last executing test programs: 1.596454871s ago: executing program 1 (id=1293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 1.595225701s ago: executing program 2 (id=1295): writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20040054) 1.591736821s ago: executing program 1 (id=1296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) 1.430476564s ago: executing program 2 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000deffffff0000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.377173729s ago: executing program 0 (id=1307): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.259073698s ago: executing program 0 (id=1310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200028bd7000fbdbdf2502000000090001007266646e6f00000005000000000000002f01b04a"], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x80011) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d332000000f7ffffff00000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000a00000000000000000000004800020063621e2085a9406328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/321], 0x184}}, 0x0) 1.247045279s ago: executing program 2 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.187993814s ago: executing program 0 (id=1312): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.142447498s ago: executing program 0 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) 833.562533ms ago: executing program 4 (id=1318): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 738.176771ms ago: executing program 1 (id=1319): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) utime(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 737.984481ms ago: executing program 4 (id=1320): socket(0x10, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file7\x00', 0x8000030f) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/171, 0xab) 714.699052ms ago: executing program 4 (id=1321): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 714.037472ms ago: executing program 1 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) 664.256386ms ago: executing program 1 (id=1323): bind$inet6(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x801b, 0x0) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x48804}, 0x4000000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 531.164688ms ago: executing program 3 (id=1324): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 451.368744ms ago: executing program 4 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup3(r3, r2, 0x0) accept4$unix(r4, 0xfffffffffffffffe, 0x0, 0x0) 418.294956ms ago: executing program 3 (id=1326): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 413.499937ms ago: executing program 4 (id=1327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) 391.422708ms ago: executing program 3 (id=1328): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 390.631478ms ago: executing program 2 (id=1329): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = open(0x0, 0x400141042, 0x0) pwritev2(r3, 0x0, 0x0, 0x0, 0x0, 0x2) 378.35739ms ago: executing program 4 (id=1330): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 341.976373ms ago: executing program 3 (id=1331): socket(0x1e, 0x4, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) tkill(r0, 0x7) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)}, {&(0x7f00000001c0)="2d2a71261177cf1a", 0x8}], 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000800)) 232.110742ms ago: executing program 0 (id=1332): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@loopback, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x33}, 0xa, @in=@remote, 0x0, 0x1}}, 0xe8) ptrace$poke(0x5, 0x0, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 163.144477ms ago: executing program 0 (id=1333): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) openat(0xffffffffffffff9c, 0x0, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 162.849547ms ago: executing program 1 (id=1334): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 118.026661ms ago: executing program 3 (id=1335): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 117.126001ms ago: executing program 2 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 102.560692ms ago: executing program 3 (id=1337): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x19b1, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x40000004}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) 0s ago: executing program 2 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) kernel console output (not intermixed with test programs): , clusters badly computed (6 != 5) [ 49.041776][ T29] audit: type=1400 audit(1755073271.936:1286): avc: denied { write } for pid=4710 comm="syz.0.466" path="socket:[11004]" dev="sockfs" ino=11004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.251270][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.261709][ T4736] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 49.271509][ T4736] 0ªî{X¹¦: entered allmulticast mode [ 49.277449][ T4736] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 49.374328][ T4739] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.508816][ T4742] geneve2: entered promiscuous mode [ 49.514076][ T4742] geneve2: entered allmulticast mode [ 49.524696][ T4121] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.541255][ T4121] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.570226][ T4121] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.593937][ T4121] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.607556][ T4747] vlan1 (unregistering): left promiscuous mode [ 49.614087][ T4747] bridge0: left promiscuous mode [ 49.619646][ T4747] bridge1: port 1(vlan1) entered disabled state [ 49.844151][ T4755] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 49.856931][ T4755] bond2: entered promiscuous mode [ 49.862386][ T4755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.878262][ T4755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.886638][ T4755] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 49.897373][ T4755] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 49.909927][ T4755] bond2: (slave wireguard0): making interface the new active one [ 49.917959][ T4755] wireguard0: entered promiscuous mode [ 49.925505][ T4755] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 49.926063][ T4758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.941766][ T4758] IPv6: NLM_F_CREATE should be set when creating new route [ 49.948988][ T4758] IPv6: NLM_F_CREATE should be set when creating new route [ 49.958839][ T4758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.970031][ T4758] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 49.987304][ T4758] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 50.213274][ T4763] SELinux: failed to load policy [ 50.362209][ T4767] syzkaller0: entered allmulticast mode [ 50.368296][ T4767] syzkaller0: entered promiscuous mode [ 50.376005][ T4767] syzkaller0 (unregistering): left allmulticast mode [ 50.383784][ T4767] syzkaller0 (unregistering): left promiscuous mode [ 50.541043][ T4770] loop3: detected capacity change from 0 to 1764 [ 50.597339][ T4779] __nla_validate_parse: 3 callbacks suppressed [ 50.597358][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 50.620738][ T4779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.628304][ T4779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.637700][ T4779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.645303][ T4779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.707396][ T4790] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 50.729760][ T4790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.013613][ T4806] loop4: detected capacity change from 0 to 1024 [ 51.031876][ T4806] EXT4-fs: Ignoring removed orlov option [ 51.053352][ T4806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.264622][ T4825] veth0_to_team: entered promiscuous mode [ 51.337037][ T4827] loop3: detected capacity change from 0 to 128 [ 51.352712][ T4827] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.383002][ T4827] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.412474][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.424473][ T4121] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.653733][ T4840] loop0: detected capacity change from 0 to 8192 [ 51.711408][ T4840] loop0: p1 p2 < > p3 p4 < p5 > [ 51.725424][ T4840] loop0: partition table partially beyond EOD, truncated [ 51.756168][ T4840] loop0: p1 size 100663296 extends beyond EOD, truncated [ 51.788015][ T4840] loop0: p2 start 591104 is beyond EOD, truncated [ 51.794705][ T4840] loop0: p3 start 33572980 is beyond EOD, truncated [ 51.815382][ T4844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 51.837801][ T4840] loop0: p5 size 100663296 extends beyond EOD, truncated [ 51.935833][ T4849] loop0: detected capacity change from 0 to 512 [ 52.006555][ T4850] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 52.076635][ T4849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.268641][ T4849] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.324685][ T4865] bridge: RTM_NEWNEIGH with invalid ether address [ 52.351613][ T4849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.523: corrupted inode contents [ 52.362316][ T4868] loop4: detected capacity change from 0 to 128 [ 52.385884][ T4868] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.409437][ T4849] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.523: mark_inode_dirty error [ 52.431659][ T4868] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.452461][ T4849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.523: corrupted inode contents [ 52.465178][ T4849] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.523: mark_inode_dirty error [ 52.465595][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 52.503253][ T4872] bridge: RTM_NEWNEIGH with invalid ether address [ 52.519167][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.587122][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.645591][ T4885] loop4: detected capacity change from 0 to 128 [ 52.828073][ T4900] netlink: 'syz.2.542': attribute type 10 has an invalid length. [ 52.841717][ T4900] team0: Port device dummy0 added [ 52.852972][ T4900] netlink: 'syz.2.542': attribute type 10 has an invalid length. [ 52.865680][ T4900] team0: Port device dummy0 removed [ 52.875000][ T4900] dummy0: entered promiscuous mode [ 52.881084][ T4900] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 52.914053][ T4907] wg2: left promiscuous mode [ 52.919178][ T4907] wg2: left allmulticast mode [ 52.945904][ T4907] wg2: entered promiscuous mode [ 52.951101][ T4907] wg2: entered allmulticast mode [ 53.149253][ T4920] netlink: 96 bytes leftover after parsing attributes in process `syz.3.549'. [ 53.288235][ T4930] loop3: detected capacity change from 0 to 512 [ 53.301906][ T4930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.314774][ T4930] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.330580][ T4930] EXT4-fs (loop3): shut down requested (0) [ 53.367296][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 53.367312][ T29] audit: type=1326 audit(1755073276.296:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16b1d85ba7 code=0x7ffc0000 [ 53.404373][ T29] audit: type=1326 audit(1755073276.296:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16b1d2add9 code=0x7ffc0000 [ 53.427996][ T29] audit: type=1326 audit(1755073276.296:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f16b1d8ebe9 code=0x7ffc0000 [ 53.452545][ T29] audit: type=1326 audit(1755073276.316:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16b1d85ba7 code=0x7ffc0000 [ 53.476372][ T29] audit: type=1326 audit(1755073276.316:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16b1d2add9 code=0x7ffc0000 [ 53.499851][ T29] audit: type=1326 audit(1755073276.316:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f16b1d8ebe9 code=0x7ffc0000 [ 53.523616][ T29] audit: type=1326 audit(1755073276.316:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16b1d85ba7 code=0x7ffc0000 [ 53.547013][ T29] audit: type=1326 audit(1755073276.316:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16b1d2add9 code=0x7ffc0000 [ 53.570610][ T29] audit: type=1326 audit(1755073276.316:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f16b1d8ebe9 code=0x7ffc0000 [ 53.594464][ T29] audit: type=1326 audit(1755073276.336:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16b1d85ba7 code=0x7ffc0000 [ 53.619215][ T4939] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.636650][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.663822][ T4939] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.676015][ T4941] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.699924][ T4939] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.730514][ T4941] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.775326][ T4939] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.806149][ T4950] tipc: Started in network mode [ 53.811524][ T4950] tipc: Node identity ac14140f, cluster identity 4711 [ 53.818627][ T4950] tipc: New replicast peer: 255.255.255.255 [ 53.824852][ T4950] tipc: Enabled bearer , priority 10 [ 53.833716][ T4941] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.898538][ T381] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.921312][ T381] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.935792][ T381] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.944397][ T381] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.959404][ T4941] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.036116][ T4067] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.054266][ T4067] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.066161][ T4964] loop4: detected capacity change from 0 to 1024 [ 54.080236][ T4067] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.094099][ T4067] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.132254][ T4973] loop1: detected capacity change from 0 to 512 [ 54.133679][ T4975] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 54.140354][ T4973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.149483][ T4964] EXT4-fs: Ignoring removed nobh option [ 54.179359][ T4973] EXT4-fs (loop1): 1 truncate cleaned up [ 54.185797][ T4973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.196837][ T4964] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.221003][ T4964] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.567: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 54.225614][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.246917][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.248975][ T4964] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.567: couldn't read orphan inode 11 (err -117) [ 54.268805][ T4964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.284729][ T4975] bond0: entered promiscuous mode [ 54.289928][ T4975] bond0: entered allmulticast mode [ 54.295354][ T4975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.324591][ T4964] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.567: Invalid block bitmap block 0 in block_group 0 [ 54.340196][ T4975] bridge1: entered promiscuous mode [ 54.345812][ T4975] bridge1: entered allmulticast mode [ 54.367350][ T4964] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.567: Failed to acquire dquot type 0 [ 54.380649][ T4975] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 54.389304][ T381] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.413051][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:4: Invalid inode table block 8589934593 in block_group 0 [ 54.428324][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.429345][ T4983] loop3: detected capacity change from 0 to 1764 [ 54.439566][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.487058][ T4983] ISOFS: Unable to identify CD-ROM format. [ 54.498968][ T381] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.536547][ T4991] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 54.643277][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 54.686343][ T5010] loop3: detected capacity change from 0 to 512 [ 54.716407][ T5010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.730721][ T5010] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.745342][ T5010] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.584: corrupted inode contents [ 54.773340][ T5010] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.584: mark_inode_dirty error [ 54.792757][ T5010] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.584: corrupted inode contents [ 54.806760][ T5010] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.584: mark_inode_dirty error [ 54.827960][ T5012] wg2: entered promiscuous mode [ 54.832931][ T5012] wg2: entered allmulticast mode [ 54.872993][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 54.938524][ T10] tipc: Node number set to 2886997007 [ 54.947736][ T5029] loop0: detected capacity change from 0 to 164 [ 54.956244][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.989710][ T5029] syz.0.592: attempt to access beyond end of device [ 54.989710][ T5029] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.004061][ T5029] syz.0.592: attempt to access beyond end of device [ 55.004061][ T5029] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.044660][ T5035] netlink: 'syz.3.596': attribute type 3 has an invalid length. [ 55.056686][ T5039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 55.142193][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 55.151451][ T5051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.169749][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.338033][ T5064] syz.3.607: attempt to access beyond end of device [ 55.338033][ T5064] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 55.353929][ T5064] FAT-fs (loop7): unable to read boot sector [ 55.445547][ T5070] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 55.485746][ T5070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 55.517692][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 55.531639][ T5070] vlan2: entered promiscuous mode [ 55.536851][ T5070] bond3: entered promiscuous mode [ 55.557398][ T5070] dummy0: entered promiscuous mode [ 55.588362][ T5070] bond3: (slave dummy0): making interface the new active one [ 55.596607][ T5076] loop3: detected capacity change from 0 to 1024 [ 55.611840][ T5070] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 55.615919][ T5076] EXT4-fs: Ignoring removed nobh option [ 55.628325][ T5076] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.654350][ T5076] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.610: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 55.675374][ T5076] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.610: couldn't read orphan inode 11 (err -117) [ 55.689054][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.738205][ T5076] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.610: Invalid block bitmap block 0 in block_group 0 [ 55.753754][ T5076] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.610: Failed to acquire dquot type 0 [ 55.790647][ T12] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:0: Invalid inode table block 8589934593 in block_group 0 [ 55.807088][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.067463][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 56.156285][ T9] Process accounting resumed [ 56.181954][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 56.192091][ T5101] veth1_macvtap: left promiscuous mode [ 56.400355][ T5108] loop4: detected capacity change from 0 to 1024 [ 56.409160][ T5108] EXT4-fs: inline encryption not supported [ 56.428281][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.514731][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.585290][ T5118] loop4: detected capacity change from 0 to 512 [ 56.605976][ T5118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.624666][ T5118] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.626: corrupted inode contents [ 56.637159][ T5118] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.626: mark_inode_dirty error [ 56.650077][ T5118] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.626: corrupted inode contents [ 56.673663][ T5118] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.626: mark_inode_dirty error [ 56.702949][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 56.750749][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.790831][ T5141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.633'. [ 56.820475][ T5141] netlink: 'syz.0.633': attribute type 10 has an invalid length. [ 56.828266][ T5141] netlink: 55 bytes leftover after parsing attributes in process `syz.0.633'. [ 57.101736][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.110234][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.173972][ T5160] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 57.181678][ T5160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.645'. [ 57.652554][ T5163] loop3: detected capacity change from 0 to 512 [ 57.659420][ T5163] EXT4-fs: Ignoring removed bh option [ 57.665268][ T5163] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.674474][ T5163] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 57.683641][ T5163] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 57.693436][ T5163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 57.702081][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.724400][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.853491][ T5177] loop1: detected capacity change from 0 to 512 [ 57.862710][ T5177] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.871567][ T5177] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 57.883673][ T5177] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.650: attempt to clear invalid blocks 2 len 1 [ 57.897434][ T5177] EXT4-fs (loop1): Remounting filesystem read-only [ 57.907223][ T5177] EXT4-fs (loop1): 1 truncate cleaned up [ 57.913978][ T5177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.957237][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.059096][ T5197] netlink: 96 bytes leftover after parsing attributes in process `syz.1.659'. [ 58.282834][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 58.303535][ T5210] netlink: 'syz.0.672': attribute type 21 has an invalid length. [ 58.308118][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.333694][ T5213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.344533][ T5210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.672'. [ 58.401184][ T5219] netem: change failed [ 58.456774][ T5221] syzkaller0: entered promiscuous mode [ 58.462462][ T5221] syzkaller0: entered allmulticast mode [ 58.491917][ T5223] ALSA: seq fatal error: cannot create timer (-19) [ 58.698638][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 58.698653][ T29] audit: type=1326 audit(58.666:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 58.727918][ T29] audit: type=1326 audit(58.666:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f959f31add9 code=0x7ffc0000 [ 58.750719][ T29] audit: type=1326 audit(58.666:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 58.773718][ T29] audit: type=1326 audit(58.666:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f959f31add9 code=0x7ffc0000 [ 58.796792][ T29] audit: type=1326 audit(58.666:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959f37ebe9 code=0x7ffc0000 [ 58.819805][ T29] audit: type=1326 audit(58.676:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959f37ebe9 code=0x7ffc0000 [ 58.843146][ T29] audit: type=1326 audit(58.676:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f959f37ebe9 code=0x7ffc0000 [ 58.866224][ T29] audit: type=1326 audit(58.676:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 58.889154][ T29] audit: type=1326 audit(58.676:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f959f31add9 code=0x7ffc0000 [ 58.912235][ T29] audit: type=1326 audit(58.676:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 58.999739][ T5249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.678'. [ 59.255380][ T5283] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.265420][ T5283] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 59.441016][ T5283] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.450982][ T5283] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 59.543005][ T5283] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.553243][ T5283] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 59.605201][ T5283] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.615351][ T5283] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 59.675611][ T4110] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 59.684067][ T4110] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 59.701173][ T4110] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 59.709578][ T4110] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 59.718073][ T4110] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 59.726502][ T4110] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 59.737661][ T4110] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 59.745969][ T4110] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 59.870439][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.879293][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.061991][ T5328] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.119849][ T5328] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.199795][ T5328] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.290179][ T5328] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.344845][ T4110] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.356083][ T4110] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.370077][ T4110] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.381192][ T4110] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.397732][ T5331] netlink: 'syz.2.706': attribute type 3 has an invalid length. [ 60.496039][ T5349] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.550605][ T5349] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.673957][ T5349] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.730187][ T5349] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.784049][ T5365] loop1: detected capacity change from 0 to 256 [ 60.790895][ T5365] vfat: Unknown parameter '?—÷æƒÁ[ÀJÌ /ͨ[ë³i`$ðå&¢u“¬î+ 8eUßéí7ùÍY· ÷v¯ U¥½ Ö›>å—^úÄÑ”&͘€g£x{3G醾:ÏMµåóoÍ4<9ß³D‹Æ¿±ž´ÿ"صaÃB©Õ.Óך‹Ç[ýÛíªM«äzÑSí%ø+as CâC8‹Ç«(â÷s×5ǺÉÑl°F„AÁ󗑬.