last executing test programs: 1m2.269591412s ago: executing program 0 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1m2.245882093s ago: executing program 0 (id=1495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m1.973275616s ago: executing program 0 (id=1499): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1m0.984257235s ago: executing program 0 (id=1514): modify_ldt$read(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 1m0.856112665s ago: executing program 0 (id=1520): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m0.724152876s ago: executing program 0 (id=1524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m0.722261836s ago: executing program 32 (id=1524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.453057093s ago: executing program 1 (id=2731): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 4.391870208s ago: executing program 1 (id=2735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 4.269746808s ago: executing program 1 (id=2737): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3008842, &(0x7f0000000000), 0x1, 0x571, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) dup(r0) statfs(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 4.231534701s ago: executing program 1 (id=2738): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") 4.184739154s ago: executing program 1 (id=2739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 4.178570505s ago: executing program 2 (id=2740): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 4.024013347s ago: executing program 1 (id=2741): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 4.023748307s ago: executing program 33 (id=2741): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 3.12038447s ago: executing program 2 (id=2752): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.11953711s ago: executing program 4 (id=2753): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 3.098316291s ago: executing program 2 (id=2754): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 2.805187635s ago: executing program 2 (id=2766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 2.779092817s ago: executing program 5 (id=2757): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f0000000000)) 2.756547549s ago: executing program 2 (id=2758): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) io_submit(r2, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 2.571745954s ago: executing program 5 (id=2760): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 2.055780995s ago: executing program 5 (id=2771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) pipe2$9p(0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.901014568s ago: executing program 6 (id=2761): truncate(0x0, 0x8000c00) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x10001}, 0x14) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x1a3100) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 1.875678939s ago: executing program 5 (id=2763): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") 1.695246404s ago: executing program 6 (id=2764): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") 1.541575246s ago: executing program 5 (id=2765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup3(r2, r1, 0x0) accept4$unix(r3, 0xfffffffffffffffe, 0x0, 0x0) 1.351998432s ago: executing program 6 (id=2769): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3008842, &(0x7f0000000000), 0x1, 0x571, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) dup(r0) statfs(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 1.351368792s ago: executing program 4 (id=2773): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r1, 0x0, 0x80001}, 0x18) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.302614466s ago: executing program 5 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.276494708s ago: executing program 34 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.196063954s ago: executing program 4 (id=2777): pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1, 0x5, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.12712289s ago: executing program 3 (id=2778): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 954.935714ms ago: executing program 6 (id=2779): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="82ee823b", 0x4}], 0x1, 0x1, 0x1, 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 954.711663ms ago: executing program 3 (id=2780): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8000}, 0x8) 328.175853ms ago: executing program 6 (id=2781): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 327.819814ms ago: executing program 3 (id=2782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) 327.615334ms ago: executing program 4 (id=2783): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 304.245566ms ago: executing program 3 (id=2785): r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000000, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4010, &(0x7f0000000140)={0x11, 0x17, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x80) 242.948941ms ago: executing program 3 (id=2786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r1, 0x0, 0x4}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r4, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r4, 0x2f, 0x2000, 0x4, @value=r6}, 0x20) 242.702031ms ago: executing program 4 (id=2787): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 121.66489ms ago: executing program 2 (id=2788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x1}, @datasec={0x3, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x5, 0x8}, {0x1, 0x7, 0xfffffffa}, {0x4, 0x5, 0x5}, {0x1, 0x9, 0x712}], "158e"}, @struct={0x8, 0x3, 0x0, 0x4, 0x1, 0x0, [{0xb, 0x3, 0xfffffff2}, {0x6, 0x0, 0x6}, {0x5, 0x0, 0x7f}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x87d, [{0x10, 0x4, 0x9}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x34}]}, {0x0, [0x30]}}, &(0x7f00000003c0)=""/160, 0xcf, 0xa0, 0x0, 0x526}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) futimesat(r2, &(0x7f0000000000)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 89.781583ms ago: executing program 4 (id=2789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 16.964039ms ago: executing program 6 (id=2790): r0 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 0s ago: executing program 3 (id=2791): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) kernel console output (not intermixed with test programs): 75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.834559][T10906] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.877601][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.918243][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.928378][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.441439][T10937] loop0: detected capacity change from 0 to 512 [ 109.455343][T10937] ext4: Unknown parameter 'euid>00000000000000000000' [ 109.472797][T10937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1363'. [ 109.583796][T10948] loop3: detected capacity change from 0 to 2048 [ 109.604173][T10953] loop4: detected capacity change from 0 to 1024 [ 109.612994][T10954] loop0: detected capacity change from 0 to 128 [ 109.635682][T10954] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.641036][T10948] EXT4-fs: inline encryption not supported [ 109.665481][T10954] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.704711][T10950] wireguard0: entered promiscuous mode [ 109.711389][T10950] wireguard0: entered allmulticast mode [ 109.729275][T10953] EXT4-fs: Ignoring removed orlov option [ 109.775743][T10953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.791457][T10948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.852418][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 109.852436][ T29] audit: type=1326 audit(2000000065.300:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 109.884213][ T29] audit: type=1326 audit(2000000065.300:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 109.888342][T10948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1368: bg 0: block 234: padding at end of block bitmap is not set [ 109.907970][ T29] audit: type=1326 audit(2000000065.300:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 109.908010][ T29] audit: type=1326 audit(2000000065.300:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 109.908044][ T29] audit: type=1326 audit(2000000065.300:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 110.003822][ T29] audit: type=1326 audit(2000000065.300:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 110.028484][ T29] audit: type=1326 audit(2000000065.300:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 110.052328][ T29] audit: type=1326 audit(2000000065.300:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 110.076257][ T29] audit: type=1326 audit(2000000065.300:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 110.099968][ T29] audit: type=1326 audit(2000000065.300:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10947 comm="syz.3.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 110.125481][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.135205][T10953] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 110.168800][T10948] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 110.181184][T10948] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.181184][T10948] [ 110.270150][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.669327][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 111.120634][T10944] syz.4.1366 (10944) used greatest stack depth: 6200 bytes left [ 111.128905][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.306021][T11022] loop1: detected capacity change from 0 to 512 [ 111.324045][T11022] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1384: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 111.389441][T11022] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.1384: Bad quota inode: 3, type: 0 [ 111.410998][T11022] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 111.495236][T11022] EXT4-fs (loop1): mount failed [ 111.786891][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 111.800477][T11060] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 111.809160][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1398'. [ 111.823431][T11058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.833352][T11058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.842072][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 111.956664][T11066] loop2: detected capacity change from 0 to 1024 [ 111.983597][T11066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.000003][T11066] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1400: Allocating blocks 465-513 which overlap fs metadata [ 112.021125][T11066] EXT4-fs (loop2): pa ffff8881004b77e0: logic 256, phys. 369, len 9 [ 112.029283][T11066] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 112.041496][T11066] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 112.076840][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.205969][T11084] lo speed is unknown, defaulting to 1000 [ 112.465871][T11126] loop3: detected capacity change from 0 to 512 [ 112.495552][T11129] loop0: detected capacity change from 0 to 512 [ 112.513620][T11129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.526426][T11129] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.567602][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.666184][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 112.726479][T11164] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 112.780335][T11169] loop1: detected capacity change from 0 to 1024 [ 112.787674][T11169] EXT4-fs: Ignoring removed nobh option [ 112.794031][T11169] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.809050][T11169] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.1422: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 112.830063][T11169] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1422: couldn't read orphan inode 11 (err -117) [ 112.843511][T11169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.863391][T11169] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1422: Invalid block bitmap block 0 in block_group 0 [ 112.880399][T11169] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1422: Failed to acquire dquot type 0 [ 112.907449][T11182] loop0: detected capacity change from 0 to 512 [ 112.915918][ T4118] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u8:56: Invalid inode table block 8589934593 in block_group 0 [ 112.933407][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.945958][T11182] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1426: corrupted inode contents [ 112.959623][T11182] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1426: mark_inode_dirty error [ 112.972167][T11182] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1426: corrupted inode contents [ 112.986602][T11182] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1426: