5190] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.625: corrupted inode contents [ 60.611195][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.829545][ T5217] loop3: detected capacity change from 0 to 1024 [ 60.836264][ T5217] EXT4-fs: Ignoring removed orlov option [ 60.858468][ T5217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.017748][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.039165][ T5227] bond_slave_0: entered promiscuous mode [ 61.045191][ T5227] bond_slave_1: entered promiscuous mode [ 61.055145][ T5227] macvtap0: entered allmulticast mode [ 61.060775][ T5227] bond0: entered allmulticast mode [ 61.066013][ T5227] bond_slave_0: entered allmulticast mode [ 61.071884][ T5227] bond_slave_1: entered allmulticast mode [ 61.116789][ T5227] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 61.133409][ T5227] bond0: left allmulticast mode [ 61.138400][ T5227] bond_slave_0: left allmulticast mode [ 61.143948][ T5227] bond_slave_1: left allmulticast mode [ 61.149703][ T5227] bond_slave_0: left promiscuous mode [ 61.155284][ T5227] bond_slave_1: left promiscuous mode [ 61.187139][ T5237] loop3: detected capacity change from 0 to 512 [ 61.220948][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.241979][ T5237] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.646: corrupted inode contents [ 61.261286][ T5237] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.646: mark_inode_dirty error [ 61.273156][ T5237] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.646: corrupted inode contents [ 61.323449][ T5246] loop1: detected capacity change from 0 to 1024 [ 61.328735][ T5237] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.646: corrupted inode contents [ 61.343823][ T5237] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.646: mark_inode_dirty error [ 61.357718][ T5246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.371679][ T5249] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.650'. [ 61.375826][ T5237] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.646: corrupted inode contents [ 61.380821][ T5249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 61.421372][ T5246] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.649: Allocating blocks 449-513 which overlap fs metadata [ 61.447319][ T5245] EXT4-fs (loop1): pa ffff888108e2f690: logic 48, phys. 177, len 21 [ 61.455360][ T5245] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 61.493588][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.515047][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.904635][ T5262] tipc: Started in network mode [ 61.909647][ T5262] tipc: Node identity 123d4c3cf7c6, cluster identity 4711 [ 61.917010][ T5262] tipc: Enabled bearer , priority 0 [ 61.939953][ T5261] tipc: Resetting bearer [ 61.961527][ T5261] tipc: Disabling bearer [ 62.038230][ T29] audit: type=1400 audit(60.748:2615): avc: denied { ioctl } for pid=5266 comm="syz.2.657" path="socket:[12548]" dev="sockfs" ino=12548 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.159883][ T5271] netem: change failed [ 62.237906][ T5275] loop4: detected capacity change from 0 to 164 [ 62.273370][ T5273] bond_slave_0: entered promiscuous mode [ 62.279608][ T5273] bond_slave_1: entered promiscuous mode [ 62.285816][ T5273] dummy0: entered promiscuous mode [ 62.297833][ T5275] bio_check_eod: 205 callbacks suppressed [ 62.297850][ T5275] wޡ: attempt to access beyond end of device [ 62.297850][ T5275] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.313600][ T5273] macvtap1: entered allmulticast mode [ 62.322893][ T5273] bond0: entered allmulticast mode [ 62.328047][ T5273] bond_slave_0: entered allmulticast mode [ 62.333897][ T5273] bond_slave_1: entered allmulticast mode [ 62.343565][ T5273] dummy0: entered allmulticast mode [ 62.343604][ T5275] wޡ: attempt to access beyond end of device [ 62.343604][ T5275] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.363213][ T5273] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 62.375698][ T5273] bond0: left allmulticast mode [ 62.380651][ T5273] bond_slave_0: left allmulticast mode [ 62.386148][ T5273] bond_slave_1: left allmulticast mode [ 62.393681][ T5273] dummy0: left allmulticast mode [ 62.398829][ T5273] bond_slave_0: left promiscuous mode [ 62.404542][ T5273] bond_slave_1: left promiscuous mode [ 62.410000][ T5273] dummy0: left promiscuous mode [ 62.430761][ T5280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.446333][ T5280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.511839][ T29] audit: type=1400 audit(61.182:2616): avc: denied { setopt } for pid=5284 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.521782][ T5287] loop2: detected capacity change from 0 to 512 [ 62.537626][ T5287] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 62.589228][ T5289] netlink: '+}[@': attribute type 13 has an invalid length. [ 62.638646][ T5289] 8021q: adding VLAN 0 to HW filter on device  [ 62.651846][ T5289] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.661661][ T5289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.663743][ T5294] loop4: detected capacity change from 0 to 128 [ 62.686146][ T5296] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 62.697897][ T5294] syz.4.670: attempt to access beyond end of device [ 62.697897][ T5294] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 62.712493][ T5294] syz.4.670: attempt to access beyond end of device [ 62.712493][ T5294] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 62.726395][ T5294] syz.4.670: attempt to access beyond end of device [ 62.726395][ T5294] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 62.740577][ T5294] syz.4.670: attempt to access beyond end of device [ 62.740577][ T5294] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 62.769800][ T5294] syz.4.670: attempt to access beyond end of device [ 62.769800][ T5294] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 62.783340][ T5294] syz.4.670: attempt to access beyond end of device [ 62.783340][ T5294] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 62.796742][ T5294] syz.4.670: attempt to access beyond end of device [ 62.796742][ T5294] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 62.811496][ T5294] syz.4.670: attempt to access beyond end of device [ 62.811496][ T5294] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 62.904405][ T29] audit: type=1326 audit(61.542:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 62.927365][ T29] audit: type=1326 audit(61.542:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 62.969149][ T29] audit: type=1326 audit(61.597:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 62.992406][ T29] audit: type=1326 audit(61.597:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 63.015207][ T29] audit: type=1326 audit(61.597:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 63.080070][ T5315] loop0: detected capacity change from 0 to 1024 [ 63.087963][ T5315] EXT4-fs: inline encryption not supported [ 63.094140][ T5315] EXT4-fs: Ignoring removed bh option [ 63.110215][ T5315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.142607][ T5320] loop2: detected capacity change from 0 to 1024 [ 63.149467][ T5320] EXT4-fs: Ignoring removed orlov option [ 63.170497][ T5320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.189727][ T5315] loop0: detected capacity change from 1024 to 64 [ 63.210986][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.251902][ T5315] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.678: path /110/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 63.272421][ T5315] EXT4-fs (loop0): Remounting filesystem read-only [ 63.310842][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.320783][ T5317] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 63.329752][ T3299] syz_tun (unregistering): left allmulticast mode [ 63.533090][ T5331] chnl_net:caif_netlink_parms(): no params data found [ 63.565848][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.573037][ T5331] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.580309][ T5331] bridge_slave_0: entered allmulticast mode [ 63.586680][ T5331] bridge_slave_0: entered promiscuous mode [ 63.593423][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.600586][ T5331] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.607842][ T5331] bridge_slave_1: entered allmulticast mode [ 63.614419][ T5331] bridge_slave_1: entered promiscuous mode [ 63.631016][ T5331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.641496][ T5331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.660717][ T5331] team0: Port device team_slave_0 added [ 63.667268][ T5331] team0: Port device team_slave_1 added [ 63.682744][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.689901][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.716273][ T5331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.727520][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.734492][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.760962][ T5331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.794573][ T5331] hsr_slave_0: entered promiscuous mode [ 63.801099][ T5331] hsr_slave_1: entered promiscuous mode [ 63.807015][ T5331] debugfs: 'hsr0' already exists in 'hsr' [ 63.812840][ T5331] Cannot create hsr debugfs directory [ 63.864224][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811d78fa00: rx timeout, send abort [ 63.890826][ T5331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.899958][ T5331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.909794][ T5331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.918951][ T5331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.936048][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.943184][ T5331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.950539][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.957695][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.990189][ T5331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.001983][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.010618][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.022373][ T5331] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.042097][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.049173][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.065796][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.073560][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.102047][ T5331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.142849][ T5369] loop3: detected capacity change from 0 to 164 [ 64.189492][ T5331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.244738][ T5382] syzkaller0: entered promiscuous mode [ 64.250360][ T5382] syzkaller0: entered allmulticast mode [ 64.351121][ T5331] veth0_vlan: entered promiscuous mode [ 64.358989][ T5331] veth1_vlan: entered promiscuous mode [ 64.374867][ T5403] loop3: detected capacity change from 0 to 512 [ 64.385723][ T5331] veth0_macvtap: entered promiscuous mode [ 64.397535][ T5331] veth1_macvtap: entered promiscuous mode [ 64.404241][ T5405] netlink: '+}[@': attribute type 13 has an invalid length. [ 64.414171][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811d78fa00: abort rx timeout. Force session deactivation [ 64.550510][ T5405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.587456][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.609106][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.621898][ T3701] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.630899][ T3701] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.639889][ T3701] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.656986][ T3701] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.764600][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 64.868579][ T5424] bond_slave_0: entered promiscuous mode [ 64.891189][ T5424] bond_slave_1: entered promiscuous mode [ 64.935797][ T5424] macvtap1: entered allmulticast mode [ 64.941338][ T5424] bond0: entered allmulticast mode [ 64.946730][ T5424] bond_slave_0: entered allmulticast mode [ 64.952716][ T5424] bond_slave_1: entered allmulticast mode [ 64.966996][ T5424] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 64.988213][ T5424] bond0: left allmulticast mode [ 64.993383][ T5424] bond_slave_0: left allmulticast mode [ 64.998869][ T5424] bond_slave_1: left allmulticast mode [ 65.005095][ T5424] bond_slave_0: left promiscuous mode [ 65.010713][ T5424] bond_slave_1: left promiscuous mode [ 65.139638][ T5441] netlink: '+}[@': attribute type 13 has an invalid length. [ 65.208279][ T5441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.253827][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.720'. [ 65.262042][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 65.262126][ T29] audit: type=1326 audit(63.711:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.263555][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.720'. [ 65.269060][ T29] audit: type=1326 audit(63.711:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.328561][ T29] audit: type=1326 audit(63.757:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.351533][ T29] audit: type=1326 audit(63.757:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.374464][ T29] audit: type=1326 audit(63.757:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.397193][ T29] audit: type=1326 audit(63.766:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.420503][ T29] audit: type=1326 audit(63.766:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.443621][ T29] audit: type=1326 audit(63.766:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.467367][ T29] audit: type=1326 audit(63.766:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.490369][ T29] audit: type=1326 audit(63.776:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5452 comm="syz.4.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80d50ebe9 code=0x7ffc0000 [ 65.587002][ T5470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'. [ 65.650608][ T5459] loop3: detected capacity change from 0 to 128 [ 65.766024][ T5487] 9pnet_fd: p9_fd_create_tcp (5487): problem connecting socket to 127.0.0.1 [ 65.833840][ T5461] capability: warning: `syz.1.722' uses deprecated v2 capabilities in a way that may be insecure [ 65.870148][ T5499] gtp0: entered promiscuous mode [ 65.875162][ T5499] gtp0: entered allmulticast mode [ 65.895548][ T5499] loop5: detected capacity change from 0 to 1024 [ 65.903543][ T5499] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 65.913768][ T5499] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 65.925212][ T5499] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 65.936783][ T5499] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.740: unexpected bad inode w/o EXT4_IGET_BAD [ 65.950790][ T5499] EXT4-fs (loop5): no journal found [ 65.956220][ T5499] EXT4-fs (loop5): can't get journal size [ 65.975616][ T5499] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.5.740: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 66.032813][ T5509] loop5: detected capacity change from 0 to 128 [ 66.170096][ T5521] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.235789][ T5521] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.300627][ T5521] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.365840][ T5521] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.438511][ T3701] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456282][ T3701] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.470775][ T3701] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.489290][ T3701] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.575875][ T5526] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.586036][ T5526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.645138][ T5530] loop4: detected capacity change from 0 to 2048 [ 66.654154][ T5526] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.664155][ T5526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.723006][ T5530] loop4: p3 p4 < > [ 66.723802][ T5526] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.727023][ T5530] loop4: p3 size 57344 extends beyond EOD, truncated [ 66.736739][ T5526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.758877][ T5536] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.755'. [ 66.768103][ T5536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.755'. [ 66.810504][ T5526] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.820467][ T5526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.883100][ T3711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.891555][ T3711] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.912414][ T3711] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.920717][ T3711] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.930772][ T3711] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.939034][ T3711] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.948275][ T3711] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.956626][ T3711] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.993553][ T5544] loop2: detected capacity change from 0 to 128 [ 67.628245][ T5552] loop3: detected capacity change from 0 to 512 [ 67.643937][ T5552] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.763: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 67.663059][ T5552] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.763: Bad quota inode: 3, type: 0 [ 67.707299][ T5552] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 67.747121][ T5552] EXT4-fs (loop3): mount failed [ 67.819054][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 67.892982][ T5564] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.899727][ T5564] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.907542][ T5564] vhci_hcd vhci_hcd.0: Device attached [ 67.939590][ T5565] vhci_hcd: connection closed [ 67.939833][ T3711] vhci_hcd: stop threads [ 67.948871][ T3711] vhci_hcd: release socket [ 67.953303][ T3711] vhci_hcd: disconnect device [ 68.064802][ T5573] loop5: detected capacity change from 0 to 1024 [ 68.071617][ T5573] EXT4-fs: inline encryption not supported [ 68.077531][ T5573] EXT4-fs: Ignoring removed bh option [ 68.140970][ T5573] loop5: detected capacity change from 1024 to 64 [ 68.204625][ T5576] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.767: path /16/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 68.225289][ T5576] EXT4-fs (loop5): Remounting filesystem read-only [ 68.275897][ T5331] EXT4-fs unmount: 3 callbacks suppressed [ 68.275909][ T5331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.291509][ T5574] bio_check_eod: 31 callbacks suppressed [ 68.291544][ T5574] kmmpd-loop5: attempt to access beyond end of device [ 68.291544][ T5574] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 68.311065][ T5574] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 68.570575][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.578117][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.578265][ T5583] loop2: detected capacity change from 0 to 2048 [ 68.585679][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.587052][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.607167][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.614726][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.614927][ T5583] EXT4-fs: inline encryption not supported [ 68.622297][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.635647][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.643204][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.650744][ T3461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.661195][ T3461] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 68.674303][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.722460][ T5592] loop4: detected capacity change from 0 to 512 [ 68.729641][ T5583] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.772: bg 0: block 234: padding at end of block bitmap is not set [ 68.744542][ T5583] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 68.745706][ T5592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.756858][ T5583] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.756858][ T5583] [ 68.785965][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.793542][ T5594] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.775'. [ 68.804094][ T5594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.775'. [ 68.805480][ T5592] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 68.918328][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 69.002148][ T3713] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.060101][ T5611] loop4: detected capacity change from 0 to 512 [ 69.074971][ T5611] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.784: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 69.093826][ T5611] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.784: Bad quota inode: 3, type: 0 [ 69.111014][ T3713] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.148130][ T5611] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.164675][ T5611] EXT4-fs (loop4): mount failed [ 69.178583][ T3713] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.201357][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 69.214704][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 69.231480][ T3713] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.310173][ T3713] bridge_slave_1: left allmulticast mode [ 69.316434][ T3713] bridge_slave_1: left promiscuous mode [ 69.322176][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.333142][ T3713] bridge_slave_0: left allmulticast mode [ 69.338920][ T3713] bridge_slave_0: left promiscuous mode [ 69.345010][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.418752][ T5632] loop9: detected capacity change from 0 to 7 [ 69.425244][ T5632] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.444092][ T5632] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.452193][ T5632] loop9: unable to read partition table [ 69.460192][ T3713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.466277][ T5632] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 69.466277][ T5632] ) failed (rc=-5) [ 69.485179][ T3713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.495525][ T3713] bond0 (unregistering): Released all slaves [ 69.575679][ T3713] hsr_slave_0: left promiscuous mode [ 69.581439][ T3713] hsr_slave_1: left promiscuous mode [ 69.587279][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.594727][ T3713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.602237][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.609890][ T3713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.624666][ T3713] veth1_macvtap: left promiscuous mode [ 69.630468][ T3713] veth0_macvtap: left promiscuous mode [ 69.637414][ T3713] veth1_vlan: left promiscuous mode [ 69.642890][ T3713] veth0_vlan: left promiscuous mode [ 69.697513][ T3713] team0 (unregistering): Port device team_slave_1 removed [ 69.707105][ T3713] team0 (unregistering): Port device team_slave_0 removed [ 69.743294][ T5614] chnl_net:caif_netlink_parms(): no params data found [ 69.795737][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.802877][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.810147][ T5614] bridge_slave_0: entered allmulticast mode [ 69.816615][ T5614] bridge_slave_0: entered promiscuous mode [ 69.825646][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.832779][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.840021][ T5614] bridge_slave_1: entered allmulticast mode [ 69.846817][ T5614] bridge_slave_1: entered promiscuous mode [ 69.866683][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.877481][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.901252][ T5614] team0: Port device team_slave_0 added [ 69.909394][ T5614] team0: Port device team_slave_1 added [ 69.927921][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.934993][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.961473][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.972772][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.979799][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.006003][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.063190][ T5614] hsr_slave_0: entered promiscuous mode [ 70.071171][ T5614] hsr_slave_1: entered promiscuous mode [ 70.077153][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 70.083134][ T5614] Cannot create hsr debugfs directory [ 70.175341][ T5614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.185705][ T5614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.195027][ T5614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.217327][ T5614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.242458][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.249673][ T5614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.257052][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.264119][ T5614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.289159][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.300630][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.309789][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.326653][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.337403][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.344994][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.362945][ T5678] loop3: detected capacity change from 0 to 2048 [ 70.363437][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.376550][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.395211][ T5678] loop3: p3 p4 < > [ 70.399116][ T5678] loop3: p3 size 57344 extends beyond EOD, truncated [ 70.454045][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.578366][ T5707] loop1: detected capacity change from 0 to 512 [ 70.598514][ T5707] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.810: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 70.622341][ T5707] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.810: Bad quota inode: 3, type: 0 [ 70.641232][ T5707] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 70.664521][ T5707] EXT4-fs (loop1): mount failed [ 70.670822][ T5614] veth0_vlan: entered promiscuous mode [ 70.684097][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 70.684110][ T29] audit: type=1326 audit(68.723:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.685288][ T5614] veth1_vlan: entered promiscuous mode [ 70.695382][ T29] audit: type=1326 audit(68.741:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.724221][ T5614] veth0_macvtap: entered promiscuous mode [ 70.748339][ T29] audit: type=1326 audit(68.787:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.755232][ T5614] veth1_macvtap: entered promiscuous mode [ 70.771637][ T29] audit: type=1326 audit(68.787:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.787530][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.800300][ T29] audit: type=1326 audit(68.787:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.811363][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.842554][ T29] audit: type=1326 audit(68.787:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.865738][ T29] audit: type=1326 audit(68.787:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.888711][ T29] audit: type=1326 audit(68.787:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.911857][ T29] audit: type=1326 audit(68.787:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.934815][ T29] audit: type=1326 audit(68.787:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a1f5ebe9 code=0x7ffc0000 [ 70.962477][ T3713] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.971720][ T3713] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.981058][ T3713] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.989993][ T3713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.096978][ T5723] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.406918][ T5740] wg2: entered promiscuous mode [ 71.411897][ T5740] wg2: entered allmulticast mode [ 71.484302][ T5744] loop4: detected capacity change from 0 to 1024 [ 71.491967][ T5744] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 71.530661][ T5744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.544458][ T5748] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.561881][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.579469][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 71.631610][ T5748] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.696675][ T5748] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.762465][ T5748] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.822620][ T3713] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.832918][ T3713] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.843900][ T3713] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.854351][ T3713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.930782][ T5759] TC_ACT_REPEAT abuse ? [ 71.935264][ T5759] TC_ACT_REPEAT abuse ? [ 71.939883][ T5759] TC_ACT_REPEAT abuse ? [ 71.945604][ T5758] TC_ACT_REPEAT abuse ? [ 71.949960][ T5758] TC_ACT_REPEAT abuse ? [ 71.983127][ T5764] loop1: detected capacity change from 0 to 2048 [ 72.019997][ T5764] loop1: p1 < > p4 [ 72.025533][ T5764] loop1: p4 size 8388608 extends beyond EOD, truncated [ 72.065688][ T5772] tipc: New replicast peer: 255.255.255.255 [ 72.071771][ T5772] tipc: Enabled bearer , priority 10 [ 72.186702][ T5785] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 72.213189][ T5785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.221151][ T5788] loop2: detected capacity change from 0 to 256 [ 72.245949][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 72.259913][ T5785] vlan2: entered promiscuous mode [ 72.265098][ T5785] bond2: entered promiscuous mode [ 72.282276][ T5785] dummy0: entered promiscuous mode [ 72.290432][ T5785] bond2: (slave dummy0): making interface the new active one [ 72.299513][ T5785] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 72.447757][ T5803] IPVS: Unknown mcast interface: veth0_virt_wifi [ 72.491601][ T5810] veth0_to_team: entered promiscuous mode [ 72.536985][ T5814] veth0: entered promiscuous mode [ 72.544096][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.851'. [ 73.276332][ T10] tipc: Node number set to 3258770556 [ 73.350415][ T5845] bridge: RTM_NEWNEIGH with invalid ether address [ 73.425645][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.432964][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.513399][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.527615][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 73.573357][ T5848] bond1: left promiscuous mode [ 73.578187][ T5848] ip6gretap1: left promiscuous mode [ 73.583650][ T5848] bond1: left allmulticast mode [ 73.588661][ T5848] ip6gretap1: left allmulticast mode [ 73.590175][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 73.619416][ T3709] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.652011][ T3709] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.685252][ T3709] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.710337][ T3709] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.793092][ T5882] loop2: detected capacity change from 0 to 512 [ 73.801112][ T5882] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 73.918341][ T5887] loop2: detected capacity change from 0 to 1024 [ 73.928612][ T5887] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.947645][ T5892] vlan0: entered allmulticast mode [ 73.964493][ T5887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.996124][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.040453][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 74.050250][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.879'. [ 74.223239][ T5915] loop4: detected capacity change from 0 to 2048 [ 74.232511][ T5915] EXT4-fs: inline encryption not supported [ 74.256110][ T5915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.373714][ T5915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.884: bg 0: block 234: padding at end of block bitmap is not set [ 74.406637][ T5915] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 74.418974][ T5915] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.418974][ T5915] [ 74.495940][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.551552][ T5929] loop1: detected capacity change from 0 to 1024 [ 74.560317][ T5929] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.601222][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.758111][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.851075][ T5936] loop1: detected capacity change from 0 to 1764 [ 74.874439][ T5936] netlink: 88 bytes leftover after parsing attributes in process `syz.1.891'. [ 75.087136][ T5945] TC_ACT_REPEAT abuse ? [ 75.091490][ C0] TC_ACT_REPEAT abuse ? [ 75.096512][ T5945] TC_ACT_REPEAT abuse ? [ 75.102294][ T5945] TC_ACT_REPEAT abuse ? [ 75.217319][ T5948] tipc: Started in network mode [ 75.222348][ T5948] tipc: Node identity ac14140f, cluster identity 4711 [ 75.232225][ T5948] tipc: New replicast peer: 255.255.255.255 [ 75.238469][ T5948] tipc: Enabled bearer , priority 10 [ 75.239329][ T5926] Set syz1 is full, maxelem 65536 reached [ 75.303111][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.310431][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.322747][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 75.357165][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 75.372221][ T5950] wg2: left promiscuous mode [ 75.376969][ T5950] wg2: left allmulticast mode [ 75.405156][ T5950] veth0_to_team: left promiscuous mode [ 75.415877][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.427704][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.487529][ T3713] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.502395][ T3713] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.513910][ T3713] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.523937][ T3713] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.534677][ T5967] netlink: 'syz.3.903': attribute type 12 has an invalid length. [ 75.889762][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.908'. [ 75.898792][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 75.908151][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.908'. [ 75.995527][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.024643][ T5993] loop2: detected capacity change from 0 to 512 [ 76.042051][ T5993] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.912: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 76.066466][ T5993] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.912: Bad quota inode: 3, type: 0 [ 76.067815][ T5989] vlan2: entered allmulticast mode [ 76.082711][ T5989] bond1: entered allmulticast mode [ 76.106100][ T5993] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 76.159424][ T5993] EXT4-fs (loop2): mount failed [ 76.190567][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 76.190585][ T29] audit: type=1326 audit(73.809:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.224816][ T29] audit: type=1326 audit(73.809:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.247787][ T29] audit: type=1326 audit(73.818:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.270679][ T29] audit: type=1326 audit(73.818:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.293819][ T29] audit: type=1326 audit(73.818:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.316817][ T29] audit: type=1326 audit(73.818:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.340294][ T29] audit: type=1326 audit(73.818:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.364197][ T29] audit: type=1326 audit(73.818:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.387239][ T29] audit: type=1326 audit(73.818:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.410475][ T29] audit: type=1326 audit(73.818:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 76.433607][ T1027] tipc: Node number set to 2886997007 [ 76.704231][ T6034] loop6: detected capacity change from 0 to 128 [ 76.726657][ T6034] FAT-fs (loop6): Directory bread(block 32) failed [ 76.737454][ T6034] FAT-fs (loop6): Directory bread(block 33) failed [ 76.754248][ T6034] FAT-fs (loop6): Directory bread(block 34) failed [ 76.764330][ T6034] FAT-fs (loop6): Directory bread(block 35) failed [ 76.777058][ T6034] FAT-fs (loop6): Directory bread(block 36) failed [ 76.787168][ T6034] FAT-fs (loop6): Directory bread(block 37) failed [ 76.798692][ T6034] FAT-fs (loop6): Directory bread(block 38) failed [ 76.808675][ T6034] FAT-fs (loop6): Directory bread(block 39) failed [ 76.819662][ T6034] FAT-fs (loop6): Directory bread(block 40) failed [ 76.832330][ T6034] FAT-fs (loop6): Directory bread(block 41) failed [ 76.975338][ T6039] loop9: detected capacity change from 0 to 7 [ 77.003359][ T6039] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.040056][ T6039] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.048322][ T6039] loop9: unable to read partition table [ 77.089947][ T6039] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 77.089947][ T6039] ) failed (rc=-5) [ 77.517709][ T6045] bond1 (unregistering): Released all slaves [ 77.623397][ T6055] syzkaller1: entered promiscuous mode [ 77.629046][ T6055] syzkaller1: entered allmulticast mode [ 77.972301][ T6066] loop2: detected capacity change from 0 to 1024 [ 77.992042][ T6066] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 78.037253][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.093670][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.156831][ T6074] net_ratelimit: 5 callbacks suppressed [ 78.156843][ T6074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.211695][ T6085] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 79.192643][ T6131] loop6: detected capacity change from 0 to 1024 [ 79.226522][ T6131] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.247242][ T6131] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 79.262047][ T6131] EXT4-fs (loop6): orphan cleanup on readonly fs [ 79.269736][ T6131] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.966: Invalid inode table block 0 in block_group 0 [ 79.283113][ T6131] EXT4-fs (loop6): Remounting filesystem read-only [ 79.289992][ T6131] EXT4-fs (loop6): 1 truncate cleaned up [ 79.297884][ T6144] loop4: detected capacity change from 0 to 128 [ 79.305615][ T6131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.328528][ T6144] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.351384][ T5614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.396056][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.525837][ T6163] __nla_validate_parse: 4 callbacks suppressed [ 79.525879][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.977'. [ 79.541353][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.977'. [ 79.550421][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.977'. [ 80.133309][ T6180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6180 comm=syz.4.982 [ 80.196882][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 80.342253][ T6186] loop1: detected capacity change from 0 to 512 [ 80.452498][ T6186] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.984: corrupted inode contents [ 80.518576][ T6187] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 80.536753][ T6186] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.984: mark_inode_dirty error [ 80.558621][ T6187] SELinux: failed to load policy [ 80.560478][ T6186] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.984: corrupted inode contents [ 80.611076][ T6186] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.984: mark_inode_dirty error [ 80.625995][ T6186] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.984: corrupted inode contents [ 80.644487][ T6186] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 80.664769][ T6186] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.984: corrupted inode contents [ 80.678103][ T6186] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.984: mark_inode_dirty error [ 80.699143][ T6186] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 80.744677][ T6186] EXT4-fs (loop1): 1 truncate cleaned up [ 80.779419][ T3674] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 80.779824][ T6186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.291754][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.380153][ T6220] Set syz1 is full, maxelem 65536 reached [ 81.683276][ T6234] loop6: detected capacity change from 0 to 512 [ 81.712971][ T6234] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.1002: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 81.744784][ T6234] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.1002: Bad quota inode: 3, type: 0 [ 81.756263][ T6234] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.771946][ T6234] EXT4-fs (loop6): mount failed [ 81.799789][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 81.799809][ T29] audit: type=1326 audit(78.987:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cafa15ba7 code=0x7ffc0000 [ 81.849440][ T29] audit: type=1326 audit(78.987:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6caf9badd9 code=0x7ffc0000 [ 81.872663][ T29] audit: type=1326 audit(78.987:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cafa15ba7 code=0x7ffc0000 [ 81.895626][ T29] audit: type=1326 audit(78.987:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6caf9badd9 code=0x7ffc0000 [ 81.918824][ T29] audit: type=1326 audit(78.987:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cafa1ebe9 code=0x7ffc0000 [ 81.941933][ T29] audit: type=1326 audit(78.987:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cafa1ebe9 code=0x7ffc0000 [ 81.964738][ T29] audit: type=1326 audit(78.987:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f6cafa1ebe9 code=0x7ffc0000 [ 81.989575][ T29] audit: type=1326 audit(78.987:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cafa1ebe9 code=0x7ffc0000 [ 82.014125][ T29] audit: type=1326 audit(78.987:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6cafa1ebe9 code=0x7ffc0000 [ 82.037386][ T29] audit: type=1326 audit(78.987:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cafa1ebe9 code=0x7ffc0000 [ 82.215296][ T6247] pim6reg1: entered promiscuous mode [ 82.220858][ T6247] pim6reg1: entered allmulticast mode [ 82.364199][ T6260] loop3: detected capacity change from 0 to 1764 [ 82.372403][ T6260] iso9660: Unknown parameter 'unhi8ׇŵ|Fon' [ 82.466982][ T6268] loop3: detected capacity change from 0 to 128 [ 82.476975][ T6268] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.519704][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.558449][ T6275] loop4: detected capacity change from 0 to 512 [ 82.573983][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.736273][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.791487][ T6286] geneve2: entered promiscuous mode [ 82.796758][ T6286] geneve2: entered allmulticast mode [ 82.825414][ T3697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.845758][ T3697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.864964][ T3710] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.874209][ T3710] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 83.274859][ T6295] loop2: detected capacity change from 0 to 512 [ 83.282642][ T6295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.295374][ T6295] EXT4-fs (loop2): 1 truncate cleaned up [ 83.301545][ T6295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.400733][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.730843][ T6312] loop3: detected capacity change from 0 to 256 [ 83.838750][ T6312] FAT-fs (loop3): Directory bread(block 64) failed [ 83.891595][ T6312] FAT-fs (loop3): Directory bread(block 65) failed [ 83.960501][ T6312] FAT-fs (loop3): Directory bread(block 66) failed [ 83.967878][ T6312] FAT-fs (loop3): Directory bread(block 67) failed [ 83.975924][ T6312] FAT-fs (loop3): Directory bread(block 68) failed [ 83.983464][ T6312] FAT-fs (loop3): Directory bread(block 69) failed [ 83.994798][ T6312] FAT-fs (loop3): Directory bread(block 70) failed [ 84.005068][ T6312] FAT-fs (loop3): Directory bread(block 71) failed [ 84.011827][ T6312] FAT-fs (loop3): Directory bread(block 72) failed [ 84.019014][ T6312] FAT-fs (loop3): Directory bread(block 73) failed [ 84.058601][ T6325] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1036'. [ 84.107945][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1036'. [ 84.119389][ T6308] syz.3.1031: attempt to access beyond end of device [ 84.119389][ T6308] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 84.279666][ T6332] loop4: detected capacity change from 0 to 8192 [ 84.383598][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 84.690135][ T6358] loop1: detected capacity change from 0 to 4096 [ 84.701095][ T6358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.775770][ T6370] EXT4-fs error (device loop1): ext4_empty_dir:3100: inode #12: block 80: comm syz.1.1047: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 84.780079][ T6372] loop2: detected capacity change from 0 to 128 [ 84.797544][ T6370] EXT4-fs warning (device loop1): ext4_empty_dir:3103: inode #12: comm syz.1.1047: directory missing '..' [ 84.811878][ T6372] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.836156][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.863937][ T6375] loop1: detected capacity change from 0 to 512 [ 84.870924][ T6375] EXT4-fs: Ignoring removed bh option [ 84.877218][ T6375] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.886561][ T6375] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 84.895728][ T6375] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 84.905511][ T6375] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 84.914487][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.938177][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.236773][ T6387] geneve2: entered promiscuous mode [ 85.242136][ T6387] geneve2: entered allmulticast mode [ 85.249495][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.276189][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.296047][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.306024][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 85.386932][ T6399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6399 comm=syz.4.1065 [ 85.428458][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1067'. [ 85.470469][ T6406] loop4: detected capacity change from 0 to 512 [ 85.478029][ T6406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.490149][ T6406] EXT4-fs (loop4): 1 truncate cleaned up [ 85.496459][ T6406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.530868][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.731512][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.903135][ T6431] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.916270][ T6433] loop6: detected capacity change from 0 to 512 [ 85.924151][ T6435] loop2: detected capacity change from 0 to 4096 [ 85.936089][ T6435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.963066][ T6433] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1079: corrupted inode contents [ 85.975935][ T6433] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1079: mark_inode_dirty error [ 85.988184][ T6433] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1079: corrupted inode contents [ 86.002935][ T6431] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.014865][ T6433] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1079: mark_inode_dirty error [ 86.028665][ T6435] EXT4-fs error (device loop2): ext4_empty_dir:3100: inode #12: block 80: comm syz.2.1081: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 86.031400][ T6433] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1079: corrupted inode contents [ 86.048487][ T6435] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz.2.1081: directory missing '..' [ 86.072931][ T6433] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 86.073817][ T6431] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.082034][ T6433] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1079: corrupted inode contents [ 86.105689][ T6433] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1079: mark_inode_dirty error [ 86.117679][ T6433] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 86.127169][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.128310][ T6433] EXT4-fs (loop6): 1 truncate cleaned up [ 86.142246][ T3672] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 86.144788][ T6433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.169826][ T6431] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.222954][ T6446] loop2: detected capacity change from 0 to 164 [ 86.245328][ T6446] syz.2.1083: attempt to access beyond end of device [ 86.245328][ T6446] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.259662][ T6446] syz.2.1083: attempt to access beyond end of device [ 86.259662][ T6446] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.264010][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.286731][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.295149][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.304873][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.377973][ T5614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.502376][ T6460] netlink: 'syz.6.1090': attribute type 10 has an invalid length. [ 86.510448][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1090'. [ 86.533348][ T6463] veth1_macvtap: left promiscuous mode [ 86.544793][ T6463] macsec0: entered promiscuous mode [ 86.764700][ T6498] loop6: detected capacity change from 0 to 512 [ 86.793187][ T6498] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.832808][ T6498] EXT4-fs (loop6): 1 truncate cleaned up [ 86.839355][ T6498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.925377][ T5614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.998232][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.008679][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.060251][ T6519] netlink: 'syz.3.1106': attribute type 13 has an invalid length. [ 87.070676][ T6519] gretap0: refused to change device tx_queue_len [ 87.077576][ T6519] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 87.421856][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 87.421873][ T29] audit: type=1400 audit(84.174:3503): avc: denied { read } for pid=6545 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.732012][ T6559] macsec0: entered promiscuous mode [ 87.737502][ T6559] macsec0: entered allmulticast mode [ 87.742978][ T6559] veth1_macvtap: entered allmulticast mode [ 87.782900][ T6561] tipc: Enabled bearer , priority 10 [ 87.795455][ T6565] loop2: detected capacity change from 0 to 128 [ 87.805419][ T6561] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 87.813691][ T6561] tipc: Enabled bearer , priority 10 [ 87.874030][ T29] audit: type=1400 audit(84.598:3504): avc: denied { read append } for pid=6573 comm="syz.4.1131" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.897616][ T29] audit: type=1400 audit(84.598:3505): avc: denied { open } for pid=6573 comm="syz.4.1131" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.898607][ T6574] SELinux: Context is not valid (left unmapped). [ 87.941138][ T6576] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.950038][ T6576] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.968646][ T29] audit: type=1326 audit(84.672:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 87.991871][ T29] audit: type=1326 audit(84.672:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 88.017470][ T29] audit: type=1326 audit(84.709:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 88.040485][ T29] audit: type=1326 audit(84.709:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 88.063948][ T29] audit: type=1326 audit(84.709:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 88.086958][ T29] audit: type=1326 audit(84.709:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 88.110269][ T29] audit: type=1326 audit(84.709:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f102b11ebe9 code=0x7ffc0000 [ 88.134198][ T6574] loop4: detected capacity change from 0 to 512 [ 88.161159][ T6574] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 88.181521][ T6586] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 88.192367][ T6574] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1131: invalid indirect mapped block 2683928664 (level 1) [ 88.209018][ T6574] EXT4-fs (loop4): Remounting filesystem read-only [ 88.216328][ T6574] EXT4-fs (loop4): 1 truncate cleaned up [ 88.234925][ T6574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.250805][ T6586] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 88.269213][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.315641][ T6586] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 88.369590][ T6586] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 88.429029][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.439507][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.450915][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.462261][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.506910][ T6591] loop1: detected capacity change from 0 to 512 [ 88.518647][ T6593] loop2: detected capacity change from 0 to 512 [ 88.535672][ T6591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.549858][ T6593] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 88.563143][ T6593] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1139: mark_inode_dirty error [ 88.598315][ T6591] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1147: corrupted inode contents [ 88.630766][ T6593] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 88.650306][ T6593] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1139: mark_inode_dirty error [ 88.655983][ T6591] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1147: mark_inode_dirty error [ 88.675473][ T6591] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1147: corrupted inode contents [ 88.687567][ T6593] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 88.687703][ T6606] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1147: corrupted inode contents [ 88.722729][ T6606] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1147: mark_inode_dirty error [ 88.734187][ T6593] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 88.744263][ T6593] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1139: corrupted inode contents [ 88.764792][ T6606] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1147: corrupted inode contents [ 88.782989][ T6593] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1139: mark_inode_dirty error [ 88.816427][ T6593] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 88.835482][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.841977][ T6593] EXT4-fs (loop2): 1 truncate cleaned up [ 88.852623][ T3703] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:35: Failed to release dquot type 1 [ 88.868677][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.921050][ T5860] tipc: Node number set to 2918547910 [ 89.288023][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 89.352491][ T6638] bond_slave_1: entered promiscuous mode [ 89.359205][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 89.432879][ T6638] bond0: (slave bond_slave_1): Releasing backup interface [ 89.454012][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.479649][ T6638] bond_slave_1 (unregistering): left promiscuous mode [ 89.763075][ T6630] Set syz1 is full, maxelem 65536 reached [ 89.896366][ T6658] netlink: 1092 bytes leftover after parsing attributes in process `syz.3.1163'. [ 89.918156][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 90.079494][ T6672] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.574158][ T6685] syzkaller0: entered promiscuous mode [ 90.579740][ T6685] syzkaller0: entered allmulticast mode [ 90.679921][ T6687] loop2: detected capacity change from 0 to 1024 [ 90.686839][ T6687] EXT4-fs: Ignoring removed oldalloc option [ 