¥ÂÐãa¢†žøpèt˜A¥™âX¿' [ 60.818520][ T4110] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830302][ T4098] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.845968][ T4098] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.867474][ T4098] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.898062][ T5377] wireguard0: entered promiscuous mode [ 60.903627][ T5377] wireguard0: entered allmulticast mode [ 60.956586][ T5385] bond1: entered promiscuous mode [ 60.962006][ T5385] bond1: entered allmulticast mode [ 60.971532][ T5385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.981478][ T5385] bond1 (unregistering): Released all slaves [ 61.075044][ T5390] __nla_validate_parse: 13 callbacks suppressed [ 61.075089][ T5390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.728'. [ 61.095035][ T5390] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 61.102856][ T5390] netlink: 55 bytes leftover after parsing attributes in process `syz.2.728'. [ 61.106451][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.120747][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.192067][ T5397] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 61.199817][ T5397] netlink: 224 bytes leftover after parsing attributes in process `syz.0.739'. [ 61.245269][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 61.254753][ T5401] veth1_macvtap: left promiscuous mode [ 61.316695][ T5403] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.370447][ T5403] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.460578][ T5403] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.551528][ T5403] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.608827][ T4110] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.626110][ T4110] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.635034][ T4110] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.643638][ T4110] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.041285][ T5478] wireguard0: entered promiscuous mode [ 62.046853][ T5478] wireguard0: entered allmulticast mode [ 62.086364][ T5485] loop3: detected capacity change from 0 to 512 [ 62.105645][ T5485] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.121103][ T5484] bond1: entered promiscuous mode [ 62.126279][ T5484] bond1: entered allmulticast mode [ 62.142740][ T5484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.152524][ T5485] EXT4-fs (loop3): failed to initialize system zone (-117) [ 62.153336][ T5484] bond1 (unregistering): Released all slaves [ 62.166408][ T5485] EXT4-fs (loop3): mount failed [ 62.352357][ T5502] loop4: detected capacity change from 0 to 1024 [ 62.363845][ T5502] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 62.389121][ T5502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.447980][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.731345][ T5520] loop3: detected capacity change from 0 to 1024 [ 62.749468][ T5520] EXT4-fs: inline encryption not supported [ 62.771171][ T5520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.814145][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.950798][ T5531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.960901][ T5531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.034078][ T5534] vhci_hcd: invalid port number 255 [ 63.039531][ T5534] vhci_hcd: default hub control req: 0006 v0303 i00ff l0 [ 63.111362][ T5537] wireguard0: entered promiscuous mode [ 63.116885][ T5537] wireguard0: entered allmulticast mode [ 63.178385][ T5542] bond1: entered promiscuous mode [ 63.183518][ T5542] bond1: entered allmulticast mode [ 63.191993][ T5542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.208091][ T5542] bond1 (unregistering): Released all slaves [ 63.225048][ T5545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.291610][ T5545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.372244][ T5545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.437462][ T5545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.518038][ T44] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.545250][ T44] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.566119][ T44] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.576500][ T44] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.649117][ T5568] netlink: 'syz.0.769': attribute type 3 has an invalid length. [ 63.688253][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'. [ 63.818019][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 63.818039][ T29] audit: type=1326 audit(63.796:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.846956][ T29] audit: type=1326 audit(63.796:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.870055][ T29] audit: type=1326 audit(63.796:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.893062][ T29] audit: type=1326 audit(63.796:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.916157][ T29] audit: type=1326 audit(63.796:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.939025][ T29] audit: type=1326 audit(63.796:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.961736][ T29] audit: type=1326 audit(63.796:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 63.984375][ T29] audit: type=1326 audit(63.796:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 64.007346][ T29] audit: type=1326 audit(63.796:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 64.030222][ T29] audit: type=1326 audit(63.796:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 64.213435][ T5592] loop1: detected capacity change from 0 to 1024 [ 64.266818][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 64.267680][ T5592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.288158][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.296006][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.307387][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.314906][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.333631][ T5592] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.789: Allocating blocks 385-513 which overlap fs metadata [ 64.360803][ T5592] EXT4-fs (loop1): pa ffff88810068da10: logic 16, phys. 129, len 24 [ 64.369506][ T5592] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 64.392903][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.402964][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.422252][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.513300][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.520450][ T5607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.527773][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.535303][ T5607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.555669][ T5607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.596595][ T5615] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 64.607001][ T5615] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 64.639901][ T5615] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 64.649960][ T5615] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 64.709834][ T5615] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 64.719781][ T5615] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 64.769909][ T5615] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 64.780017][ T5615] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 64.814243][ T4121] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 64.822743][ T4121] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 64.833765][ T4121] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 64.842260][ T4121] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 64.853030][ T4121] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 64.861461][ T4121] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 64.872484][ T4121] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 64.880860][ T4121] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 65.111814][ T5622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.790'. [ 65.135797][ T5622] netlink: 'syz.3.790': attribute type 10 has an invalid length. [ 65.143687][ T5622] netlink: 55 bytes leftover after parsing attributes in process `syz.3.790'. [ 65.248087][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.278490][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.361191][ T5642] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 65.369018][ T5642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.793'. [ 65.470897][ T5646] netlink: 156 bytes leftover after parsing attributes in process `syz.4.798'. [ 65.519254][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.549327][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.896840][ T5654] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 65.912457][ T5654] bond1: entered promiscuous mode [ 65.917658][ T5654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.967337][ T5658] loop1: detected capacity change from 0 to 256 [ 65.977811][ T5654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.993366][ T5659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.000626][ T5659] IPv6: NLM_F_CREATE should be set when creating new route [ 66.000955][ T5654] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 66.007940][ T5659] IPv6: NLM_F_CREATE should be set when creating new route [ 66.025806][ T5654] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 66.035266][ T5659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.060112][ T5654] bond1: (slave wireguard0): making interface the new active one [ 66.067877][ T5654] wireguard0: entered promiscuous mode [ 66.077697][ T5654] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 66.104762][ T5659] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 66.129728][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.139846][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.152507][ T5659] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 66.390050][ T5672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 66.705517][ T5682] wireguard2: entered promiscuous mode [ 66.711282][ T5682] wireguard2: entered allmulticast mode [ 66.771961][ T5688] bond4: entered promiscuous mode [ 66.777354][ T5688] bond4: entered allmulticast mode [ 66.782907][ T5688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 66.792859][ T5688] bond4 (unregistering): Released all slaves [ 66.921073][ T5697] loop0: detected capacity change from 0 to 128 [ 66.986984][ T5701] netlink: 156 bytes leftover after parsing attributes in process `syz.3.819'. [ 67.217547][ T5705] loop0: detected capacity change from 0 to 1024 [ 67.247063][ T5705] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 67.274245][ T5705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.297372][ T5712] loop4: detected capacity change from 0 to 512 [ 67.327873][ T5712] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.341187][ T5712] EXT4-fs error (device loop4): ext4_quota_enable:7124: comm syz.4.833: inode #218103808: comm syz.4.833: iget: illegal inode # [ 67.373225][ T5712] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.833: Bad quota inode: 218103808, type: 2 [ 67.388427][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.413030][ T5712] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 67.433574][ T5717] loop0: detected capacity change from 0 to 1024 [ 67.451831][ T5717] EXT4-fs: Ignoring removed orlov option [ 67.457705][ T5712] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 67.475596][ T5712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.476125][ T5717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.507232][ T5712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.990983][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.339577][ T5777] loop3: detected capacity change from 0 to 164 [ 68.350698][ T5780] loop1: detected capacity change from 0 to 1024 [ 68.353558][ T5775] syzkaller0: entered allmulticast mode [ 68.357514][ T5780] EXT4-fs: Ignoring removed orlov option [ 68.367761][ T5775] syzkaller0: entered promiscuous mode [ 68.377413][ T5777] syz.3.826: attempt to access beyond end of device [ 68.377413][ T5777] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 68.391816][ T5777] syz.3.826: attempt to access beyond end of device [ 68.391816][ T5777] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.393417][ T5780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.419701][ T5775] syzkaller0 (unregistering): left allmulticast mode [ 68.426718][ T5775] syzkaller0 (unregistering): left promiscuous mode [ 68.731283][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.752271][ T5799] loop0: detected capacity change from 0 to 512 [ 68.775430][ T5801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.839'. [ 68.781476][ T5799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.796738][ T5799] EXT4-fs (loop0): 1 truncate cleaned up [ 68.803001][ T5799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.815833][ T5803] loop1: detected capacity change from 0 to 1024 [ 68.828055][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 68.828129][ T29] audit: type=1400 audit(68.806:3375): avc: denied { watch watch_reads } for pid=5798 comm="syz.0.847" path="/164/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.829205][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.865213][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.873018][ T29] audit: type=1326 audit(68.856:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 68.874198][ T5803] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.895721][ T29] audit: type=1326 audit(68.856:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f959f31add9 code=0x7ffc0000 [ 68.928603][ T29] audit: type=1326 audit(68.856:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f959f37ebe9 code=0x7ffc0000 [ 68.951611][ T29] audit: type=1326 audit(68.896:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 68.974308][ T29] audit: type=1326 audit(68.896:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f959f31add9 code=0x7ffc0000 [ 68.997096][ T29] audit: type=1326 audit(68.896:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f959f37ebe9 code=0x7ffc0000 [ 69.020020][ T29] audit: type=1326 audit(68.916:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f959f375ba7 code=0x7ffc0000 [ 69.042660][ T29] audit: type=1326 audit(68.916:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f959f31add9 code=0x7ffc0000 [ 69.065459][ T29] audit: type=1326 audit(68.916:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f959f37ebe9 code=0x7ffc0000 [ 69.105048][ T5803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.151841][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.240478][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.262250][ T5813] netlink: 156 bytes leftover after parsing attributes in process `syz.0.841'. [ 69.731958][ T5830] syzkaller0: entered allmulticast mode [ 69.748129][ T5830] syzkaller0: entered promiscuous mode [ 69.763387][ T5830] syzkaller0 (unregistering): left allmulticast mode [ 69.770254][ T5830] syzkaller0 (unregistering): left promiscuous mode [ 69.819180][ T5835] loop4: detected capacity change from 0 to 512 [ 69.831366][ T5835] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.867120][ T5835] atomic_op ffff88811af25528 conn xmit_atomic 0000000000000000 [ 69.891133][ T3307] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 69.969193][ T3390] IPVS: starting estimator thread 0... [ 69.969200][ T5839] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 70.068608][ T5845] IPVS: using max 2496 ests per chain, 124800 per kthread [ 70.109667][ T5855] wireguard2: entered promiscuous mode [ 70.115274][ T5855] wireguard2: entered allmulticast mode [ 70.190939][ T5859] bond2: entered promiscuous mode [ 70.196161][ T5859] bond2: entered allmulticast mode [ 70.230197][ T5859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.253384][ T5859] bond2 (unregistering): Released all slaves [ 70.281804][ T5865] loop4: detected capacity change from 0 to 512 [ 70.292088][ T5865] EXT4-fs: test_dummy_encryption option not supported [ 70.293738][ T5866] loop0: detected capacity change from 0 to 512 [ 70.303330][ T5865] binfmt_misc: register: failed to install interpreter file ./file2 [ 70.332320][ T5866] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.357248][ T5866] EXT4-fs error (device loop0): ext4_quota_enable:7124: comm syz.0.859: inode #218103808: comm syz.0.859: iget: illegal inode # [ 70.371920][ T5866] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.859: Bad quota inode: 218103808, type: 2 [ 70.389516][ T5866] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 70.405953][ T5866] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 70.445641][ T5876] loop4: detected capacity change from 0 to 2048 [ 70.464143][ T5866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.478647][ T5878] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 70.488688][ T5878] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 70.509353][ T5876] EXT4-fs: inline encryption not supported [ 70.519162][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.533395][ T5880] syzkaller0: entered allmulticast mode [ 70.539401][ T5880] syzkaller0: entered promiscuous mode [ 70.549433][ T5880] syzkaller0 (unregistering): left allmulticast mode [ 70.556161][ T5880] syzkaller0 (unregistering): left promiscuous mode [ 70.567235][ T5876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.615237][ T5876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.864: bg 0: block 234: padding at end of block bitmap is not set [ 70.630784][ T5876] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 70.643194][ T5876] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.643194][ T5876] [ 70.681949][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.698889][ T5878] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 70.708809][ T5878] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 70.780139][ T5878] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 70.790187][ T5878] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 70.807047][ T5894] loop1: detected capacity change from 0 to 512 [ 70.815653][ T5896] loop4: detected capacity change from 0 to 512 [ 70.821299][ T5900] loop3: detected capacity change from 0 to 1024 [ 70.828941][ T5900] EXT4-fs: Ignoring removed orlov option [ 70.837071][ T5894] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 70.850642][ T5894] EXT4-fs (loop1): 1 truncate cleaned up [ 70.856685][ T5894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.870819][ T5900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.884916][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.911076][ T5878] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 70.921167][ T5878] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 70.937808][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.034218][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.048527][ T4055] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.056945][ T4055] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 71.097298][ T4055] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.105728][ T4055] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 71.147039][ T5910] wg2: entered promiscuous mode [ 71.151987][ T5910] wg2: entered allmulticast mode [ 71.182689][ T4055] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.191021][ T4055] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 71.220917][ T4055] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.229350][ T4055] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 71.346134][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.381933][ T5918] loop3: detected capacity change from 0 to 1024 [ 71.428835][ T5918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.685009][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.848477][ T5928] wireguard2: entered promiscuous mode [ 71.854022][ T5928] wireguard2: entered allmulticast mode [ 72.029028][ T5947] syzkaller0: entered allmulticast mode [ 72.035055][ T5947] syzkaller0: entered promiscuous mode [ 72.043457][ T5947] syzkaller0 (unregistering): left allmulticast mode [ 72.050311][ T5947] syzkaller0 (unregistering): left promiscuous mode [ 72.175195][ T5960] ªªªªªª: renamed from vlan0 (while UP) [ 72.625789][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.636013][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 72.649956][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.706990][ T6024] loop4: detected capacity change from 0 to 512 [ 72.721572][ T6024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.735209][ T6031] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 72.743007][ T6031] netlink: 224 bytes leftover after parsing attributes in process `syz.3.888'. [ 72.784858][ T6037] loop0: detected capacity change from 0 to 512 [ 72.792698][ T6037] EXT4-fs: test_dummy_encryption option not supported [ 72.802594][ T6037] binfmt_misc: register: failed to install interpreter file ./file2 [ 72.827462][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.842554][ T6043] loop1: detected capacity change from 0 to 164 [ 72.863008][ T6043] syz.1.906: attempt to access beyond end of device [ 72.863008][ T6043] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.877661][ T6043] syz.1.906: attempt to access beyond end of device [ 72.877661][ T6043] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.974439][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6052 comm=syz.2.909 [ 73.340696][ T6078] wireguard0: entered promiscuous mode [ 73.346345][ T6078] wireguard0: entered allmulticast mode [ 73.401843][ T6088] bond1: entered promiscuous mode [ 73.407124][ T6088] bond1: entered allmulticast mode [ 73.413460][ T6088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.424889][ T6088] bond1 (unregistering): Released all slaves [ 73.535029][ T6109] wireguard0: entered promiscuous mode [ 73.540742][ T6109] wireguard0: entered allmulticast mode [ 73.837929][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 73.837942][ T29] audit: type=1326 audit(73.816:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc3c6f5ba7 code=0x7ffc0000 [ 73.867784][ T29] audit: type=1326 audit(73.816:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc3c69add9 code=0x7ffc0000 [ 73.890514][ T29] audit: type=1326 audit(73.816:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 73.913237][ T29] audit: type=1326 audit(73.826:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc3c6f5ba7 code=0x7ffc0000 [ 73.936602][ T29] audit: type=1326 audit(73.826:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc3c69add9 code=0x7ffc0000 [ 73.959811][ T29] audit: type=1326 audit(73.826:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 73.982777][ T29] audit: type=1326 audit(73.826:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc3c6f5ba7 code=0x7ffc0000 [ 74.005344][ T29] audit: type=1326 audit(73.826:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc3c69add9 code=0x7ffc0000 [ 74.028294][ T29] audit: type=1326 audit(73.826:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 74.053406][ T29] audit: type=1326 audit(73.856:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.2.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc3c6f5ba7 code=0x7ffc0000 [ 74.146538][ T6185] netlink: 'syz.0.926': attribute type 10 has an invalid length. [ 74.162679][ T6185] bond4: entered promiscuous mode [ 74.167843][ T6185] bond4: entered allmulticast mode [ 74.173723][ T6185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 74.187768][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.196428][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.252867][ T6197] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.323971][ T6200] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 74.331834][ T6200] netlink: 224 bytes leftover after parsing attributes in process `syz.1.928'. [ 74.351776][ T6197] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.392829][ T6197] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.450280][ T6197] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.471429][ T6202] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 74.480781][ T6202] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 74.525306][ T4090] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.538360][ T4090] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.553265][ T4090] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.561986][ T4090] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.740864][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.938'. [ 74.755810][ T6232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.776526][ T6232] vlan0: entered allmulticast mode [ 74.781878][ T6232] bond1: entered allmulticast mode [ 75.374712][ T6317] loop4: detected capacity change from 0 to 1024 [ 75.411957][ T6317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.439894][ T6317] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.947: Allocating blocks 449-513 which overlap fs metadata [ 75.469791][ T6317] EXT4-fs (loop4): pa ffff888107269620: logic 48, phys. 177, len 21 [ 75.477836][ T6317] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 75.507524][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.533006][ T6328] loop4: detected capacity change from 0 to 512 [ 75.540448][ T6328] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.547137][ T6328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.555523][ T6328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.564385][ T6328] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.590923][ T6328] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.950: Allocating blocks 41-42 which overlap fs metadata [ 75.605083][ T6328] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.950: Allocating blocks 41-42 which overlap fs metadata [ 75.620069][ T6328] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.950: Failed to acquire dquot type 1 [ 75.631627][ T6328] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.648178][ T6328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.950: corrupted inode contents [ 75.660263][ T6328] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.950: mark_inode_dirty error [ 75.672135][ T6328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.950: corrupted inode contents [ 75.684402][ T6328] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.950: mark_inode_dirty error [ 75.696066][ T6328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.950: corrupted inode contents [ 75.701809][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.716451][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.717950][ T6328] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 75.740940][ T6328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.950: corrupted inode contents [ 75.753480][ T6328] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.950: mark_inode_dirty error [ 75.767955][ T6328] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 75.778146][ T6328] EXT4-fs (loop4): 1 truncate cleaned up [ 75.784612][ T6328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.865015][ T6328] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.886463][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.930564][ T6349] loop1: detected capacity change from 0 to 512 [ 75.939972][ T6349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.996309][ T6356] veth0: entered promiscuous mode [ 76.012279][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 76.104284][ T6349] EXT4-fs (loop1): 1 orphan inode deleted [ 76.110153][ T6349] EXT4-fs (loop1): 1 truncate cleaned up [ 76.125104][ T6349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.165976][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.234925][ T6377] bridge0: port 3(batadv0) entered blocking state [ 76.241681][ T6377] bridge0: port 3(batadv0) entered disabled state [ 76.250107][ T6377] batadv0: entered allmulticast mode [ 76.256171][ T6377] batadv0: entered promiscuous mode [ 76.484642][ T6400] tipc: Failed to remove unknown binding: 66,3,3/0:2562018020/2562018021 [ 76.589087][ T6408] loop1: detected capacity change from 0 to 512 [ 76.604121][ T6408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.633968][ T6408] EXT4-fs (loop1): 1 truncate cleaned up [ 76.640996][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.675816][ T6408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.737800][ T4068] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 76.747047][ T4068] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 76.764498][ T6430] loop1: detected capacity change from 0 to 512 [ 76.782424][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.841582][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.871278][ T6438] loop1: detected capacity change from 0 to 512 [ 76.872021][ T6440] loop0: detected capacity change from 0 to 512 [ 76.886398][ T6440] ext4: Unknown parameter 'noacl' [ 76.886828][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.898902][ T6438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.906502][ T6438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.915129][ T6438] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.933104][ T6438] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.970: Allocating blocks 41-42 which overlap fs metadata [ 76.948629][ T6438] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.970: Allocating blocks 41-42 which overlap fs metadata [ 76.963008][ T6438] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.970: Failed to acquire dquot type 1 [ 76.976056][ T6438] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.992133][ T6438] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.970: corrupted inode contents [ 77.004726][ T6438] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.970: mark_inode_dirty error [ 77.018030][ T6438] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.970: corrupted inode contents [ 77.032431][ T6438] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.970: mark_inode_dirty error [ 77.044559][ T6438] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.970: corrupted inode contents [ 77.057530][ T6438] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 77.067314][ T6438] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.970: corrupted inode contents [ 77.089125][ T6438] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.970: mark_inode_dirty error [ 77.116791][ T6438] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 77.129395][ T6442] loop4: detected capacity change from 0 to 1024 [ 77.136532][ T6438] EXT4-fs (loop1): 1 truncate cleaned up [ 77.142689][ T6438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.162550][ T6442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.185740][ T6438] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.206122][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.224179][ T6442] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 77.282094][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.327591][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.336560][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.874763][ T6493] loop3: detected capacity change from 0 to 2048 [ 77.876478][ T6495] syzkaller0: entered allmulticast mode [ 77.890028][ T6495] syzkaller0: entered promiscuous mode [ 77.898419][ T6495] syzkaller0 (unregistering): left allmulticast mode [ 77.899874][ T6493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.905214][ T6495] syzkaller0 (unregistering): left promiscuous mode [ 77.933226][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.951890][ T6499] loop3: detected capacity change from 0 to 128 [ 77.959941][ T6499] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.032066][ T6505] loop4: detected capacity change from 0 to 128 [ 78.051107][ T6505] syz.4.999 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.063147][ T6506] loop0: detected capacity change from 0 to 512 [ 78.076215][ T6506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.120650][ T6506] EXT4-fs (loop0): 1 orphan inode deleted [ 78.126416][ T6506] EXT4-fs (loop0): 1 truncate cleaned up [ 78.136408][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.182408][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.358018][ T6518] veth0: entered promiscuous mode [ 78.367742][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 78.471136][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 78.552264][ T6527] loop4: detected capacity change from 0 to 512 [ 78.559361][ T6527] msdos: Unknown parameter '' [ 78.586404][ T6522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 78.729361][ T6542] IPv6: Can't replace route, no match found [ 78.763139][ T6544] loop1: detected capacity change from 0 to 1024 [ 78.789948][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.804827][ T6546] vlan0: entered allmulticast mode [ 78.856815][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.907476][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.919079][ T6550] loop1: detected capacity change from 0 to 512 [ 78.934409][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 78.934426][ T29] audit: type=1326 audit(334.919:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.3.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f959f37ebe9 code=0x0 [ 78.978213][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.994498][ T6557] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 78.996583][ T29] audit: type=1400 audit(334.979:4259): avc: denied { bind } for pid=6551 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.032342][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.041715][ T6557] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.052235][ T6556] loop0: detected capacity change from 0 to 128 [ 79.061713][ T29] audit: type=1400 audit(335.039:4260): avc: denied { create } for pid=6558 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.103834][ T6556] FAT-fs (loop0): Directory bread(block 32) failed [ 79.104255][ T29] audit: type=1400 audit(335.089:4261): avc: denied { setopt } for pid=6561 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.112052][ T6556] FAT-fs (loop0): Directory bread(block 33) failed [ 79.129747][ T29] audit: type=1400 audit(335.089:4262): avc: denied { bind } for pid=6561 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.137667][ T6556] FAT-fs (loop0): Directory bread(block 34) failed [ 79.155375][ T29] audit: type=1400 audit(335.089:4263): avc: denied { name_bind } for pid=6561 comm="syz.2.1020" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.165614][ T6556] FAT-fs (loop0): Directory bread(block 35) failed [ 79.183302][ T29] audit: type=1400 audit(335.089:4264): avc: denied { node_bind } for pid=6561 comm="syz.2.1020" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 79.213174][ T6556] FAT-fs (loop0): Directory bread(block 36) failed [ 79.220072][ T6556] FAT-fs (loop0): Directory bread(block 37) failed [ 79.226835][ T6556] FAT-fs (loop0): Directory bread(block 38) failed [ 79.233822][ T6556] FAT-fs (loop0): Directory bread(block 39) failed [ 79.239432][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.252787][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 79.254650][ T6556] FAT-fs (loop0): Directory bread(block 40) failed [ 79.269219][ T6564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.276074][ T6556] FAT-fs (loop0): Directory bread(block 41) failed [ 79.292416][ T6564] vlan0: entered allmulticast mode [ 79.297776][ T6564] bond2: entered allmulticast mode [ 79.344567][ T6569] pim6reg1: entered promiscuous mode [ 79.350224][ T6569] pim6reg1: entered allmulticast mode [ 79.378054][ T29] audit: type=1400 audit(335.369:4265): avc: denied { read } for pid=6572 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.448453][ T29] audit: type=1326 audit(335.439:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 79.474817][ T6575] loop1: detected capacity change from 0 to 512 [ 79.481807][ T6575] ext4: Unknown parameter 'noacl' [ 79.492265][ T29] audit: type=1326 audit(335.439:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 79.523218][ T6577] loop4: detected capacity change from 0 to 1024 [ 79.539610][ T6577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.569364][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.578631][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.589585][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.068895][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 80.310794][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 80.349661][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.383035][ T6617] vlan0: entered allmulticast mode [ 80.388549][ T6617] bond1: entered allmulticast mode [ 80.480580][ T6631] syzkaller0: entered allmulticast mode [ 80.487567][ T6631] syzkaller0: entered promiscuous mode [ 80.496058][ T6631] syzkaller0 (unregistering): left allmulticast mode [ 80.503099][ T6631] syzkaller0 (unregistering): left promiscuous mode [ 80.634323][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 81.000953][ T6667] lo: entered allmulticast mode [ 81.007718][ T6667] tunl0: entered allmulticast mode [ 81.013867][ T6667] gre0: entered allmulticast mode [ 81.021645][ T6667] gretap0: entered allmulticast mode [ 81.028490][ T6667] erspan0: entered allmulticast mode [ 81.034911][ T6667] ip_vti0: entered allmulticast mode [ 81.041162][ T6667] ip6_vti0: entered allmulticast mode [ 81.048103][ T6667] sit0: entered allmulticast mode [ 81.054921][ T6667] ip6tnl0: entered allmulticast mode [ 81.061360][ T6667] ip6gre0: entered allmulticast mode [ 81.068099][ T6667] syz_tun: entered allmulticast mode [ 81.113450][ T6667] ip6gretap0: entered allmulticast mode [ 81.121927][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.129401][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.139864][ T6667] bridge0: entered allmulticast mode [ 81.146450][ T6667] vcan0: entered allmulticast mode [ 81.152322][ T6667] bond0: entered allmulticast mode [ 81.157716][ T6667] bond_slave_0: entered allmulticast mode [ 81.163467][ T6667] bond_slave_1: entered allmulticast mode [ 81.170575][ T6667] team0: entered allmulticast mode [ 81.176014][ T6667] team_slave_0: entered allmulticast mode [ 81.181777][ T6667] team_slave_1: entered allmulticast mode [ 81.189685][ T6667] nlmon0: entered allmulticast mode [ 81.195659][ T6667] caif0: entered allmulticast mode [ 81.201163][ T6667] vxcan0: entered allmulticast mode [ 81.207205][ T6667] vxcan1: entered allmulticast mode [ 81.213081][ T6667] veth0: entered allmulticast mode [ 81.219323][ T6667] veth1: entered allmulticast mode [ 81.228781][ T6667] wg0: entered allmulticast mode [ 81.234927][ T6667] wg1: entered allmulticast mode [ 81.241080][ T6667] wg2: entered allmulticast mode [ 81.247262][ T6667] veth0_to_bridge: entered allmulticast mode [ 81.255301][ T6667] veth1_to_bridge: entered allmulticast mode [ 81.263183][ T6667] veth0_to_bond: entered allmulticast mode [ 81.271042][ T6667] veth1_to_bond: entered allmulticast mode [ 81.278699][ T6667] veth0_to_team: left promiscuous mode [ 81.284196][ T6667] veth0_to_team: entered allmulticast mode [ 81.291733][ T6667] veth1_to_team: entered allmulticast mode [ 81.317021][ T6667] veth0_to_batadv: entered allmulticast mode [ 81.324215][ T6667] batadv_slave_0: entered allmulticast mode [ 81.332001][ T6667] xfrm0: entered allmulticast mode [ 81.338226][ T6667] veth0_to_hsr: entered allmulticast mode [ 81.345646][ T6667] hsr_slave_0: entered allmulticast mode [ 81.352385][ T6667] veth1_to_hsr: entered allmulticast mode [ 81.359004][ T6667] hsr_slave_1: entered allmulticast mode [ 81.365763][ T6667] hsr0: entered allmulticast mode [ 81.371542][ T6667] veth1_virt_wifi: entered allmulticast mode [ 81.378626][ T6667] veth0_virt_wifi: entered allmulticast mode [ 81.385525][ T6667] veth1_macvtap: entered allmulticast