mark_inode_dirty error [ 112.998419][T11182] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1426: corrupted inode contents [ 113.011612][T11182] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 113.021490][T11182] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1426: corrupted inode contents [ 113.034138][T11182] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1426: mark_inode_dirty error [ 113.046620][T11182] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 113.056277][T11182] EXT4-fs (loop0): 1 truncate cleaned up [ 113.062838][T11182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.077001][ T4100] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:38: Failed to release dquot type 1 [ 113.088957][T11182] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.150350][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.171451][T11209] loop0: detected capacity change from 0 to 512 [ 113.194915][T11209] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1432: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 113.214123][T11209] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.1432: Bad quota inode: 3, type: 0 [ 113.226498][T11209] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 113.243403][T11209] EXT4-fs (loop0): mount failed [ 113.275428][T11220] loop1: detected capacity change from 0 to 1024 [ 113.294860][T11220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.314290][T11220] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1433: Allocating blocks 465-513 which overlap fs metadata [ 113.330045][T11220] EXT4-fs (loop1): pa ffff8881004b77e0: logic 256, phys. 369, len 9 [ 113.338966][T11220] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 113.351655][T11220] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 113.403788][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.470215][T11239] loop0: detected capacity change from 0 to 512 [ 113.494806][T11239] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1439: iget: bad extended attribute block 1 [ 113.508849][T11239] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1439: couldn't read orphan inode 15 (err -117) [ 113.523854][T11239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.601378][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.804016][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'. [ 113.820394][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.835390][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.855194][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'. [ 113.937959][T11288] loop3: detected capacity change from 0 to 1024 [ 113.963963][T11288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.983937][T11288] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1448: Allocating blocks 465-513 which overlap fs metadata [ 114.019044][T11288] EXT4-fs (loop3): pa ffff8881004b7850: logic 256, phys. 369, len 9 [ 114.027335][T11288] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 114.042030][T11288] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 114.116412][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.707333][T11323] syz.2.1459 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.014550][T11341] loop4: detected capacity change from 0 to 2048 [ 115.016207][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.030631][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.044520][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.054076][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.057476][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 115.057495][ T29] audit: type=1326 audit(2000000070.490:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.092999][ T29] audit: type=1326 audit(2000000070.490:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.116775][ T29] audit: type=1326 audit(2000000070.490:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.141546][ T29] audit: type=1326 audit(2000000070.490:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.165251][ T29] audit: type=1326 audit(2000000070.490:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.189495][ T29] audit: type=1326 audit(2000000070.490:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.213732][ T29] audit: type=1326 audit(2000000070.490:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.237557][ T29] audit: type=1326 audit(2000000070.490:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.262278][ T29] audit: type=1326 audit(2000000070.490:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.286008][ T29] audit: type=1326 audit(2000000070.490:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.2.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 115.342571][T11341] loop4: p3 p4 < > [ 115.346516][T11341] loop4: p3 size 57344 extends beyond EOD, truncated [ 115.427639][T11377] loop1: detected capacity change from 0 to 512 [ 115.435211][T11377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.455392][T11375] vhci_hcd: invalid port number 96 [ 115.460669][T11375] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 115.482363][T11377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.508222][T11377] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.552959][T11377] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1476: corrupted xattr block 19: overlapping e_value [ 115.573342][T11377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 115.583912][T11377] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1476: corrupted xattr block 19: overlapping e_value [ 115.620525][T11377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 115.643765][T11377] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1476: corrupted xattr block 19: overlapping e_value [ 115.701541][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.710291][T11391] lo speed is unknown, defaulting to 1000 [ 115.808154][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1479'. [ 115.809671][T11426] SELinux: failed to load policy [ 115.847563][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.869685][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.878098][T11431] uprobe: syz.0.1486:11431 failed to unregister, leaking uprobe [ 115.885309][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1479'. [ 115.888738][T11431] uprobe: syz.0.1486:11431 failed to unregister, leaking uprobe [ 115.928737][T11439] netlink: 'syz.2.1488': attribute type 12 has an invalid length. [ 115.936769][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 115.950322][ T4123] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.950355][T11439] netlink: 'syz.2.1488': attribute type 12 has an invalid length. [ 115.966594][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 115.978786][ T4123] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.992450][ T4123] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.015037][ T4123] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.060888][T11450] vlan0: entered allmulticast mode [ 116.220031][T11470] loop0: detected capacity change from 0 to 1024 [ 116.233160][T11473] loop4: detected capacity change from 0 to 2048 [ 116.253542][T11470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.268977][T11473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.285328][T11470] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1495: Allocating blocks 465-513 which overlap fs metadata [ 116.300285][T11470] EXT4-fs (loop0): pa ffff888106e79310: logic 256, phys. 369, len 9 [ 116.300451][T11473] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1509: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 116.308417][T11470] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 116.310385][T11470] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 116.338424][T11473] EXT4-fs (loop4): Remounting filesystem read-only [ 116.389359][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.399739][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.434458][T11489] loop4: detected capacity change from 0 to 512 [ 116.452884][T11490] lo speed is unknown, defaulting to 1000 [ 116.460554][T11489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1500: corrupted inode contents [ 116.482404][T11489] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1500: mark_inode_dirty error [ 116.496052][T11489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1500: corrupted inode contents [ 116.508750][T11489] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1500: mark_inode_dirty error [ 116.523020][T11489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1500: corrupted inode contents [ 116.535337][T11489] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 116.544314][T11489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1500: corrupted inode contents [ 116.556821][T11489] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1500: mark_inode_dirty error [ 116.569034][T11489] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 116.578639][T11489] EXT4-fs (loop4): 1 truncate cleaned up [ 116.584837][T11489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.598243][T11489] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.608981][ T4123] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:61: Failed to release dquot type 1 [ 116.644882][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.042843][T11530] loop3: detected capacity change from 0 to 2048 [ 117.121360][T11530] loop3: p3 p4 < > [ 117.125344][T11530] loop3: p3 size 57344 extends beyond EOD, truncated [ 117.188890][T11552] bridge0: port 3(batadv1) entered blocking state [ 117.196468][T11552] bridge0: port 3(batadv1) entered disabled state [ 117.205511][T11552] batadv1: entered allmulticast mode [ 117.211916][T11552] batadv1: entered promiscuous mode [ 117.219354][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 117.231096][T11552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.242419][T11552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.255049][T11559] loop3: detected capacity change from 0 to 512 [ 117.302951][T11559] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1512: iget: bad extended attribute block 1 [ 117.321293][T11559] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1512: couldn't read orphan inode 15 (err -117) [ 117.334548][T11559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.372316][T11566] loop4: detected capacity change from 0 to 1024 [ 117.391551][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.398018][T11573] loop0: detected capacity change from 0 to 512 [ 117.409968][T11566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.424640][T11573] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.471283][ T3310] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /319/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 117.500532][T11566] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1513: Allocating blocks 465-513 which overlap fs metadata [ 117.516862][T11566] EXT4-fs (loop4): pa ffff8881004b78c0: logic 256, phys. 369, len 9 [ 117.525788][T11566] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 117.538505][T11566] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 117.581794][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.678875][T11595] loop4: detected capacity change from 0 to 1024 [ 117.692755][ T4096] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 117.702221][ T4096] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 117.759827][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 117.816660][T11610] loop4: detected capacity change from 0 to 1024 [ 117.826756][T11610] EXT4-fs: Ignoring removed nobh option [ 117.833891][T11610] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.844855][T11617] loop1: detected capacity change from 0 to 512 [ 117.854046][T11610] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1529: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 117.875395][T11610] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1529: couldn't read orphan inode 11 (err -117) [ 117.900466][T11617] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1531: corrupted inode contents [ 117.905231][T11599] lo speed is unknown, defaulting to 1000 [ 117.929333][T11617] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1531: mark_inode_dirty error [ 117.944663][T11610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.977715][T11617] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1531: corrupted inode contents [ 117.991618][T11610] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1529: Invalid block bitmap block 0 in block_group 0 [ 118.003157][T11617] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1531: mark_inode_dirty error [ 118.017520][T11617] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1531: corrupted inode contents [ 118.018940][T11610] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1529: Failed to acquire dquot type 0 [ 118.050401][T11617] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 