90.692904][ T6687] EXT4-fs: Ignoring removed bh option [ 90.721524][ T6687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.793523][ T6695] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1175'. [ 90.814189][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.939849][ T6708] netlink: 'syz.2.1182': attribute type 3 has an invalid length. [ 90.988460][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1185'. [ 91.028598][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1188'. [ 91.104469][ T6728] loop2: detected capacity change from 0 to 512 [ 91.114801][ T6728] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 91.123315][ T6728] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1191: invalid indirect mapped block 2683928664 (level 1) [ 91.139102][ T6728] EXT4-fs (loop2): Remounting filesystem read-only [ 91.145850][ T6728] EXT4-fs (loop2): 1 truncate cleaned up [ 91.152669][ T6728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.179267][ T6733] bond_slave_1: entered promiscuous mode [ 91.193877][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 91.206258][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.227771][ T6733] bond0: (slave bond_slave_1): Releasing backup interface [ 91.247202][ T6733] bond_slave_1 (unregistering): left promiscuous mode [ 91.411562][ T6751] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1201'. [ 91.422704][ T6751] hsr_slave_0: left promiscuous mode [ 91.428755][ T6751] hsr_slave_1: left promiscuous mode [ 91.460750][ T6755] can0: slcan on ttyS3. [ 91.545443][ T6755] can0 (unregistered): slcan off ttyS3. [ 91.553287][ T6755] Falling back ldisc for ttyS3. [ 91.584006][ T6765] SELinux: failed to load policy [ 91.594345][ T6767] bridge: RTM_NEWNEIGH with invalid ether address [ 91.625158][ T6769] IPVS: Unknown mcast interface: veth0_virt_wifi [ 91.720002][ T6775] syzkaller0: entered promiscuous mode [ 91.725594][ T6775] syzkaller0: entered allmulticast mode [ 91.838266][ T6781] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1215'. [ 91.849153][ T6781] hsr_slave_0: left promiscuous mode [ 91.859611][ T6781] hsr_slave_1: left promiscuous mode [ 91.914146][ T6788] syzkaller0: entered allmulticast mode [ 91.926424][ T6788] syzkaller0: entered promiscuous mode [ 91.940160][ T6788] syzkaller0 (unregistering): left allmulticast mode [ 91.947132][ T6788] syzkaller0 (unregistering): left promiscuous mode [ 92.288083][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.311166][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.943296][ T6806] SELinux: Context @ is not valid (left unmapped). [ 92.950253][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 92.950297][ T29] audit: type=1400 audit(89.278:3614): avc: denied { relabelto } for pid=6804 comm="syz.6.1223" name="cgroup.controllers" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 92.980912][ T29] audit: type=1400 audit(89.278:3615): avc: denied { associate } for pid=6804 comm="syz.6.1223" name="cgroup.controllers" dev="tmpfs" ino=466 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 93.108344][ T6808] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1224'. [ 93.313071][ T29] audit: type=1400 audit(345.600:3616): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.321342][ T6819] loop3: detected capacity change from 0 to 512 [ 93.336916][ T29] audit: type=1400 audit(345.600:3617): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.367572][ T29] audit: type=1400 audit(345.600:3618): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.431130][ T29] audit: type=1400 audit(345.720:3619): avc: denied { mounton } for pid=6818 comm="syz.3.1227" path="/252/file1" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.478115][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.480883][ T29] audit: type=1400 audit(345.757:3620): avc: denied { unlink } for pid=5614 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 93.529502][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 93.577060][ T29] audit: type=1400 audit(345.785:3621): avc: denied { mount } for pid=6818 comm="syz.3.1227" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.598803][ T29] audit: type=1400 audit(345.785:3622): avc: denied { map_create } for pid=6818 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.618253][ T29] audit: type=1400 audit(345.785:3623): avc: denied { perfmon } for pid=6818 comm="syz.3.1227" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.937876][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.978435][ T6834] loop4: detected capacity change from 0 to 2048 [ 94.045555][ T6834] loop4: p1 < > p4 [ 94.058729][ T6834] loop4: p4 size 8388608 extends beyond EOD, truncated [ 94.272754][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.306825][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.351440][ T6845] loop1: detected capacity change from 0 to 2048 [ 94.395107][ T6845] Alternate GPT is invalid, using primary GPT. [ 94.401554][ T6845] loop1: p1 p2 p3 [ 94.433798][ T6853] loop4: detected capacity change from 0 to 2048 [ 94.448459][ T6853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.495290][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.519358][ T6861] bridge: RTM_NEWNEIGH with invalid ether address [ 94.525175][ T6863] loop2: detected capacity change from 0 to 512 [ 94.534391][ T6863] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 94.544318][ T6863] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 94.554653][ T6863] EXT4-fs (loop2): group descriptors corrupted! [ 94.645887][ T6876] netlink: 'syz.6.1251': attribute type 2 has an invalid length. [ 94.653792][ T6876] netlink: 'syz.6.1251': attribute type 1 has an invalid length. [ 94.661764][ T6876] netlink: 'syz.6.1251': attribute type 2 has an invalid length. [ 95.018074][ T6887] loop1: detected capacity change from 0 to 512 [ 95.049768][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.097943][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 95.406452][ T6914] loop2: detected capacity change from 0 to 512 [ 95.413705][ T6914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.426698][ T6914] EXT4-fs (loop2): 1 truncate cleaned up [ 95.432938][ T6914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.624534][ T6919] ================================================================== [ 95.632751][ T6919] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 95.640853][ T6919] [ 95.643203][ T6919] write to 0xffff8881016503a8 of 8 bytes by task 6914 on cpu 1: [ 95.650851][ T6919] filemap_splice_read+0x4f4/0x740 [ 95.655995][ T6919] ext4_file_splice_read+0x8f/0xb0 [ 95.661151][ T6919] splice_direct_to_actor+0x26f/0x680 [ 95.666554][ T6919] do_splice_direct+0xda/0x150 [ 95.671385][ T6919] do_sendfile+0x380/0x650 [ 95.675840][ T6919] __x64_sys_sendfile64+0x105/0x150 [ 95.681155][ T6919] x64_sys_call+0x2bb0/0x2ff0 [ 95.685861][ T6919] do_syscall_64+0xd2/0x200 [ 95.690408][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.696331][ T6919] [ 95.698773][ T6919] write to 0xffff8881016503a8 of 8 bytes by task 6919 on cpu 0: [ 95.706429][ T6919] filemap_splice_read+0x4f4/0x740 [ 95.711581][ T6919] ext4_file_splice_read+0x8f/0xb0 [ 95.716725][ T6919] splice_direct_to_actor+0x26f/0x680 [ 95.722204][ T6919] do_splice_direct+0xda/0x150 [ 95.726971][ T6919] do_sendfile+0x380/0x650 [ 95.731396][ T6919] __x64_sys_sendfile64+0x105/0x150 [ 95.736611][ T6919] x64_sys_call+0x2bb0/0x2ff0 [ 95.741390][ T6919] do_syscall_64+0xd2/0x200 [ 95.745989][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.751884][ T6919] [ 95.754201][ T6919] value changed: 0x0000000000002220 -> 0x0000000000002250 [ 95.761303][ T6919] [ 95.763636][ T6919] Reported by Kernel Concurrency Sanitizer on: [ 95.769870][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.2.1264 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 95.780544][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.790874][ T6919] ================================================================== [ 96.405074][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.