last executing test programs: 1m54.681148441s ago: executing program 32 (id=948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r2}, &(0x7f0000000340)=0x8) 1m52.851182366s ago: executing program 33 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7197b8af8ff00000000bfa200000000000007020000f8feffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.139660412s ago: executing program 3 (id=3520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffd, 0x0, 0x8}}}}}}}, 0x0) 1m0.113186662s ago: executing program 3 (id=3522): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 1m0.073967453s ago: executing program 3 (id=3524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r2, &(0x7f0000000640)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") 1m0.027035584s ago: executing program 3 (id=3526): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m0.026464724s ago: executing program 3 (id=3528): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x6, 0x3b00, 0x0, 0xfffffffffffffdfd) 59.827040768s ago: executing program 3 (id=3533): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000040)=[{r0, 0x804f}], 0x1, 0x11ff) shutdown(r0, 0x0) 59.826845918s ago: executing program 34 (id=3533): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000040)=[{r0, 0x804f}], 0x1, 0x11ff) shutdown(r0, 0x0) 36.639711765s ago: executing program 2 (id=4562): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r1, r2) close_range(r0, 0xffffffffffffffff, 0x0) 36.554880696s ago: executing program 2 (id=4567): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) 36.510177007s ago: executing program 2 (id=4568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 36.435670159s ago: executing program 2 (id=4573): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 36.420245529s ago: executing program 2 (id=4575): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 36.282837642s ago: executing program 2 (id=4589): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba", 0x2}], 0x1, 0x5e, 0xdc) 36.262826782s ago: executing program 35 (id=4589): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba", 0x2}], 0x1, 0x5e, 0xdc) 32.813501028s ago: executing program 7 (id=4720): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x5ef}], 0x1, 0x5412, 0x0, 0x0) 32.779310729s ago: executing program 7 (id=4724): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r2], 0x7c}}, 0x80) 32.72955236s ago: executing program 7 (id=4726): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, 0x0) 32.690351381s ago: executing program 7 (id=4728): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 32.657235261s ago: executing program 7 (id=4731): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xed, {}, {}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)={0x7, 0x312, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "b395ac5160fbdac3"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 32.408177706s ago: executing program 7 (id=4741): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000010c0)=0x10) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000114010026bd7000fbdbdf250800"], 0x20}, 0x1, 0x0, 0x0, 0xd8}, 0x40090) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 32.408002046s ago: executing program 36 (id=4741): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000010c0)=0x10) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000114010026bd7000fbdbdf250800"], 0x20}, 0x1, 0x0, 0x0, 0xd8}, 0x40090) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 24.347133202s ago: executing program 4 (id=5097): sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 24.289998803s ago: executing program 4 (id=5101): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 24.288864783s ago: executing program 4 (id=5111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 24.260202903s ago: executing program 4 (id=5104): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 24.224073164s ago: executing program 4 (id=5108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x56899130b459a9f4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0xe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r2) 23.966196909s ago: executing program 4 (id=5121): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40) 23.965907419s ago: executing program 37 (id=5121): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40) 21.204120092s ago: executing program 9 (id=5216): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 21.131108273s ago: executing program 9 (id=5217): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) write(r0, 0x0, 0x0) 21.105218494s ago: executing program 9 (id=5219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x15) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xa86, 0x2) 21.031927146s ago: executing program 9 (id=5220): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 20.956847177s ago: executing program 9 (id=5226): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 20.929376417s ago: executing program 9 (id=5230): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.603085814s ago: executing program 38 (id=5230): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.952150133s ago: executing program 0 (id=5881): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 1.934550184s ago: executing program 0 (id=5882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) 1.920097454s ago: executing program 0 (id=5883): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x10, {0x8, [{0x4, 0x9b}, {0x3, 0xd}, {0x4, 0x3}, {0x1, 0xe}, {0x1, 0x24}, {0x2, 0xf9}, {0x1, 0x3}, {0x1, 0x6c}]}}, 0x14) 1.07443045s ago: executing program 0 (id=5899): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000800)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x25, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x60, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 1.07376565s ago: executing program 5 (id=5910): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000540)=r1}, 