118.053605][T11599] chnl_net:caif_netlink_parms(): no params data found [ 118.082124][T11617] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1531: corrupted inode contents [ 118.094322][T11617] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1531: mark_inode_dirty error [ 118.106677][ T4107] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:45: Invalid inode table block 8589934593 in block_group 0 [ 118.123464][T11617] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 118.133691][T11617] EXT4-fs (loop1): 1 truncate cleaned up [ 118.139834][ T4074] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:18: Failed to release dquot type 1 [ 118.147481][T11617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.164754][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.174272][T11617] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.185737][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.193817][T11599] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.224672][T11599] bridge_slave_0: entered allmulticast mode [ 118.230938][T11787] netlink: '+}[@': attribute type 13 has an invalid length. [ 118.239005][T11599] bridge_slave_0: entered promiscuous mode [ 118.245885][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.253925][T11599] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.262024][T11599] bridge_slave_1: entered allmulticast mode [ 118.269010][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.273234][T11599] bridge_slave_1: entered promiscuous mode [ 118.299554][T11787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.331626][T11599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.345331][T11599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.423142][T11599] team0: Port device team_slave_0 added [ 118.433884][T11599] team0: Port device team_slave_1 added [ 118.447422][T11844] loop4: detected capacity change from 0 to 512 [ 118.463011][T11844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.481482][T11599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.488602][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.515449][T11599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.528251][T11599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.535444][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.562330][T11599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.599513][T11844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.616139][T11844] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.642671][T11844] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1536: corrupted xattr block 19: overlapping e_value [ 118.645901][T11599] hsr_slave_0: entered promiscuous mode [ 118.663832][T11599] hsr_slave_1: entered promiscuous mode [ 118.672192][T11599] debugfs: 'hsr0' already exists in 'hsr' [ 118.677961][T11599] Cannot create hsr debugfs directory [ 118.696115][T11844] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 118.722307][T11844] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1536: corrupted xattr block 19: overlapping e_value [ 118.760954][T11844] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 118.780119][T11844] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1536: corrupted xattr block 19: overlapping e_value [ 118.833748][T11599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.843369][T11599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.854235][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.866579][T11599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.875844][T11599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.912111][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.919350][T11599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.926966][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.934634][T11599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.978247][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.989140][ T4123] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.998656][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.038219][T11599] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.059220][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.066346][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.081852][ T4074] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.089068][ T4074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.186683][T11599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.418960][T12066] pim6reg1: entered promiscuous mode [ 119.424349][T12066] pim6reg1: entered allmulticast mode [ 119.448887][T11599] veth0_vlan: entered promiscuous mode [ 119.465521][T11599] veth1_vlan: entered promiscuous mode [ 119.484597][T11599] veth0_macvtap: entered promiscuous mode [ 119.496445][T11599] veth1_macvtap: entered promiscuous mode [ 119.515583][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.528208][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.542244][ T4110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.552621][ T4103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.565879][ T4103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.585580][ T4103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.638832][T12073] hub 6-0:1.0: USB hub found [ 119.650015][T12073] hub 6-0:1.0: 8 ports detected [ 119.680070][T12080] vlan2: entered allmulticast mode [ 119.692388][T12080] dummy0: entered allmulticast mode [ 119.809886][T12094] loop2: detected capacity change from 0 to 512 [ 119.844151][T12094] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1565: corrupted inode contents [ 119.847612][T12096] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1566'. [ 119.889173][T12094] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1565: mark_inode_dirty error [ 119.892394][T12096] 0·: renamed from hsr0 (while UP) [ 119.910498][T12094] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1565: corrupted inode contents [ 119.927819][T12094] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1565: mark_inode_dirty error [ 119.947354][T12094] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1565: corrupted inode contents [ 119.977755][T12094] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 120.000344][T12096] 0·: entered allmulticast mode [ 120.013993][T12096] hsr_slave_0: entered allmulticast mode [ 120.020434][T12096] hsr_slave_1: entered allmulticast mode [ 120.042572][T12094] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1565: corrupted inode contents [ 120.070735][T12094] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1565: mark_inode_dirty error [ 120.088507][T12096] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 120.129957][T12094] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 120.141721][T12094] EXT4-fs (loop2): 1 truncate cleaned up [ 120.147770][T12094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.162212][T12052] __quota_error: 135 callbacks suppressed [ 120.162230][T12052] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 120.162279][T12094] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.168036][T12052] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:69: Failed to release dquot type 1 [ 120.233948][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.245826][T12102] : renamed from bond0 (while UP) [ 120.269264][ T29] audit: type=1400 audit(2000000075.710:3081): avc: denied { ioctl } for pid=12110 comm="syz.1.1570" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.349062][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 120.393406][ T29] audit: type=1326 audit(2000000075.830:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.417475][ T29] audit: type=1326 audit(2000000075.830:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.443233][ T29] audit: type=1326 audit(2000000075.830:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.467679][ T29] audit: type=1326 audit(2000000075.830:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.491711][ T29] audit: type=1326 audit(2000000075.830:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.516475][ T29] audit: type=1326 audit(2000000075.830:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.540955][ T29] audit: type=1326 audit(2000000075.830:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.565344][ T29] audit: type=1326 audit(2000000075.830:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 120.676614][T12136] lo speed is unknown, defaulting to 1000 [ 120.929819][T12173] loop5: detected capacity change from 0 to 164 [ 120.940277][T12173] bio_check_eod: 101 callbacks suppressed [ 120.940297][T12173] syz.5.1583: attempt to access beyond end of device [ 120.940297][T12173] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 120.961745][T12173] syz.5.1583: attempt to access beyond end of device [ 120.961745][T12173] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.172144][T12197] netlink: 'syz.2.1592': attribute type 7 has an invalid length. [ 121.180208][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 121.356970][T12219] loop2: detected capacity change from 0 to 1024 [ 121.366406][T12225] loop1: detected capacity change from 0 to 1024 [ 121.378383][T12219] EXT4-fs: Ignoring removed nobh option [ 121.384252][T12219] EXT4-fs: Ignoring removed bh option [ 121.516337][T12219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.571117][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.644725][T12253] bond_slave_1: entered promiscuous mode [ 121.652986][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 121.666632][T12253] bond0: (slave bond_slave_1): Releasing backup interface [ 121.676909][T12253] bond_slave_1 (unregistering): left promiscuous mode [ 122.568844][T12282] loop3: detected capacity change from 0 to 512 [ 122.577612][T12282] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 122.594617][T12283] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.618303][T12281] lo speed is unknown, defaulting to 1000 [ 122.655562][T12283] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.743494][T12283] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.854057][T12283] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.893839][T12343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.922826][ T4088] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.939628][ T4088] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.954460][ T4088] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.971857][ T4088] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.016181][T12360] loop1: detected capacity change from 0 to 128 [ 123.097847][T12371] syz_tun: entered allmulticast mode [ 123.105201][T12370] syz_tun: left allmulticast mode [ 123.345321][T12391] macsec0: entered allmulticast mode [ 123.603665][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.611323][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.618833][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.626646][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.634883][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.642347][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.649849][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.657335][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.665689][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.673170][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.689458][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 124.075869][T12446] loop1: detected capacity change from 0 to 1024 [ 124.088686][T12446] EXT4-fs: Ignoring removed orlov option [ 124.097008][T12448] loop3: detected capacity change from 0 to 1024 [ 124.105088][T12448] EXT4-fs: Ignoring removed orlov option [ 124.117885][T12448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.134485][T12446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.242881][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.313720][T12477] SELinux: Context system_u:object is not valid (left unmapped). [ 124.393977][T12482] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1671'. [ 124.496126][T12495] netlink: 'syz.4.1676': attribute type 7 has an invalid length. [ 124.504906][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 124.539481][T12497] lo speed is unknown, defaulting to 1000 [ 124.547268][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.609789][T12517] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 124.646810][T12527] loop2: detected capacity change from 0 to 8192 [ 124.675232][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'. [ 124.748508][T12542] loop2: detected capacity change from 0 to 1024 [ 124.758378][T12542] EXT4-fs: Ignoring removed orlov option [ 124.778479][T12542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.903887][T12549] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1686'. [ 124.987560][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.290459][T12581] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1696'. [ 