mode [ 81.391901][ T6667] veth0_macvtap: entered allmulticast mode [ 81.399650][ T6667] macvtap0: entered allmulticast mode [ 81.406286][ T6667] geneve0: entered allmulticast mode [ 81.412397][ T6667] geneve1: entered allmulticast mode [ 81.418582][ T6667] syzk: entered allmulticast mode [ 81.423778][ T6667] ip6tnl1: entered allmulticast mode [ 81.429500][ T6667] netdevsim netdevsim1 eth0: entered allmulticast mode [ 81.436531][ T6667] netdevsim netdevsim1 eth1: entered allmulticast mode [ 81.443593][ T6667] netdevsim netdevsim1 eth2: entered allmulticast mode [ 81.450517][ T6667] netdevsim netdevsim1 eth3: entered allmulticast mode [ 81.457924][ T6667] veth2: entered allmulticast mode [ 81.463350][ T6667] veth3: entered allmulticast mode [ 81.474228][ T6671] veth5: entered promiscuous mode [ 81.479457][ T4090] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.498001][ T4090] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.508250][ T4090] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.517060][ T4090] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.590378][ T6689] loop3: detected capacity change from 0 to 1024 [ 81.597593][ T6689] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.615935][ T6689] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1072: Invalid block bitmap block 0 in block_group 0 [ 81.655186][ T6689] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1072: Failed to acquire dquot type 0 [ 81.668316][ T6689] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1072: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.684308][ T6689] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1072: Invalid inode bitmap blk 0 in block_group 0 [ 81.698597][ T4082] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 81.710378][ T6689] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 81.720443][ T6689] EXT4-fs (loop3): 1 orphan inode deleted [ 81.726806][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.743649][ T6689] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1072: Failed to acquire dquot type 0 [ 82.180931][ T6713] loop0: detected capacity change from 0 to 128 [ 82.192368][ T6713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.200385][ T6713] FAT-fs (loop0): Filesystem has been set read-only [ 82.224700][ T6713] syz.0.1081: attempt to access beyond end of device [ 82.224700][ T6713] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.245767][ T6713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.253725][ T6713] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.300371][ T6713] syz.0.1081: attempt to access beyond end of device [ 82.300371][ T6713] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.316736][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.316736][ T6718] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 82.330774][ T6718] Buffer I/O error on dev loop0, logical block 2065, async page read [ 82.363644][ T6722] loop4: detected capacity change from 0 to 512 [ 82.381605][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.381605][ T6718] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 82.395007][ T6718] Buffer I/O error on dev loop0, logical block 2066, async page read [ 82.404061][ T6722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.405402][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.417599][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.417599][ T6718] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 82.423153][ T4082] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 82.435536][ T6718] Buffer I/O error on dev loop0, logical block 2067, async page read [ 82.457108][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.457108][ T6718] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 82.470818][ T6718] Buffer I/O error on dev loop0, logical block 2068, async page read [ 82.488210][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.488210][ T6718] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 82.501614][ T6718] Buffer I/O error on dev loop0, logical block 2069, async page read [ 82.512317][ T6722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.512763][ T6726] loop3: detected capacity change from 0 to 1024 [ 82.529319][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.529319][ T6718] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 82.544716][ T6718] Buffer I/O error on dev loop0, logical block 2070, async page read [ 82.553444][ T6726] EXT4-fs: Ignoring removed oldalloc option [ 82.559483][ T6726] EXT4-fs: Ignoring removed bh option [ 82.573411][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.573411][ T6718] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 82.587007][ T6718] Buffer I/O error on dev loop0, logical block 2071, async page read [ 82.606751][ T6726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.624511][ T6718] syz.0.1081: attempt to access beyond end of device [ 82.624511][ T6718] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 82.637857][ T6718] Buffer I/O error on dev loop0, logical block 2072, async page read [ 82.661620][ T6713] Buffer I/O error on dev loop0, logical block 2065, async page read [ 82.688814][ T6713] Buffer I/O error on dev loop0, logical block 2066, async page read [ 82.698728][ T6732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1085'. [ 83.072302][ T6734] loop1: detected capacity change from 0 to 512 [ 83.080754][ T6734] EXT4-fs: Ignoring removed oldalloc option [ 83.092077][ T6734] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1087: Parent and EA inode have the same ino 15 [ 83.107737][ T6734] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1087: Parent and EA inode have the same ino 15 [ 83.121257][ T6734] EXT4-fs (loop1): 1 orphan inode deleted [ 83.128894][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.170996][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.209000][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.238593][ T6748] loop4: detected capacity change from 0 to 128 [ 83.249665][ T6748] FAT-fs (loop4): Directory bread(block 32) failed [ 83.257711][ T6748] FAT-fs (loop4): Directory bread(block 33) failed [ 83.264602][ T6748] FAT-fs (loop4): Directory bread(block 34) failed [ 83.271220][ T6748] FAT-fs (loop4): Directory bread(block 35) failed [ 83.279285][ T6748] FAT-fs (loop4): Directory bread(block 36) failed [ 83.286016][ T6748] FAT-fs (loop4): Directory bread(block 37) failed [ 83.293197][ T6748] FAT-fs (loop4): Directory bread(block 38) failed [ 83.301077][ T6748] FAT-fs (loop4): Directory bread(block 39) failed [ 83.307815][ T6748] FAT-fs (loop4): Directory bread(block 40) failed [ 83.316109][ T6748] FAT-fs (loop4): Directory bread(block 41) failed [ 83.332204][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.477766][ T6763] loop4: detected capacity change from 0 to 512 [ 83.489019][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 83.516102][ T6763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.550880][ T6763] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1097: bad orphan inode 11 [ 83.565303][ T6763] ext4_test_bit(bit=10, block=4) = 1 [ 83.570912][ T6763] is_bad_inode(inode)=0 [ 83.575252][ T6763] NEXT_ORPHAN(inode)=2080374784 [ 83.580120][ T6763] max_ino=32 [ 83.583402][ T6763] i_nlink=0 [ 83.600540][ T6763] EXT4-fs (loop4): 1 truncate cleaned up [ 83.611479][ T6768] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 83.630223][ T6763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.708247][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.160282][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 84.160302][ T29] audit: type=1400 audit(340.141:4457): avc: denied { create } for pid=6788 comm="syz.4.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.166095][ T6786] syzkaller0: entered allmulticast mode [ 84.186191][ T29] audit: type=1400 audit(340.151:4458): avc: denied { read } for pid=6788 comm="syz.4.1108" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.204502][ T6786] syzkaller0: entered promiscuous mode [ 84.215025][ T29] audit: type=1400 audit(340.151:4459): avc: denied { open } for pid=6788 comm="syz.4.1108" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.256929][ T6786] syzkaller0 (unregistering): left allmulticast mode [ 84.263797][ T6786] syzkaller0 (unregistering): left promiscuous mode [ 84.340197][ T29] audit: type=1400 audit(340.252:4460): avc: denied { read } for pid=6788 comm="syz.4.1108" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.363635][ T29] audit: type=1400 audit(340.252:4461): avc: denied { open } for pid=6788 comm="syz.4.1108" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.386864][ T29] audit: type=1400 audit(340.252:4462): avc: denied { ioctl } for pid=6788 comm="syz.4.1108" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.411198][ T29] audit: type=1400 audit(340.282:4463): avc: denied { firmware_load } for pid=4090 comm="kworker/u8:40" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 84.655995][ T29] audit: type=1400 audit(340.642:4464): avc: denied { sqpoll } for pid=6803 comm="syz.4.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.694408][ T6804] TC_ACT_REPEAT abuse ? [ 84.699030][ T6804] TC_ACT_REPEAT abuse ? [ 84.704705][ T6804] TC_ACT_REPEAT abuse ? [ 84.711459][ T6803] TC_ACT_REPEAT abuse ? [ 84.712265][ T29] audit: type=1326 audit(340.692:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f74a6ebe9 code=0x7ffc0000 [ 84.715914][ T6803] TC_ACT_REPEAT abuse ? [ 84.738683][ T29] audit: type=1326 audit(340.692:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f74a6ebe9 code=0x7ffc0000 [ 84.812536][ T6811] loop4: detected capacity change from 0 to 128 [ 84.822557][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 84.897944][ T6822] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 84.925956][ T6824] loop3: detected capacity change from 0 to 512 [ 84.948197][ T6822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.980171][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 85.012658][ T6822] bond3 (unregistering): Released all slaves [ 85.142655][ T6843] loop4: detected capacity change from 0 to 512 [ 85.151052][ T6843] EXT4-fs: Ignoring removed oldalloc option [ 85.164541][ T6843] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1127: Parent and EA inode have the same ino 15 [ 85.181584][ T6843] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1127: Parent and EA inode have the same ino 15 [ 85.199293][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 85.234742][ T6843] EXT4-fs (loop4): 1 orphan inode deleted [ 85.250797][ T6854] loop0: detected capacity change from 0 to 512 [ 85.260021][ T6854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 85.295313][ T6854] System zones: 1-12 [ 85.309721][ T6854] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1141: error while reading EA inode 32 err=-116 [ 85.345503][ T6854] EXT4-fs (loop0): Remounting filesystem read-only [ 85.352149][ T6854] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.365327][ T6854] EXT4-fs (loop0): 1 orphan inode deleted [ 85.393769][ T4105] TC_ACT_REPEAT abuse ? [ 85.398661][ T5627] TC_ACT_REPEAT abuse ? [ 85.407495][ T9] TC_ACT_REPEAT abuse ? [ 85.412037][ T3365] TC_ACT_REPEAT abuse ? [ 85.442398][ T6871] dvmrp1: entered allmulticast mode [ 86.011731][ T6880] pim6reg: entered allmulticast mode [ 86.020917][ T6880] pim6reg: left allmulticast mode [ 86.149042][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 86.174085][ T6890] loop1: detected capacity change from 0 to 128 [ 86.225893][ T6894] vlan0: entered allmulticast mode [ 86.255696][ T6899] TC_ACT_REPEAT abuse ? [ 86.722268][ T6919] pim6reg1: entered promiscuous mode [ 86.727679][ T6919] pim6reg1: entered allmulticast mode [ 86.916608][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1160'. [ 86.938428][ T6930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6930 comm=syz.1.1160 [ 86.971332][ T6932] loop1: detected capacity change from 0 to 512 [ 86.980198][ T6932] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1161: corrupted in-inode xattr: invalid ea_ino [ 86.994191][ T6932] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1161: couldn't read orphan inode 15 (err -117) [ 87.311780][ T6942] netlink: 'syz.3.1165': attribute type 39 has an invalid length. [ 87.551750][ T6944] loop3: detected capacity change from 0 to 128 [ 87.564904][ T6944] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 87.573077][ T6944] FAT-fs (loop3): Filesystem has been set read-only [ 87.580762][ T6944] bio_check_eod: 27536 callbacks suppressed [ 87.580842][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.580842][ T6944] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 87.614109][ T6944] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 87.622101][ T6944] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 