125.335997][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 125.416381][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 125.416399][ T29] audit: type=1326 audit(2000000080.860:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.446359][ T29] audit: type=1326 audit(2000000080.860:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.476211][ T29] audit: type=1326 audit(2000000080.860:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.499966][ T29] audit: type=1326 audit(2000000080.860:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.524471][ T29] audit: type=1326 audit(2000000080.860:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.548447][ T29] audit: type=1326 audit(2000000080.860:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.572770][ T29] audit: type=1326 audit(2000000080.860:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.596559][ T29] audit: type=1326 audit(2000000080.860:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.621055][ T29] audit: type=1326 audit(2000000080.860:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.644859][ T29] audit: type=1326 audit(2000000080.870:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 125.819921][T12611] netlink: 'syz.4.1708': attribute type 30 has an invalid length. [ 126.056293][T12643] loop4: detected capacity change from 0 to 164 [ 126.076084][T12643] wÞ¡ÿ: attempt to access beyond end of device [ 126.076084][T12643] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 126.091700][T12643] wÞ¡ÿ: attempt to access beyond end of device [ 126.091700][T12643] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.136341][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1723'. [ 126.250472][T12673] loop5: detected capacity change from 0 to 128 [ 126.278189][T12673] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 126.286959][T12673] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.1731'. [ 126.325592][T12681] pim6reg1: entered promiscuous mode [ 126.331712][T12681] pim6reg1: entered allmulticast mode [ 126.802027][T12700] sch_fq: defrate 4294967295 ignored. [ 126.828135][T12704] tipc: New replicast peer: 255.255.255.255 [ 126.835312][T12704] tipc: Enabled bearer , priority 10 [ 127.110573][T12737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1745'. [ 127.239088][T12751] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1748'. [ 127.327968][T12770] loop5: detected capacity change from 0 to 512 [ 127.335456][T12770] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.342386][T12770] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.357369][T12770] EXT4-fs (loop5): 1 truncate cleaned up [ 127.363907][T12770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.545221][T12789] loop3: detected capacity change from 0 to 512 [ 127.560163][T12796] bridge: RTM_NEWNEIGH with invalid ether address [ 127.583271][T12789] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.606551][T12801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.616712][T12801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.876402][T12835] loop2: detected capacity change from 0 to 1024 [ 127.884614][T12835] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (40000) [ 127.951064][ T37] tipc: Node number set to 2110978393 [ 128.195406][T12865] C: renamed from team_slave_0 [ 128.206699][T12865] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 128.214963][T12865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 128.419638][T12878] tipc: Started in network mode [ 128.424712][T12878] tipc: Node identity 8624bff6fc26, cluster identity 4711 [ 128.432250][T12878] tipc: Enabled bearer , priority 0 [ 128.449226][T12877] tipc: Resetting bearer [ 128.499453][T12877] tipc: Disabling bearer [ 128.899291][T12890] sch_fq: defrate 4294967295 ignored. [ 128.905914][T12889] loop4: detected capacity change from 0 to 736 [ 128.924178][T12889] rock: directory entry would overflow storage [ 128.930604][T12889] rock: sig=0x3b10, size=4, remaining=3 [ 129.070713][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.078145][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.225764][T12893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.251797][T12893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.461212][T12901] netlink: 'syz.5.1797': attribute type 30 has an invalid length. [ 129.469340][ T4076] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.515826][T12915] loop4: detected capacity change from 0 to 512 [ 129.533123][T12915] EXT4-fs: Ignoring removed oldalloc option [ 129.539523][T12915] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.659822][T12915] EXT4-fs (loop4): 1 truncate cleaned up [ 129.773062][ T4076] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.792627][ T4076] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.820167][ T4076] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.923960][T12942] __nla_validate_parse: 2 callbacks suppressed [ 129.923981][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1810'. [ 130.073436][T12965] netlink: 'syz.5.1816': attribute type 1 has an invalid length. [ 130.149898][T12971] tls_set_device_offload: netdev not found [ 130.301708][T12976] bond1: entered promiscuous mode [ 130.307009][T12976] bond1: entered allmulticast mode [ 130.336964][T12976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.373120][T13009] ip6gretap1: entered promiscuous mode [ 130.378840][T13009] ip6gretap1: entered allmulticast mode [ 130.405867][T13009] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 130.421630][ T1843] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.513756][T13032] tmpfs: Unsupported parameter 'huge' [ 130.552335][ T4089] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.583176][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 130.583191][ T29] audit: type=1326 audit(2000000086.030:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.622454][ T29] audit: type=1326 audit(2000000086.060:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.646948][ T29] audit: type=1326 audit(2000000086.060:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.671642][ T29] audit: type=1326 audit(2000000086.060:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.695542][ T29] audit: type=1326 audit(2000000086.060:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.720019][ T29] audit: type=1326 audit(2000000086.060:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.744740][ T29] audit: type=1326 audit(2000000086.060:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.768624][ T29] audit: type=1326 audit(2000000086.060:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.793069][ T29] audit: type=1326 audit(2000000086.060:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.817007][ T29] audit: type=1326 audit(2000000086.060:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 130.908123][T13045] loop5: detected capacity change from 0 to 1024 [ 130.921106][T13045] EXT4-fs: Ignoring removed orlov option [ 130.927290][T13045] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 130.973534][T13062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1829'. [ 130.989977][ T5475] hid_parser_main: 33 callbacks suppressed [ 130.989999][ T5475] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.037960][T13067] loop4: detected capacity change from 0 to 164 [ 131.044180][ T5475] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.069149][T13067] syz.4.1835: attempt to access beyond end of device [ 131.069149][T13067] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 131.091771][T13067] syz.4.1835: attempt to access beyond end of device [ 131.091771][T13067] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 131.437904][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 131.485784][T13111] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 131.610553][T13116] netlink: 'syz.2.1849': attribute type 4 has an invalid length. [ 131.629257][T13116] netlink: 'syz.2.1849': attribute type 4 has an invalid length. [ 131.653278][ T5475] lo speed is unknown, defaulting to 1000 [ 131.659123][ T5475] syz0: Port: 1 Link ACTIVE [ 131.847237][T13121] syzkaller0: entered promiscuous mode [ 131.853569][T13121] syzkaller0: entered allmulticast mode [ 131.865704][T13129] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 131.915032][T13131] loop3: detected capacity change from 0 to 512 [ 131.935929][T13131] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.955140][T13131] EXT4-fs (loop3): mount failed [ 132.020508][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1856'. [ 132.078026][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 132.423528][T13199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1872'. [ 132.449117][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1874'. [ 132.483045][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 132.587631][T13231] netlink: 'syz.4.1880': attribute type 4 has an invalid length. [ 132.599184][T13231] netlink: 'syz.4.1880': attribute type 4 has an invalid length. [ 132.618582][T13230] hub 6-0:1.0: USB hub found [ 132.626053][T13230] hub 6-0:1.0: 8 ports detected [ 132.716726][T13245] netlink: '+}[@': attribute type 13 has an invalid length. [ 132.747589][T13245] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 132.751056][T13247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1886'. [ 132.775818][T13245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.839904][ T5482] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.848639][ T5482] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.895409][T13259] loop5: detected capacity change from 0 to 1024 [ 132.907783][T13256] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.985734][T13259] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1892: Allocating blocks 449-513 which overlap fs metadata [ 133.022763][T13256] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.067604][T13258] EXT4-fs (loop5): pa ffff888106e79380: logic 48, phys. 177, len 21 [ 133.076530][T13258] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 133.093260][T13256] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.198574][T13294] netlink: '+}[@': attribute type 13 has an invalid length. [ 133.207646][T13256] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.234340][T13294] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 133.245821][T13294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.298758][ T1843] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.322141][ T1843] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.335167][ T1843] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.354589][ T1843] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.872256][T13336] hub 6-0:1.0: USB hub found [ 133.880137][T13336] hub 6-0:1.0: 8 ports detected [ 134.130434][T13308] 9pnet_fd: p9_fd_create_tcp (13308): problem connecting socket to 127.0.0.1 [ 134.170698][T13359] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 134.211052][T13359] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 134.330928][T13387] loop2: detected capacity change from 0 to 128 [ 134.354998][T13387] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.185618][T13440] loop5: detected capacity change from 0 to 512 [ 135.213786][T13440] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.229159][T13440] EXT4-fs (loop5): mount failed [ 135.353289][T13408] 9pnet_fd: p9_fd_create_tcp (13408): problem connecting socket to 127.0.0.1 [ 135.598364][T13479] netlink: 'syz.5.1948': attribute type 4 has an invalid length. [ 135.637067][T13479] netlink: 'syz.5.1948': attribute type 4 has an invalid length. [ 135.656115][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 135.656134][ T29] audit: type=1326 audit(2000000091.100:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97e3e85ba7 code=0x7ffc0000 [ 135.714986][ T29] audit: type=1326 audit(2000000091.100:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f97e3e2add9 code=0x7ffc0000 [ 135.738939][ T29] audit: type=1326 audit(2000000091.100:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97e3e85ba7 code=0x7ffc0000 [ 135.763664][ T29] audit: type=1326 audit(2000000091.100:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f97e3e2add9 code=0x7ffc0000 [ 135.787507][ T29] audit: type=1326 audit(2000000091.100:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 135.812088][ T29] audit: type=1326 audit(2000000091.100:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 135.836046][ T29] audit: type=1326 audit(2000000091.140:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 135.861317][ T29] audit: type=1326 audit(2000000091.140:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 135.885599][ T29] audit: type=1326 audit(2000000091.140:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 135.911101][ T29] audit: type=1326 audit(2000000091.140:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 135.950260][T13485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.038269][T13485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.095526][T13485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.128495][T13485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.202982][ T4101] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.218638][ T4101] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.251916][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.272421][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.292970][T13515] netlink: 'syz.5.1956': attribute type 10 has an invalid length. [ 136.337297][T13515] team0: Port device dummy0 added [ 136.368001][T13516] netlink: 'syz.5.1956': attribute type 10 has an invalid length. [ 136.392175][T13516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.426248][T13516] team0: Failed to send options change via netlink (err -105) [ 136.452926][T13516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.483545][T13516] team0: Port device dummy0 removed [ 136.507446][T13516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.606652][T13523] bond_slave_1: entered promiscuous mode [ 136.615095][T13523] __nla_validate_parse: 1 callbacks suppressed [ 136.615185][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 136.637996][T13523] bond_slave_1 (unregistering): left promiscuous mode [ 136.724891][ T1041] IPVS: starting estimator thread 0... [ 136.812339][T13543] IPVS: using max 2352 ests per chain, 117600 per kthread [ 136.905321][T13558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13558 comm=syz.2.1972 [ 136.918751][T13558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13558 comm=syz.2.1972 [ 136.953296][T13562] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1974'. [ 137.055876][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.064115][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.071590][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.079068][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.086503][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.094724][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.102155][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.109595][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.117237][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.123530][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 137.125848][ T5482] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.144225][T13570] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 137.152552][ T5482] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 137.154196][T13570] bond_slave_1 (unregistering): left promiscuous mode [ 138.226473][T13662] pim6reg1: entered promiscuous mode [ 138.231878][T13662] pim6reg1: entered allmulticast mode [ 138.383370][T13679] loop2: detected capacity change from 0 to 1024 [ 138.390504][T13679] EXT4-fs: Ignoring removed orlov option [ 138.399871][T13679] EXT4-fs mount: 11 callbacks suppressed [ 138.399939][T13679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.463141][T13685] loop5: detected capacity change from 0 to 512 [ 138.487856][T13685] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2008: casefold flag without casefold feature [ 138.507143][T13685] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2008: couldn't read orphan inode 15 (err -117) [ 138.526570][T13685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.563084][ T5481] IPVS: starting estimator thread 0... [ 138.671681][T13694] IPVS: using max 2352 ests per chain, 117600 per kthread [ 138.682728][T13699] lo speed is unknown, defaulting to 1000 [ 138.977719][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 139.031419][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.094398][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.626000][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2031'. [ 139.672003][T13778] IPv6: sit1: Disabled Multicast RS [ 139.684230][T13781] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2033'. [ 140.571005][T13795] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 140.597497][T13795] team0: Port device dummy0 added [ 140.605381][T13795] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 140.613803][T13795] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 140.623823][T13795] team0: Failed to send options change via netlink (err -105) [ 140.642668][T13795] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 140.653795][T13795] team0: Port device dummy0 removed [ 140.683374][T13795] dummy0: entered promiscuous mode [ 140.689411][T13795] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 140.699566][T13813] uprobe: syz.3.2043:13813 failed to unregister, leaking uprobe [ 140.707543][T13813] uprobe: syz.3.2043:13813 failed to unregister, leaking uprobe [ 140.725582][T13815] netlink: 'syz.1.2044': attribute type 7 has an invalid length. [ 140.734147][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 140.846717][T13831] netlink: 'syz.5.2060': attribute type 7 has an invalid length. [ 140.854622][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2060'. [ 140.864228][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 140.864246][ T29] audit: type=1326 audit(2000000096.310:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd548ebe9 code=0x7ffc0000 [ 140.895232][ T29] audit: type=1326 audit(2000000096.310:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cd548ebe9 code=0x7ffc0000 [ 140.919521][ T29] audit: type=1326 audit(2000000096.310:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd548ebe9 code=0x7ffc0000 [ 140.944191][ T29] audit: type=1326 audit(2000000096.310:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f5cd548ebe9 code=0x7ffc0000 [ 140.968196][ T29] audit: type=1326 audit(2000000096.310:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd548ebe9 code=0x7ffc0000 [ 141.071198][T13845] IPv6: sit1: Disabled Multicast RS [ 141.114381][ T29] audit: type=1326 audit(2000000096.320:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.4.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd548ebe9 code=0x7ffc0000 [ 141.213231][T13858] uprobe: syz.1.2058:13858 failed to unregister, leaking uprobe [ 141.224307][T13858] uprobe: syz.1.2058:13858 failed to unregister, leaking uprobe [ 141.291953][T13864] loop5: detected capacity change from 0 to 1024 [ 141.303170][T13866] uprobe: syz.4.2073:13866 failed to unregister, leaking uprobe [ 141.328938][T13866] uprobe: syz.4.2073:13866 failed to unregister, leaking uprobe [ 141.357775][T13864] EXT4-fs: Ignoring removed orlov option [ 141.399529][T13864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.496744][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 141.624352][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.036815][T13906] netlink: 'syz.3.2076': attribute type 30 has an invalid length. [ 142.098996][T13914] loop2: detected capacity change from 0 to 164 [ 142.118161][T13914] wÞ¡ÿ: attempt to access beyond end of device [ 142.118161][T13914] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.133217][T13914] wÞ¡ÿ: attempt to access beyond end of device [ 142.133217][T13914] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.211106][T13929] uprobe: syz.2.2081:13929 failed to unregister, leaking uprobe [ 142.219250][T13929] uprobe: syz.2.2081:13929 failed to unregister, leaking uprobe [ 142.249994][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 142.277211][T13933] sch_fq: defrate 4294967295 ignored. [ 142.305511][T13940] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 142.322287][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 142.334011][T13940] $Hÿ: (slave dummy0): Releasing backup interface [ 142.349648][T13940] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 142.362407][ T29] audit: type=1326 audit(2000000097.810:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 142.386920][ T29] audit: type=1326 audit(2000000097.810:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 142.411595][ T29] audit: type=1326 audit(2000000097.810:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 142.435767][ T29] audit: type=1326 audit(2000000097.810:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 142.462988][T13940] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 142.480190][T13950] pim6reg1: entered promiscuous mode [ 142.485622][T13950] pim6reg1: entered allmulticast mode [ 142.544440][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 143.154296][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 143.258721][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 143.360151][T13998] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2105'. [ 143.432668][T14003] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 143.459748][T14003] dummy0: left promiscuous mode [ 143.474502][T14003] team0: Port device dummy0 added [ 143.493109][T14003] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 143.512673][T14003] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.537356][T14003] team0: Failed to send options change via netlink (err -105) [ 143.578847][T14003] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.597811][T14003] team0: Port device dummy0 removed [ 143.623126][T14003] dummy0: entered promiscuous mode [ 143.629304][T14003] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 143.756462][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'. [ 143.852017][T14033] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2120'. [ 143.932365][T14043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 143.939143][T14043] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 143.947113][T14043] vhci_hcd vhci_hcd.0: Device attached [ 143.962377][T14045] vhci_hcd: cannot find the pending unlink 2 [ 144.061480][T14045] vhci_hcd: connection closed [ 144.063814][ T4077] vhci_hcd: stop threads [ 144.072879][ T4077] vhci_hcd: release socket [ 144.077332][ T4077] vhci_hcd: disconnect device [ 144.130840][ T5481] vhci_hcd: vhci_device speed not set [ 144.215812][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'. [ 144.225282][T14075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.232930][T14075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.242683][T14075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.250205][T14075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.397763][T14091] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2142'. [ 144.743000][T14108] netlink: 'syz.4.2146': attribute type 10 has an invalid length. [ 144.820511][T14108] team0: Port device dummy0 added [ 144.827059][T14118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.837181][T14118] team0: Failed to send options change via netlink (err -105) [ 144.844937][T14118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.854654][T14118] team0: Port device dummy0 removed [ 145.633556][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.643080][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.131563][T14236] C: renamed from team_slave_0 [ 146.153770][T14236] validate_nla: 1 callbacks suppressed [ 146.153785][T14236] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 146.167291][T14236] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.263833][T14245] tipc: Enabled bearer , priority 0 [ 146.291633][T14239] tipc: Resetting bearer [ 146.315214][T14239] tipc: Disabling bearer [ 146.390015][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 146.390032][ T29] audit: type=1326 audit(2000000101.830:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.420031][ T29] audit: type=1326 audit(2000000101.830:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.443981][ T29] audit: type=1326 audit(2000000101.830:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.468048][ T29] audit: type=1326 audit(2000000101.830:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.491845][ T29] audit: type=1326 audit(2000000101.830:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.515554][ T29] audit: type=1326 audit(2000000101.830:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.539491][ T29] audit: type=1326 audit(2000000101.830:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.563744][ T29] audit: type=1326 audit(2000000101.830:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.587903][ T29] audit: type=1326 audit(2000000101.830:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.611610][ T29] audit: type=1326 audit(2000000101.830:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 146.642105][T14253] tipc: Enabled bearer , priority 0 [ 146.667195][T14252] tipc: Resetting bearer [ 146.681057][T14252] tipc: Disabling bearer [ 146.956265][T14295] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 146.972315][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.979663][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.027275][T14300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14300 comm=syz.4.2200 [ 147.107347][ T4076] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.121449][ T4101] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.166312][ T4101] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.175577][ T4101] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.219131][T14341] lo speed is unknown, defaulting to 1000 [ 147.420457][T14375] tipc: Enabled bearer , priority 0 [ 147.433961][T14381] sch_fq: defrate 4294967295 ignored. [ 147.444222][T14383] __nla_validate_parse: 4 callbacks suppressed [ 147.444242][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2209'. [ 147.481768][T14374] tipc: Resetting bearer [ 147.503152][T14374] tipc: Disabling bearer [ 147.648935][T14398] loop5: detected capacity change from 0 to 512 [ 147.676693][T14398] EXT4-fs: Ignoring removed oldalloc option [ 147.683341][T14398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.697477][T14398] EXT4-fs (loop5): 1 truncate cleaned up [ 147.703966][T14398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.765815][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.618637][T14433] sch_fq: defrate 4294967295 ignored. [ 148.698585][T14443] netlink: 'syz.4.2226': attribute type 1 has an invalid length. [ 148.752679][T14443] bond2: entered promiscuous mode [ 148.757941][T14443] bond2: entered allmulticast mode [ 148.770556][T14443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.846926][T14443] ip6gretap1: entered promiscuous mode [ 148.852720][T14443] ip6gretap1: entered allmulticast mode [ 148.864716][ T4104] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 148.875758][T14443] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.981199][ T4129] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.020530][T14497] loop2: detected capacity change from 0 to 512 [ 149.027496][T14497] EXT4-fs: Ignoring removed oldalloc option [ 149.036638][T14497] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.048377][T14497] EXT4-fs (loop2): 1 truncate cleaned up [ 149.055785][T14497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.108477][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.224228][T14523] netlink: 'syz.2.2243': attribute type 1 has an invalid length. [ 149.332282][T14528] bond2: entered promiscuous mode [ 149.337397][T14528] bond2: entered allmulticast mode [ 149.344158][T14528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.374988][T14562] ip6gretap0: entered promiscuous mode [ 149.380603][T14562] ip6gretap0: entered allmulticast mode [ 149.395325][T14562] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 149.451048][ T4104] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.504868][T14589] loop5: detected capacity change from 0 to 512 [ 149.524977][T14589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.542629][T14589] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.570371][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.580314][ T4129] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.658841][T14600] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2253'. [ 149.669405][T14600] bridge_slave_1: left allmulticast mode [ 149.675311][T14600] bridge_slave_1: left promiscuous mode [ 149.681371][T14600] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.689293][T14600] bridge_slave_0: left allmulticast mode [ 149.695022][T14600] bridge_slave_0: left promiscuous mode [ 149.700875][T14600] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.949383][T14621] SELinux: failed to load policy [ 150.193449][T14630] netlink: 'syz.3.2263': attribute type 13 has an invalid length. [ 150.329560][T14634] bond0: entered promiscuous mode [ 150.335233][T14634] bond0: entered allmulticast mode [ 150.346872][T14634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.358590][T14634] bond0 (unregistering): Released all slaves [ 150.379089][T14672] netlink: 'syz.5.2269': attribute type 13 has an invalid length. [ 150.409074][T14635] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.428790][T14635] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 150.429941][T14707] ------------[ cut here ]------------ [ 150.441921][T14707] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)(1) [ 150.458898][T14707] WARNING: CPU: 0 PID: 14707 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 150.469464][T14707] Modules linked in: [ 150.473636][T14707] CPU: 0 UID: 0 PID: 14707 Comm: syz.2.2270 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.483677][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.494022][T14707] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 150.500360][T14707] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 b2 7f ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 150.520548][T14707] RSP: 0018:ffffc900022c3440 EFLAGS: 00010292 [ 150.526700][T14707] RAX: 41b4ea913741eb00 RBX: ffff88810a8078b8 RCX: 0000000000080000 [ 150.534820][T14707] RDX: ffffc9000299a000 RSI: 000000000001d2b1 RDI: 000000000001d2b2 [ 150.543006][T14707] RBP: 0000000000000010 R08: 0001c900022c327f R09: 0000000000000000 [ 150.551226][T14707] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810a807878 [ 150.559369][T14707] R13: ffff888105b30000 R14: ffff888105b30000 R15: ffff88810a8078b0 [ 150.567727][T14707] FS: 00007f97e28ef6c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 150.577098][T14707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.583823][T14707] CR2: 0000200000001004 CR3: 0000000140962000 CR4: 00000000003506f0 [ 150.591930][T14707] Call Trace: [ 150.595297][T14707] [ 150.598359][T14707] reg_set_min_max+0x1eb/0x260 [ 150.603365][T14707] check_cond_jmp_op+0x1080/0x16e0 [ 150.608628][T14707] do_check+0x332a/0x7a10 [ 150.613150][T14707] do_check_common+0xc3a/0x12a0 [ 150.618378][T14707] bpf_check+0x942b/0xd9e0 [ 150.622824][T14707] ? __rcu_read_unlock+0x4f/0x70 [ 150.628157][T14707] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 150.634447][T14707] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 150.640234][T14707] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 150.646400][T14707] ? pcpu_block_update+0x24e/0x3b0 [ 150.651580][T14707] ? _find_next_zero_bit+0x64/0xa0 [ 150.656931][T14707] ? pcpu_block_refresh_hint+0x157/0x170 [ 150.662722][T14707] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 150.668943][T14707] ? css_rstat_updated+0xb7/0x240 [ 150.674063][T14707] ? __rcu_read_unlock+0x4f/0x70 [ 150.679078][T14707] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 150.684943][T14707] ? should_fail_ex+0x30/0x280 [ 150.689945][T14707] ? selinux_bpf_prog_load+0x36/0xf0 [ 150.695569][T14707] ? should_failslab+0x8c/0xb0 [ 150.700655][T14707] ? __kmalloc_cache_noprof+0x189/0x320 [ 150.706441][T14707] ? selinux_bpf_prog_load+0xbf/0xf0 [ 150.711811][T14707] ? security_bpf_prog_load+0x2c/0xa0 [ 150.717389][T14707] bpf_prog_load+0xedd/0x1070 [ 150.722654][T14707] ? security_bpf+0x2b/0x90 [ 150.727399][T14707] __sys_bpf+0x462/0x7b0 [ 150.731902][T14707] __x64_sys_bpf+0x41/0x50 [ 150.736489][T14707] x64_sys_call+0x2aea/0x2ff0 [ 150.741498][T14707] do_syscall_64+0xd2/0x200 [ 150.746219][T14707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.752511][T14707] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.758538][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.764513][T14707] RIP: 0033:0x7f97e3e8ebe9 [ 150.768994][T14707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.789206][T14707] RSP: 002b:00007f97e28ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.797684][T14707] RAX: ffffffffffffffda RBX: 00007f97e40b5fa0 RCX: 00007f97e3e8ebe9 [ 150.805750][T14707] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 150.813870][T14707] RBP: 00007f97e3f11e19 R08: 0000000000000000 R09: 0000000000000000 [ 150.821894][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.829982][T14707] R13: 00007f97e40b6038 R14: 00007f97e40b5fa0 R15: 00007ffd7b553188 [ 150.838173][T14707] [ 150.841321][T14707] ---[ end trace 0000000000000000 ]--- [ 150.888513][T14672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.909467][T14672] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.932714][T14672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.405434][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 151.562684][T14771] syzkaller0: entered promiscuous mode [ 151.568349][T14771] syzkaller0: entered allmulticast mode [ 151.650665][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 151.650718][ T29] audit: type=1400 audit(2000000107.090:4047): avc: denied { getopt } for pid=14781 comm="syz.4.2299" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.698546][ T29] audit: type=1400 audit(2000000107.140:4048): avc: denied { create } for pid=14783 comm="syz.4.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.907292][ T29] audit: type=1326 audit(2000000107.350:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 151.910147][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 151.953053][ T29] audit: type=1326 audit(2000000107.350:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 151.977232][ T29] audit: type=1326 audit(2000000107.350:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 152.001617][ T29] audit: type=1400 audit(2000000107.350:4052): avc: denied { create } for pid=14798 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.022147][ T29] audit: type=1326 audit(2000000107.350:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 152.046123][ T29] audit: type=1326 audit(2000000107.350:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 152.070545][ T29] audit: type=1326 audit(2000000107.350:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 152.095376][ T29] audit: type=1400 audit(2000000107.350:4056): avc: denied { write } for pid=14798 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.219475][T14816] lo speed is unknown, defaulting to 1000 [ 152.261647][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'. [ 152.468978][ T5481] lo speed is unknown, defaulting to 1000 [ 152.469015][T12052] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.474800][ T5481] syz0: Port: 1 Link DOWN [ 152.490965][T12052] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.520876][T12052] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.529294][T12052] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.913624][T14905] lo speed is unknown, defaulting to 1000 [ 153.067474][T14935] syzkaller1: entered promiscuous mode [ 153.073197][T14935] syzkaller1: entered allmulticast mode [ 153.804774][T15002] syzkaller0: entered promiscuous mode [ 153.810573][T15002] syzkaller0: entered allmulticast mode [ 154.502003][T15103] $Hÿ: (slave dummy0): Releasing backup interface [ 154.512927][T15103] dummy0: left promiscuous mode [ 154.524619][T15103] bond2: (slave ip6gretap0): Removing an active aggregator [ 154.533975][T15103] bond2: (slave ip6gretap0): Releasing backup interface [ 154.542872][T15103] ip6gretap0: left promiscuous mode [ 154.548391][T15103] ip6gretap0: left allmulticast mode [ 154.565866][T15108] tipc: Enabled bearer , priority 0 [ 154.587092][T15108] syzkaller0: MTU too low for tipc bearer [ 154.592907][T15108] tipc: Disabling bearer [ 154.646933][T15121] random: crng reseeded on system resumption [ 154.672665][T15128] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2384'. [ 154.797822][T15182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15182 comm=syz.3.2389 [ 155.087911][T15225] loop5: detected capacity change from 0 to 512 [ 155.095514][T15225] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 155.135792][T15225] EXT4-fs (loop5): invalid journal inode [ 155.150140][T15235] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 155.159978][T15225] EXT4-fs (loop5): can't get journal size [ 155.166464][T15225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 155.185695][T15225] System zones: 1-12, 13-13 [ 155.195745][T15225] EXT4-fs (loop5): 1 truncate cleaned up [ 155.202603][T15225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.216220][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2407'. [ 155.238952][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.629849][T15274] lo speed is unknown, defaulting to 1000 [ 155.855853][T15304] 9pnet: Could not find request transport: f0x0000000000000006 [ 156.136338][T15319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'. [ 156.312755][T15330] loop5: detected capacity change from 0 to 512 [ 156.340002][T15330] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.380957][T15330] EXT4-fs (loop5): mount failed [ 156.497458][T15347] lo speed is unknown, defaulting to 1000 [ 156.716800][T15379] loop5: detected capacity change from 0 to 512 [ 156.728965][T15379] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.743066][T15379] EXT4-fs (loop5): orphan cleanup on readonly fs [ 156.755952][T15379] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.2440: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 156.776960][T15379] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.2440: Bad quota inode: 3, type: 0 [ 156.789267][T15379] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 156.805086][T15379] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 