87.634008][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.634008][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.647380][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.647380][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.661037][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.661037][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.675680][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.675680][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.689219][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.689219][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.704289][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.704289][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.718317][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.718317][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.731738][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.731738][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.746424][ T6944] syz.3.1166: attempt to access beyond end of device [ 87.746424][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.761777][ T6946] buffer_io_error: 27534 callbacks suppressed [ 87.761797][ T6946] Buffer I/O error on dev loop3, logical block 2065, async page read [ 87.777343][ T6946] Buffer I/O error on dev loop3, logical block 2066, async page read [ 87.785661][ T6946] Buffer I/O error on dev loop3, logical block 2067, async page read [ 87.794522][ T6946] Buffer I/O error on dev loop3, logical block 2068, async page read [ 87.802970][ T6946] Buffer I/O error on dev loop3, logical block 2069, async page read [ 87.811640][ T6946] Buffer I/O error on dev loop3, logical block 2070, async page read [ 87.819840][ T6946] Buffer I/O error on dev loop3, logical block 2071, async page read [ 87.828055][ T6946] Buffer I/O error on dev loop3, logical block 2072, async page read [ 87.836562][ T6944] Buffer I/O error on dev loop3, logical block 2065, async page read [ 87.844919][ T6944] Buffer I/O error on dev loop3, logical block 2066, async page read [ 88.372982][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 88.388575][ T6960] vlan0: entered allmulticast mode [ 88.393978][ T6960] bridge0: port 4(vlan0) entered blocking state [ 88.400490][ T6960] bridge0: port 4(vlan0) entered disabled state [ 88.408360][ T6960] vlan0: entered promiscuous mode [ 88.565837][ T6973] loop1: detected capacity change from 0 to 512 [ 88.576413][ T6973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.064316][ T6996] loop0: detected capacity change from 0 to 512 [ 89.115479][ T6996] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1183: corrupted in-inode xattr: invalid ea_ino [ 89.159712][ T6996] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1183: couldn't read orphan inode 15 (err -117) [ 89.283867][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 89.283886][ T29] audit: type=1400 audit(345.274:4629): avc: denied { unlink } for pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.333333][ T7001] loop4: detected capacity change from 0 to 128 [ 89.376663][ T7001] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.384680][ T7001] FAT-fs (loop4): Filesystem has been set read-only [ 89.402576][ T7001] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.410628][ T7001] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.469162][ T7003] loop0: detected capacity change from 0 to 1024 [ 89.480732][ T7003] EXT4-fs: Ignoring removed orlov option [ 89.690579][ T29] audit: type=1326 audit(345.664:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.713650][ T29] audit: type=1326 audit(345.664:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.736894][ T29] audit: type=1326 audit(345.664:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.760151][ T29] audit: type=1326 audit(345.664:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.783170][ T29] audit: type=1326 audit(345.664:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.807226][ T29] audit: type=1326 audit(345.664:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.830709][ T29] audit: type=1326 audit(345.664:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.853808][ T29] audit: type=1326 audit(345.664:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 89.878227][ T29] audit: type=1326 audit(345.664:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb44933ebe9 code=0x7ffc0000 [ 90.028563][ T7019] netlink: 'syz.2.1190': attribute type 39 has an invalid length. [ 90.150060][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 90.187891][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 90.409626][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 90.514690][ C0] net_ratelimit: 9 callbacks suppressed [ 90.514761][ C0] TC_ACT_REPEAT abuse ? [ 90.687373][ T7065] lo: entered allmulticast mode [ 90.693937][ T7065] tunl0: entered allmulticast mode [ 90.702026][ T7065] gre0: entered allmulticast mode [ 90.723406][ T7065] erspan0: entered allmulticast mode [ 90.738532][ T7065] ip_vti0: entered allmulticast mode [ 90.762391][ T7065] ip6_vti0: entered allmulticast mode [ 90.769985][ T7065] sit0: entered allmulticast mode [ 90.794923][ T7065] ip6tnl0: entered allmulticast mode [ 90.802252][ T7065] ip6gre0: entered allmulticast mode [ 90.809316][ T7065] syz_tun: entered allmulticast mode [ 90.818019][ T7065] ip6gretap0: entered allmulticast mode [ 90.825888][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.833435][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.860845][ T7065] bridge0: entered allmulticast mode [ 90.867707][ T7065] vcan0: entered allmulticast mode [ 90.892403][ T7065] bond0: entered allmulticast mode [ 90.897679][ T7065] bond_slave_0: entered allmulticast mode [ 90.903587][ T7065] bond_slave_1: entered allmulticast mode [ 90.909321][ T7065] team0: entered allmulticast mode [ 90.914769][ T7065] team_slave_0: entered allmulticast mode [ 90.920790][ T7065] team_slave_1: entered allmulticast mode [ 90.971010][ T7065] dummy0: entered allmulticast mode [ 90.980670][ T7065] nlmon0: entered allmulticast mode [ 91.011234][ T7065] caif0: entered allmulticast mode [ 91.016640][ T7065] batadv0: entered allmulticast mode [ 91.035021][ T7065] vxcan0: entered allmulticast mode [ 91.045870][ T7065] vxcan1: entered allmulticast mode [ 91.051898][ T7065] veth0: entered allmulticast mode [ 91.058558][ T7065] veth1: entered allmulticast mode [ 91.065471][ T7065] wg1: entered allmulticast mode [ 91.072516][ T7065] wg2: left promiscuous mode [ 91.077874][ T7065] veth0_to_bridge: entered allmulticast mode [ 91.088462][ T7065] veth1_to_bridge: entered allmulticast mode [ 91.108814][ T7065] veth0_to_bond: entered allmulticast mode [ 91.117049][ T7065] veth1_to_bond: entered allmulticast mode [ 91.126698][ T7065] veth0_to_team: entered allmulticast mode [ 91.134537][ T7065] veth1_to_team: entered allmulticast mode [ 91.147320][ T7065] veth0_to_batadv: entered allmulticast mode [ 91.202558][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.221477][ T7065] batadv_slave_0: entered allmulticast mode [ 91.231308][ T7065] veth1_to_batadv: entered allmulticast mode [ 91.251342][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.281702][ T7065] batadv_slave_1: entered allmulticast mode [ 91.299349][ T7065] xfrm0: entered allmulticast mode [ 91.325063][ T7065] veth0_to_hsr: entered allmulticast mode [ 91.332897][ T7065] hsr_slave_0: entered allmulticast mode [ 91.350934][ T7065] veth1_to_hsr: entered allmulticast mode [ 91.361921][ T7065] hsr_slave_1: entered allmulticast mode [ 91.372100][ T7065] hsr0: entered allmulticast mode [ 91.379162][ T7065] veth1_virt_wifi: entered allmulticast mode [ 91.411779][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 91.422263][ T7065] veth0_virt_wifi: entered allmulticast mode [ 91.429807][ T7065] veth1_macvtap: entered allmulticast mode [ 91.436917][ T7065] veth0_macvtap: entered allmulticast mode [ 91.446687][ T7065] macvtap0: entered allmulticast mode [ 91.454601][ T7065] macsec0: entered allmulticast mode [ 91.461241][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'. [ 91.487000][ T7065] geneve0: entered allmulticast mode [ 91.502821][ T7065] geneve1: entered allmulticast mode [ 91.522379][ T7065] veth2: entered allmulticast mode [ 91.527818][ T7065] veth3: entered allmulticast mode [ 91.537181][ T7065] bridge1: entered allmulticast mode [ 91.546882][ T7065] batadv1: entered allmulticast mode [ 91.553524][ T7065] gre1: entered allmulticast mode [ 91.558882][ T7065] netdevsim netdevsim3 eth0: entered allmulticast mode [ 91.568359][ T7065] netdevsim netdevsim3 eth1: entered allmulticast mode [ 91.576337][ T7065] netdevsim netdevsim3 eth2: entered allmulticast mode [ 91.585546][ T7065] netdevsim netdevsim3 eth3: entered allmulticast mode [ 91.593742][ T7065] bridge2: entered allmulticast mode [ 91.609547][ T7065] veth4: entered allmulticast mode [ 91.614872][ T7065] veth5: left promiscuous mode [ 91.619685][ T7065] veth5: entered allmulticast mode [ 91.625417][ T7065] veth6: entered allmulticast mode [ 91.630747][ T7065] veth7: entered allmulticast mode [ 91.643801][ T7072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.666168][ T7083] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 91.669479][ T7075] vlan1: entered allmulticast mode [ 91.680832][ T7075] bond3: entered allmulticast mode [ 91.729231][ T4090] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.738438][ T4090] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.747835][ T4055] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.756980][ T4055] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.434290][ T7082] Set syz1 is full, maxelem 65536 reached [ 92.608755][ T7111] loop1: detected capacity change from 0 to 128 [ 92.640937][ T7111] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 92.648838][ T7111] FAT-fs (loop1): Filesystem has been set read-only [ 92.665964][ T7111] bio_check_eod: 69940 callbacks suppressed [ 92.665999][ T7111] syz.1.1222: attempt to access beyond end of device [ 92.665999][ T7111] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 92.686743][ T7118] lo: entered allmulticast mode [ 92.693121][ T7111] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 92.693165][ T7118] tunl0: entered allmulticast mode [ 92.701285][ T7111] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 92.707722][ T7118] gre0: entered allmulticast mode [ 92.716007][ T7111] syz.1.1222: attempt to access beyond end of device [ 92.716007][ T7111] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.735955][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.735955][ T7120] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 92.748403][ T7117] loop4: detected capacity change from 0 to 512 [ 92.751430][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.751430][ T7120] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 92.769472][ T7120] buffer_io_error: 66535 callbacks suppressed [ 92.769490][ T7120] Buffer I/O error on dev loop1, logical block 2066, async page read [ 92.786551][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.786551][ T7120] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 92.799963][ T7120] Buffer I/O error on dev loop1, logical block 2067, async page read [ 92.810053][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.810053][ T7120] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 92.813744][ T7117] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.823901][ T7120] Buffer I/O error on dev loop1, logical block 2068, async page read [ 92.841047][ T7118] gretap0: entered allmulticast mode [ 92.862455][ T7118] erspan0: entered allmulticast mode [ 92.865991][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.865991][ T7120] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 92.881141][ T7120] Buffer I/O error on dev loop1, logical block 2069, async page read [ 92.887312][ T7124] loop3: detected capacity change from 0 to 4096 [ 92.891393][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.891393][ T7120] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 92.897212][ T7118] ip_vti0: entered allmulticast mode [ 92.909238][ T7120] Buffer I/O error on dev loop1, logical block 2070, async page read [ 92.915885][ T7124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.924712][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.924712][ T7120] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 92.942853][ T7120] Buffer I/O error on dev loop1, logical block 2071, async page read [ 92.953221][ T7118] ip6_vti0: entered allmulticast mode [ 92.956503][ T7120] syz.1.1222: attempt to access beyond end of device [ 92.956503][ T7120] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 92.972089][ T7120] Buffer I/O error on dev loop1, logical block 2072, async page read [ 92.980804][ T7111] Buffer I/O error on dev loop1, logical block 2065, async page read [ 92.989143][ T7111] Buffer I/O error on dev loop1, logical block 2066, async page read [ 92.998024][ T7111] Buffer I/O error on dev loop1, logical block 2067, async page read [ 93.006886][ T7118] sit0: entered allmulticast mode [ 93.039385][ T7118] ip6tnl0: entered allmulticast mode [ 93.057910][ T7118] ip6gre0: entered allmulticast mode [ 93.070494][ T7118] syz_tun: entered allmulticast mode [ 93.078569][ T7118] ip6gretap0: entered allmulticast mode [ 93.126990][ T7134] loop4: detected capacity change from 0 to 1764 [ 93.141414][ T7118] bridge0: entered allmulticast mode [ 93.151035][ T7118] vcan0: entered allmulticast mode [ 93.158321][ T7118] bond0: entered allmulticast mode [ 93.163694][ T7118] bond_slave_0: entered allmulticast mode [ 93.169540][ T7118] bond_slave_1: entered allmulticast mode [ 93.179278][ T7118] team0: entered allmulticast