156.814875][T15379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.854981][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.876608][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 156.876623][ T29] audit: type=1326 audit(2000000112.111:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 156.921018][ T29] audit: type=1326 audit(2000000112.148:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 156.951134][ T29] audit: type=1326 audit(2000000112.185:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.001161][ T29] audit: type=1326 audit(2000000112.213:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.025227][ T29] audit: type=1326 audit(2000000112.222:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.048806][ T29] audit: type=1326 audit(2000000112.231:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.077747][ T29] audit: type=1326 audit(2000000112.305:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.103302][ T29] audit: type=1326 audit(2000000112.324:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.131293][ T29] audit: type=1326 audit(2000000112.342:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.207729][ T29] audit: type=1326 audit(2000000112.379:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 157.248654][T15404] 9pnet: p9_errstr2errno: server reported unknown error [ 157.696744][T15443] netlink: 'syz.2.2457': attribute type 15 has an invalid length. [ 157.704806][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2457'. [ 157.860954][T15455] netlink: 'syz.4.2463': attribute type 7 has an invalid length. [ 157.869085][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 157.922083][T15459] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2464'. [ 158.432555][T15503] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2477'. [ 158.801251][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 158.810356][T15538] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2496'. [ 158.975887][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 158.985109][T15548] IPVS: Error joining to the multicast group [ 160.042203][T15687] loop5: detected capacity change from 0 to 1024 [ 160.050483][T15687] EXT4-fs: Ignoring removed orlov option [ 160.074434][T15687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.123413][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.694472][T15731] lo speed is unknown, defaulting to 1000 [ 161.022259][T15795] __nla_validate_parse: 17 callbacks suppressed [ 161.022277][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2567'. [ 163.101205][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 163.101223][ T29] audit: type=1326 audit(2000000373.860:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.137978][ T29] audit: type=1326 audit(2000000373.860:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.162910][ T29] audit: type=1326 audit(2000000373.860:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.187097][ T29] audit: type=1326 audit(2000000373.860:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.211118][ T29] audit: type=1326 audit(2000000373.860:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.235112][ T29] audit: type=1326 audit(2000000373.860:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.258990][ T29] audit: type=1326 audit(2000000373.860:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.3.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d388febe9 code=0x7ffc0000 [ 163.296208][ T29] audit: type=1400 audit(2000000374.045:4470): avc: denied { read } for pid=5482 comm="kworker/0:9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32643 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 166.633805][T16041] loop5: detected capacity change from 0 to 512 [ 166.655076][T16041] EXT4-fs (loop5): too many log groups per flexible block group [ 166.663057][T16041] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 166.671227][T16041] EXT4-fs (loop5): mount failed [ 166.699979][ T29] audit: type=1326 audit(2000000377.183:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16047 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 166.724466][ T29] audit: type=1326 audit(2000000377.183:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16047 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97e3e8ebe9 code=0x7ffc0000 [ 169.111782][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 169.111802][ T29] audit: type=1326 audit(2000000379.389:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 169.142072][ T29] audit: type=1326 audit(2000000379.389:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 169.165920][ T29] audit: type=1326 audit(2000000379.398:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 169.189955][ T29] audit: type=1326 audit(2000000379.398:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 169.214044][ T29] audit: type=1326 audit(2000000379.398:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 169.238045][ T29] audit: type=1326 audit(2000000379.398:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 169.262134][ T29] audit: type=1326 audit(2000000379.398:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dc49ebe9 code=0x7ffc0000 [ 170.413050][ T29] audit: type=1326 audit(2000000380.608:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 170.484948][ T29] audit: type=1326 audit(2000000380.608:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 170.509034][ T29] audit: type=1326 audit(2000000380.608:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 170.567560][T16195] ref_ctr increment failed for inode: 0x4a1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103df3f40 [ 170.907814][T16209] netlink: zone id is out of range [ 170.913518][T16209] netlink: zone id is out of range [ 170.918949][T16209] netlink: zone id is out of range [ 170.924261][T16209] netlink: zone id is out of range [ 170.929553][T16209] netlink: zone id is out of range [ 170.935245][T16209] netlink: zone id is out of range [ 170.940660][T16209] netlink: zone id is out of range [ 170.947316][T16209] netlink: zone id is out of range [ 170.952857][T16209] netlink: zone id is out of range [ 170.958361][T16209] netlink: zone id is out of range [ 171.193962][T16218] lo speed is unknown, defaulting to 1000 [ 171.988058][T16268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16268 comm=syz.2.2706 [ 172.003918][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 172.860197][T16331] ref_ctr increment failed for inode: 0xb6d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810c758000 [ 173.048810][T16345] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 173.055506][T16345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.063212][T16345] vhci_hcd vhci_hcd.0: Device attached [ 173.107633][T16350] lo speed is unknown, defaulting to 1000 [ 173.252473][T16347] vhci_hcd: connection closed [ 173.253372][T12052] vhci_hcd: stop threads [ 173.262559][T12052] vhci_hcd: release socket [ 173.267128][T12052] vhci_hcd: disconnect device [ 173.273419][ T5482] vhci_hcd: vhci_device speed not set [ 173.319156][T16343] lo speed is unknown, defaulting to 1000 [ 173.508740][T16386] lo speed is unknown, defaulting to 1000 [ 173.535688][T16390] uprobe: syz.2.2727:16390 failed to unregister, leaking uprobe [ 173.845081][T16423] loop5: detected capacity change from 0 to 512 [ 173.864946][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 173.890461][T16423] EXT4-fs (loop5): too many log groups per flexible block group [ 173.898447][T16423] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 173.916643][T16423] EXT4-fs (loop5): mount failed [ 173.992889][T16444] ref_ctr increment failed for inode: 0xb60 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103df4500 [ 174.215007][T16448] lo speed is unknown, defaulting to 1000 [ 174.488202][T16481] lo speed is unknown, defaulting to 1000 [ 174.514332][T16494] lo speed is unknown, defaulting to 1000 [ 174.537472][T16529] uprobe: syz.5.2744:16529 failed to unregister, leaking uprobe [ 174.589788][T16481] chnl_net:caif_netlink_parms(): no params data found [ 174.656366][T16481] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.663866][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.671448][T16481] bridge_slave_0: entered allmulticast mode [ 174.678042][T16481] bridge_slave_0: entered promiscuous mode [ 174.685379][T16481] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.692641][T16481] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.700247][T16481] bridge_slave_1: entered allmulticast mode [ 174.706872][T16481] bridge_slave_1: entered promiscuous mode [ 174.749965][T16481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.761220][T16481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.790702][T16481] team0: Port device team_slave_0 added [ 174.797790][T16481] team0: Port device team_slave_1 added [ 174.819175][T16481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.826493][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.853042][T16481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.866391][T16481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.873454][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.899981][T16481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.943085][T16481] hsr_slave_0: entered promiscuous mode [ 174.949315][T16481] hsr_slave_1: entered promiscuous mode [ 174.961414][T16481] debugfs: 'hsr0' already exists in 'hsr' [ 174.967362][T16481] Cannot create hsr debugfs directory [ 175.069076][T16481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.077738][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 175.077754][ T29] audit: type=1400 audit(2000000384.909:4547): avc: denied { bind } for pid=16852 comm="syz.3.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.081461][T16481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.084101][ T29] audit: type=1400 audit(2000000384.909:4548): avc: denied { name_bind } for pid=16852 comm="syz.3.2750" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 175.132360][ T29] audit: type=1400 audit(2000000384.909:4549): avc: denied { node_bind } for pid=16852 comm="syz.3.2750" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 175.159546][T16858] loop5: detected capacity change from 0 to 512 [ 175.170882][T16481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.186391][T16481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.195038][ T29] audit: type=1400 audit(2000000385.020:4550): avc: denied { write } for pid=16852 comm="syz.3.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.224392][T16858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.246485][T16858] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.266350][T16481] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.273471][T16481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.278248][T16858] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2749: corrupted inode contents [ 175.280980][T16481] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.300555][T16481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.318077][T16878] ref_ctr increment failed for inode: 0xae1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103df7300 [ 175.333252][T16858] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2749: mark_inode_dirty error [ 175.349222][T16481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.357469][T16858] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2749: corrupted inode contents [ 175.376187][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.377535][T16858] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2749: mark_inode_dirty error [ 175.396395][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.404617][T16858] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2749: corrupted inode contents [ 175.420484][T16858] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2749: mark_inode_dirty error [ 175.433179][T16858] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2749: corrupted inode contents [ 175.448339][T16858] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2749: corrupted inode contents [ 175.462581][T16858] EXT4-fs error (device loop5): add_dirent_to_buf:2153: inode #2: comm syz.5.2749: mark_inode_dirty error [ 175.464957][T16481] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.483863][ T29] audit: type=1400 audit(2000000385.296:4551): avc: denied { rename } for pid=16857 comm="syz.5.2749" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.515336][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.522626][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.535866][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.543049][ T4115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.584574][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.619139][T16890] lo speed is unknown, defaulting to 1000 [ 175.627760][ T29] audit: type=1326 audit(2000000385.416:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 175.652004][ T29] audit: type=1326 audit(2000000385.416:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 175.675729][ T29] audit: type=1326 audit(2000000385.416:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 175.787365][ T29] audit: type=1326 audit(2000000385.472:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3969cbebe9 code=0x7ffc0000 [ 175.824196][T16890] uprobe: syz.3.2756:16890 failed to unregister, leaking uprobe [ 175.840051][T16481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.106096][T16481] veth0_vlan: entered promiscuous mode [ 176.121227][T16481] veth1_vlan: entered promiscuous mode [ 176.146198][T16481] veth0_macvtap: entered promiscuous mode [ 176.156392][T16481] veth1_macvtap: entered promiscuous mode [ 176.172670][T16481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.187700][T16481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.202098][ T4076] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.212053][ T4076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.223691][ T4076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.250566][ T4076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.272165][ T29] audit: type=1400 audit(2000000386.016:4556): avc: denied { associate } for pid=16481 comm="syz-executor" name="syz6" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 176.328731][T16945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16945 comm=syz.5.2771 [ 176.350070][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2742'. [ 176.352858][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'. [ 176.503837][T16982] lo speed is unknown, defaulting to 1000 [ 176.519745][T16987] loop5: detected capacity change from 0 to 512 [ 176.554855][T16987] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.564168][T16987] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 176.608069][T16987] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 176.631693][T16987] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 176.643432][T16987] System zones: 0-2, 18-18, 34-35 [ 176.673176][T16987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.775173][T17014] loop6: detected capacity change from 0 to 512 [ 176.782212][T17014] EXT4-fs: Ignoring removed bh option [ 176.804463][T17014] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 176.815120][T17014] EXT4-fs (loop6): invalid journal inode [ 176.821187][T17014] EXT4-fs (loop6): can't get journal size [ 176.822095][T11599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.842029][T17014] EXT4-fs (loop6): 1 truncate cleaned up [ 176.859302][T17014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.915563][T17019] SELinux: failed to load policy [ 177.010005][T16481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.060697][T17031] loop6: detected capacity change from 0 to 512 [ 177.099316][T17031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.122206][T17031] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.130222][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2776'. [ 177.155702][T17031] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2769: corrupted inode contents [ 177.175037][T17031] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2769: mark_inode_dirty error [ 177.191860][T17031] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2769: corrupted inode contents [ 177.212378][T17031] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2769: mark_inode_dirty error [ 177.243667][T17031] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2769: corrupted inode contents [ 177.277816][T17031] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2769: mark_inode_dirty error [ 177.301442][T17031] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2769: corrupted inode contents [ 177.337623][T17044] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2769: corrupted inode contents [ 177.362144][T17044] EXT4-fs error (device loop6): add_dirent_to_buf:2153: inode #2: comm syz.6.2769: mark_inode_dirty error [ 177.381485][ T4077] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 177.408798][ T4077] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 177.418630][T16481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.429315][ T4077] ip6gretap1 (unregistering): left promiscuous mode [ 177.436121][ T4077] ip6gretap1 (unregistering): left allmulticast mode [ 177.526196][T17076] uprobe: syz.6.2779:17076 failed to unregister, leaking uprobe [ 177.619130][ T4077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.628931][ T4077] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 177.638105][ T4077] bond0 (unregistering): Released all slaves [ 177.646545][ T4077] bond1 (unregistering): Released all slaves [ 177.655273][ T4077] bond2 (unregistering): Released all slaves [ 177.678608][T17043] lo speed is unknown, defaulting to 1000 [ 177.691661][T17075] lo speed is unknown, defaulting to 1000 [ 177.716984][ T4077] hsr_slave_0: left promiscuous mode [ 177.722749][ T4077] hsr_slave_1: left promiscuous mode [ 177.763433][ T4077] team0 (unregistering): Port device team_slave_1 removed [ 177.774344][ T4077] team0 (unregistering): Port device team_slave_0 removed [ 177.875784][T17043] chnl_net:caif_netlink_parms(): no params data found [ 177.921675][T17043] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.928790][T17043] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.936623][T17043] bridge_slave_0: entered allmulticast mode [ 177.943698][T17043] bridge_slave_0: entered promiscuous mode [ 177.951181][T17043] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.958441][T17043] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.965910][T17043] bridge_slave_1: entered allmulticast mode [ 177.972731][T17043] bridge_slave_1: entered promiscuous mode [ 177.992125][T17043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.003004][T17043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.062318][T17043] team0: Port device team_slave_0 added [ 178.069374][T17043] team0: Port device team_slave_1 added [ 178.080183][T17304] loop6: detected capacity change from 0 to 1024 [ 178.088015][T17304] EXT4-fs: Ignoring removed nobh option [ 178.094833][T17304] EXT4-fs: Ignoring removed bh option [ 178.108161][T17304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.124430][T17043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.131761][T17043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.158764][T17043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.170978][T17043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.178010][T17043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.192502][T17304] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2781: Allocating blocks 385-513 which overlap fs metadata [ 178.204578][T17043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.251800][T17343] EXT4-fs (loop6): pa ffff8881004b7bd0: logic 16, phys. 129, len 24 [ 178.260339][T17343] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 178.304312][T17342] bond4: entered promiscuous mode [ 178.309438][T17342] bond4: entered allmulticast mode [ 178.315433][T17342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.326377][T17342] bond4 (unregistering): Released all slaves [ 178.349736][T16481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.389367][T17043] hsr_slave_0: entered promiscuous mode [ 178.395863][T17043] hsr_slave_1: entered promiscuous mode [ 178.403866][T17043] debugfs: 'hsr0' already exists in 'hsr' [ 178.409842][T17043] Cannot create hsr debugfs directory [ 178.442085][T12052] ================================================================== [ 178.450898][T12052] BUG: KCSAN: data-race in alloc_pid / copy_process [ 178.457541][T12052] [ 178.459969][T12052] read-write to 0xffffffff8685fc28 of 4 bytes by task 4104 on cpu 1: [ 178.468487][T12052] alloc_pid+0x539/0x720 [ 178.472796][T12052] copy_process+0xe25/0x2000 [ 178.477435][T12052] kernel_clone+0x16c/0x5c0 [ 178.482327][T12052] user_mode_thread+0x7d/0xb0 [ 178.487042][T12052] call_usermodehelper_exec_work+0x41/0x160 [ 178.493154][T12052] process_scheduled_works+0x4ce/0x9d0 [ 178.498635][T12052] worker_thread+0x582/0x770 [ 178.503254][T12052] kthread+0x486/0x510 [ 178.507424][T12052] ret_from_fork+0xda/0x150 [ 178.512148][T12052] ret_from_fork_asm+0x1a/0x30 [ 178.517191][T12052] [ 178.519531][T12052] read to 0xffffffff8685fc28 of 4 bytes by task 12052 on cpu 0: [ 178.527479][T12052] copy_process+0x14a6/0x2000 [ 178.532269][T12052] kernel_clone+0x16c/0x5c0 [ 178.536875][T12052] user_mode_thread+0x7d/0xb0 [ 178.541667][T12052] call_usermodehelper_exec_work+0x41/0x160 [ 178.547759][T12052] process_scheduled_works+0x4ce/0x9d0 [ 178.553417][T12052] worker_thread+0x582/0x770 [ 178.558120][T12052] kthread+0x486/0x510 [ 178.562218][T12052] ret_from_fork+0xda/0x150 [ 178.566900][T12052] ret_from_fork_asm+0x1a/0x30 [ 178.571767][T12052] [ 178.574109][T12052] value changed: 0x8000012b -> 0x8000012c [ 178.579935][T12052] [ 178.582538][T12052] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.588832][T12052] CPU: 0 UID: 0 PID: 12052 Comm: kworker/u8:69 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.600939][T12052] Tainted: [W]=WARN [ 178.604936][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.615620][T12052] Workqueue: events_unbound call_usermodehelper_exec_work [ 178.623058][T12052] ================================================================== [ 178.735524][T17043] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 178.765279][T17043] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 178.775733][T17043] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 179.580288][ T4104] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.589209][ T4104] bond_slave_0: left promiscuous mode [ 179.595448][ T4104] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 179.604253][ T4104] dummy0: left promiscuous mode [ 179.609382][ T4104] $Hÿ (unregistering): Released all slaves [ 179.618756][ T4104]  (unregistering): (slave veth3): Releasing active interface [ 179.627763][ T4104]  (unregistering): Released all slaves [ 179.698784][ T4104] tipc: Disabling bearer [ 179.703956][ T4104] tipc: Left network mode [ 179.712385][ T4104] hsr_slave_0: left promiscuous mode [ 179.744480][ T4104] team0 (unregistering): Port device team_slave_1 removed [ 179.754340][ T4104] team0 (unregistering): Port device team_slave_0 removed [ 179.927101][ T4104] IPVS: stop unused estimator thread 0... [ 180.188519][ T4104] bridge_slave_1: left allmulticast mode [ 180.194375][ T4104] bridge_slave_1: left promiscuous mode [ 180.201104][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.208996][ T4104] bridge_slave_0: left allmulticast mode [ 180.214929][ T4104] bridge_slave_0: left promiscuous mode [ 180.220832][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.306069][ T4104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.316056][ T4104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.325818][ T4104] bond0 (unregistering): Released all slaves [ 180.362894][ T4104] hsr_slave_0: left promiscuous mode [ 180.368733][ T4104] hsr_slave_1: left promiscuous mode [ 180.375119][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.383147][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.416990][ T4104] team0 (unregistering): Port device team_slave_1 removed [ 180.426822][ T4104] team0 (unregistering): Port device team_slave_0 removed [ 180.795160][ T4104] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.870328][ T4104] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.956815][ T4104] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.000826][ T4104] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.065984][ T4104] bridge_slave_1: left allmulticast mode [ 181.071668][ T4104] bridge_slave_1: left promiscuous mode [ 181.077515][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.085483][ T4104] bridge_slave_0: left allmulticast mode [ 181.091150][ T4104] bridge_slave_0: left promiscuous mode [ 181.097081][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.173562][ T4104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.184267][ T4104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.194452][ T4104] bond0 (unregistering): Released all slaves [ 181.250025][ T4104] hsr_slave_0: left promiscuous mode [ 181.255901][ T4104] hsr_slave_1: left promiscuous mode [ 181.262193][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.270352][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.278039][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.285672][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.296251][ T4104] veth1_macvtap: left promiscuous mode [ 181.302163][ T4104] veth0_macvtap: left promiscuous mode [ 181.307949][ T4104] veth1_vlan: left promiscuous mode [ 181.313360][ T4104] veth0_vlan: left promiscuous mode [ 181.375971][ T4104] team0 (unregistering): Port device team_slave_1 removed [ 181.386637][ T4104] team0 (unregistering): Port device team_slave_0 removed