mode [ 93.184428][ T7118] team_slave_0: entered allmulticast mode [ 93.190475][ T7118] team_slave_1: entered allmulticast mode [ 93.207903][ T7118] nlmon0: entered allmulticast mode [ 93.224634][ T7118] caif0: entered allmulticast mode [ 93.238022][ T7118] batadv0: entered allmulticast mode [ 93.256017][ T7118] vxcan0: entered allmulticast mode [ 93.271609][ T7118] vxcan1: entered allmulticast mode [ 93.284674][ T7118] wg0: entered allmulticast mode [ 93.292405][ T7118] wg1: entered allmulticast mode [ 93.297691][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.307179][ T7118] wg2: left promiscuous mode [ 93.314258][ T7118] veth0_to_bridge: entered allmulticast mode [ 93.335011][ T7118] veth1_to_bridge: entered allmulticast mode [ 93.356396][ T7118] veth0_to_bond: entered allmulticast mode [ 93.373369][ T7118] veth1_to_bond: entered allmulticast mode [ 93.388962][ T7118] veth0_to_team: entered allmulticast mode [ 93.406520][ T7118] veth1_to_team: entered allmulticast mode [ 93.438158][ T7118] veth0_to_batadv: entered allmulticast mode [ 93.481352][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.505447][ T7118] batadv_slave_0: entered allmulticast mode [ 93.538068][ T7118] xfrm0: entered allmulticast mode [ 93.550114][ T7118] veth0_to_hsr: entered allmulticast mode [ 93.557164][ T7118] hsr_slave_0: entered allmulticast mode [ 93.563845][ T7118] veth1_to_hsr: entered allmulticast mode [ 93.571048][ T7118] hsr_slave_1: entered allmulticast mode [ 93.577828][ T7118] hsr0: entered allmulticast mode [ 93.584164][ T7118] veth1_virt_wifi: entered allmulticast mode [ 93.591283][ T7118] veth0_virt_wifi: entered allmulticast mode [ 93.598894][ T7118] veth1_macvtap: entered allmulticast mode [ 93.609428][ T7118] veth0_macvtap: entered allmulticast mode [ 93.616976][ T7118] macsec0: entered allmulticast mode [ 93.626664][ T7118] geneve0: entered allmulticast mode [ 93.633732][ T7118] geneve1: entered allmulticast mode [ 93.640454][ T7118] bond1: left promiscuous mode [ 93.645313][ T7118] bridge1: left promiscuous mode [ 93.653630][ T7118] bond2: left promiscuous mode [ 93.658659][ T7118] wireguard0: left promiscuous mode [ 93.664189][ T7118] bond2: entered allmulticast mode [ 93.669427][ T7118] wireguard0: entered allmulticast mode [ 93.686076][ T7118] wireguard1: entered allmulticast mode [ 93.693345][ T7118] ip6tnl1: entered allmulticast mode [ 93.699259][ T7118] bond3: entered allmulticast mode [ 93.705976][ T7118] vlan2: left promiscuous mode [ 93.711008][ T7118] bond3: left promiscuous mode [ 93.717444][ T7118] dummy0: left promiscuous mode [ 93.722692][ T7118] vlan2: entered allmulticast mode [ 93.728665][ T7118] bond4: left promiscuous mode [ 93.735065][ T7118] netdevsim netdevsim0 eth0: entered allmulticast mode [ 93.742576][ T7118] netdevsim netdevsim0 eth1: entered allmulticast mode [ 93.750869][ T7118] netdevsim netdevsim0 eth2: entered allmulticast mode [ 93.758092][ T7118] netdevsim netdevsim0 eth3: entered allmulticast mode [ 93.765513][ T7118] bond5: entered allmulticast mode [ 93.772671][ T7118] gre1: entered allmulticast mode [ 93.780503][ T7134] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1227'. [ 93.792569][ T7141] vlan1: entered promiscuous mode [ 93.797650][ T7141] syz_tun: entered promiscuous mode [ 93.810148][ T4090] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.818726][ T4090] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.867566][ T4090] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.891459][ T4090] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.014773][ T7172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1243'. [ 94.141496][ T7179] netlink: 'syz.3.1246': attribute type 83 has an invalid length. [ 94.178318][ T7182] SELinux: Context  is not valid (left unmapped). [ 94.237826][ T7190] loop3: detected capacity change from 0 to 2048 [ 94.283479][ T7190] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.1250: bit already cleared for inode 15 [ 94.400611][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1251'. [ 94.434965][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 94.434985][ T29] audit: type=1326 audit(350.427:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.524085][ T29] audit: type=1326 audit(350.427:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.546983][ T29] audit: type=1326 audit(350.457:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.569974][ T29] audit: type=1326 audit(350.457:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.578673][ T7203] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 94.592945][ T29] audit: type=1326 audit(350.457:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.622487][ T29] audit: type=1326 audit(350.457:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.645438][ T29] audit: type=1326 audit(350.457:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.668583][ T29] audit: type=1326 audit(350.457:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.691734][ T29] audit: type=1326 audit(350.457:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.715092][ T29] audit: type=1326 audit(350.457:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3c6febe9 code=0x7ffc0000 [ 94.724593][ T7203] mmap: syz.2.1254 (7203) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.984772][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 94.994438][ T9] TC_ACT_REPEAT abuse ? [ 95.059380][ T7226] loop0: detected capacity change from 0 to 1024 [ 95.080866][ T7228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.089026][ T7228] bond1: (slave bond2): Enslaving as an active interface with an up link [ 95.105410][ T7229] loop1: detected capacity change from 0 to 2048 [ 95.119355][ T7223] bond1 (unregistering): (slave bond2): Releasing backup interface [ 95.130367][ T7223] bond1 (unregistering): Released all slaves [ 95.159197][ T7226] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1262: Allocating blocks 449-513 which overlap fs metadata [ 95.184102][ T7224] EXT4-fs (loop0): pa ffff88810068de00: logic 48, phys. 177, len 21 [ 95.192446][ T7224] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 95.307431][ T7241] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.335471][ T7241] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1360 with error 28 [ 95.348380][ T7241] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.348380][ T7241] [ 95.358514][ T7241] EXT4-fs (loop1): Total free blocks count 0 [ 95.364611][ T7241] EXT4-fs (loop1): Free/Dirty block details [ 95.370755][ T7241] EXT4-fs (loop1): free_blocks=2415919104 [ 95.376615][ T7241] EXT4-fs (loop1): dirty_blocks=1376 [ 95.382000][ T7241] EXT4-fs (loop1): Block reservation details [ 95.388162][ T7241] EXT4-fs (loop1): i_reserved_data_blocks=86 [ 95.451269][ T7254] loop3: detected capacity change from 0 to 256 [ 95.521996][ T7254] FAT-fs (loop3): Directory bread(block 64) failed [ 95.528829][ T7254] FAT-fs (loop3): Directory bread(block 65) failed [ 95.550601][ T4090] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 95.563255][ T4090] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.563255][ T4090] [ 95.573631][ T7254] FAT-fs (loop3): Directory bread(block 66) failed [ 95.586146][ T7254] FAT-fs (loop3): Directory bread(block 67) failed [ 95.603228][ T7254] FAT-fs (loop3): Directory bread(block 68) failed [ 95.624567][ T7254] FAT-fs (loop3): Directory bread(block 69) failed [ 95.639802][ T7254] FAT-fs (loop3): Directory bread(block 70) failed [ 95.655425][ T7254] FAT-fs (loop3): Directory bread(block 71) failed [ 95.718498][ T7254] FAT-fs (loop3): Directory bread(block 72) failed [ 95.725235][ T7254] FAT-fs (loop3): Directory bread(block 73) failed [ 96.272562][ T7276] loop4: detected capacity change from 0 to 128 [ 96.620206][ T7293] loop4: detected capacity change from 0 to 128 [ 97.041387][ T7286] Set syz1 is full, maxelem 65536 reached [ 97.061537][ T7298] __nla_validate_parse: 1 callbacks suppressed [ 97.061556][ T7298] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1286'. [ 97.143412][ T7306] loop1: detected capacity change from 0 to 1024 [ 97.150373][ T7306] EXT4-fs: Ignoring removed orlov option [ 97.196259][ T7308] loop3: detected capacity change from 0 to 512 [ 97.208309][ T7308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.252543][ T7308] EXT4-fs (loop3): shut down requested (0) [ 97.283772][ T3302] EXT4-fs unmount: 31 callbacks suppressed [ 97.283790][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.530897][ T7356] batadv_slave_0: entered promiscuous mode [ 97.537832][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 97.546865][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.559420][ T7356] batadv_slave_0 (unregistering): left promiscuous mode [ 97.571011][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.584274][ T7358] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1310'. [ 97.613597][ T7362] bond6: entered promiscuous mode [ 97.618941][ T7362] bond6: entered allmulticast mode [ 97.624381][ T7362] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.633328][ T7362] bond6 (unregistering): Released all slaves [ 97.774845][ T7375] loop4: detected capacity change from 0 to 2048 [ 97.798395][ T7378] loop0: detected capacity change from 0 to 128 [ 97.803638][ T7375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.826088][ T7375] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.1317: bit already cleared for inode 15 [ 97.998417][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.018832][ T7382] bridge: RTM_NEWNEIGH with invalid ether address [ 98.309480][ T7397] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 98.317746][ T7397] dummy0: left allmulticast mode [ 98.323797][ T7397] dummy0: entered allmulticast mode [ 98.329548][ T7397] team0: Port device dummy0 added [ 98.337327][ T7397] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 98.345863][ T7397] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.357443][ T7397] dummy0: left allmulticast mode [ 98.363322][ T7397] team0: Failed to send options change via netlink (err -105) [ 98.371011][ T7397] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.380436][ T7397] team0: Port device dummy0 removed [ 98.387428][ T7397] dummy0: entered allmulticast mode [ 98.392758][ T7397] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.504778][ T7409] wireguard2: entered promiscuous mode [ 98.511432][ T7409] wireguard2: entered allmulticast mode [ 98.641135][ T7424] loop0: detected capacity change from 0 to 512 [ 98.647986][ T7424] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.654958][ T7424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.670205][ T7424] EXT4-fs (loop0): 1 truncate cleaned up [ 98.679015][ T7424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.226007][ T7424] ================================================================== [ 99.234257][ T7424] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 99.242451][ T7424] [ 99.244801][ T7424] write to 0xffff88811a82d844 of 4 bytes by task 7437 on cpu 1: [ 99.252635][ T7424] xas_set_mark+0x12b/0x140 [ 99.257171][ T7424] tag_pages_for_writeback+0xc2/0x290 [ 99.262655][ T7424] ext4_do_writepages+0x6b2/0x2750 [ 99.267796][ T7424] ext4_writepages+0x176/0x300 [ 99.272606][ T7424] do_writepages+0x1c3/0x310 [ 99.277829][ T7424] filemap_write_and_wait_range+0x144/0x340 [ 99.283754][ T7424] ext4_file_write_iter+0xe04/0xf00 [ 99.288989][ T7424] iter_file_splice_write+0x666/0x9e0 [ 99.294467][ T7424] direct_splice_actor+0x153/0x2a0 [ 99.299601][ T7424] splice_direct_to_actor+0x30f/0x680 [ 99.304999][ T7424] do_splice_direct+0xda/0x150 [ 99.309868][ T7424] do_sendfile+0x380/0x650 [ 99.314402][ T7424] __x64_sys_sendfile64+0x105/0x150 [ 99.319629][ T7424] x64_sys_call+0x2bb0/0x2ff0 [ 99.324421][ T7424] do_syscall_64+0xd2/0x200 [ 99.328947][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.335024][ T7424] [ 99.337363][ T7424] read to 0xffff88811a82d844 of 4 bytes by task 7424 on cpu 0: [ 99.344999][ T7424] file_write_and_wait_range+0x10e/0x2c0 [ 99.350662][ T7424] generic_buffers_fsync_noflush+0x45/0x120 [ 99.356628][ T7424] ext4_sync_file+0x1ab/0x690 [ 99.361336][ T7424] vfs_fsync_range+0x10d/0x130 [ 99.366120][ T7424] ext4_buffered_write_iter+0x34f/0x3c0 [ 99.371702][ T7424] ext4_file_write_iter+0xdbf/0xf00 [ 99.377105][ T7424] iter_file_splice_write+0x666/0x9e0 [ 99.382593][ T7424] direct_splice_actor+0x153/0x2a0 [ 99.387727][ T7424] splice_direct_to_actor+0x30f/0x680 [ 99.393119][ T7424] do_splice_direct+0xda/0x150 [ 99.397900][ T7424] do_sendfile+0x380/0x650 [ 99.402347][ T7424] __x64_sys_sendfile64+0x105/0x150 [ 99.407623][ T7424] x64_sys_call+0x2bb0/0x2ff0 [ 99.412320][ T7424] do_syscall_64+0xd2/0x200 [ 99.416934][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.423015][ T7424] [ 99.425407][ T7424] value changed: 0x02000021 -> 0x04000021 [ 99.431139][ T7424] [ 99.433481][ T7424] Reported by Kernel Concurrency Sanitizer on: [ 99.439639][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.0.1333 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 99.452078][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.462148][ T7424] ================================================================== [ 99.615391][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.583711][ T9] TC_ACT_REPEAT abuse ?