0x20) 989.440822ms ago: executing program 8 (id=5901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 988.916462ms ago: executing program 5 (id=5902): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 964.756602ms ago: executing program 5 (id=5903): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 961.839993ms ago: executing program 8 (id=5905): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 903.217644ms ago: executing program 5 (id=5907): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 876.285744ms ago: executing program 5 (id=5912): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/39, 0x27}, 0x4}], 0x1, 0x0, 0x0) 872.638194ms ago: executing program 8 (id=5913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b40500000000000061105000000000007301420000000000000000e37f6af3ebdc905d5d3c0430b7d68f3d3fd3e84add9eafec7ff4eca65331d5c8bbc095a19be3482123cfcad3c8ad920a9cf7b0695c85c0facc5b4ce387d3880b3f3757279ee4505dd4cab01ab42b2e68c4b50d7ee306b970e9ef7e6b1355b486f5f250caf3dbabf29767fe7193c65de83f3562247de7c3bb5b69198be0c8fb655d163f2d16cd4b51160c93e7d3ec8961f2f64c000000c84d26e414181a5d1a6d3bfdc6f6d2f4afb8fe3806ddd886a73ae2f5944e0f38f7181d9a8e9b401a1338bd815614c09ce4f432265b675045edec84e546fd0369769cccc2145b4bda327bd8a2eda49e4b4bb3217dff030000660100fe38c747cea6ad599e926373e29e3209740405a5a4ebd331c690bf3d2353363a9fb767d001d634e312e2ff23acdb7070b360c31cc168c751c545cc86531362862dd085075328b2bcafc3904b187638b3fd8fa7a8e57e0cdf7181971b96930cf405080da94af1467184d566c60d48eb565701aceba6270b4fbd04803cb8208f708192791588c8f8fbeeb64fb2258e423ab2033ec70c6f9466620c9f0ca405f6cc24ddee57697e13b1741952977ba95c0cf824a470afe4d35eb5826aada02a13c027a9107fe6195f5d9487081cd7704c82880f6d7b2fd749b1fe5f6bde57af33edeb03373dac55e8a4c11fba4f06635c0ca00f6003707c8838ac1828c603"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 830.205445ms ago: executing program 8 (id=5915): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x401) 829.612435ms ago: executing program 0 (id=5916): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 800.434705ms ago: executing program 8 (id=5927): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 720.278997ms ago: executing program 8 (id=5919): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 712.500197ms ago: executing program 0 (id=5921): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') 638.997329ms ago: executing program 6 (id=5923): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 585.525899ms ago: executing program 6 (id=5926): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 527.014301ms ago: executing program 6 (id=5939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) 404.708463ms ago: executing program 1 (id=5933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 338.839944ms ago: executing program 1 (id=5934): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 293.949225ms ago: executing program 1 (id=5935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000280)='system_u:object_r:vhost_device_t:s0\x00', 0x24) 253.787536ms ago: executing program 6 (id=5936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") utimes(&(0x7f0000000180)='./file0\x00', 0x0) 238.084956ms ago: executing program 1 (id=5937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r0}) 219.445817ms ago: executing program 1 (id=5938): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 19.823391ms ago: executing program 1 (id=5940): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 19.066241ms ago: executing program 6 (id=5950): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 133.491µs ago: executing program 6 (id=5941): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r2 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 0s ago: executing program 5 (id=5942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): item tag 0x0 [ 117.572659][ T3417] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.580091][ T3417] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 117.589255][ T3417] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 117.600508][T12610] serio: Serial port ptm0 [ 117.629939][T12615] sd 0:0:1:0: device reset [ 117.647123][T12613] loop7: detected capacity change from 0 to 4096 [ 117.657335][T12613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.672491][ T29] audit: type=1400 audit(121.791:4402): avc: denied { link } for pid=12612 comm="syz.7.4060" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.745094][T11390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.760537][T12627] loop5: detected capacity change from 0 to 1024 [ 117.776731][T12627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.785333][ T29] audit: type=1326 audit(121.917:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.7.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82627bebe9 code=0x7ffc0000 [ 117.811959][ T29] audit: type=1326 audit(121.917:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.7.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82627bebe9 code=0x7ffc0000 [ 117.834899][ T29] audit: type=1326 audit(121.917:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.7.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82627bebe9 code=0x7ffc0000 [ 117.857861][ T29] audit: type=1326 audit(121.917:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.7.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82627bebe9 code=0x7ffc0000 [ 117.874470][T12627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.947001][ T5545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.981356][T12645] bridge0: port 3(batadv1) entered blocking state [ 117.987952][T12645] bridge0: port 3(batadv1) entered disabled state [ 118.019834][T12645] batadv1: entered allmulticast mode [ 118.030360][T12645] batadv1: entered promiscuous mode [ 118.042286][T12657] wireguard0: entered promiscuous mode [ 118.047963][T12657] wireguard0: entered allmulticast mode [ 118.129947][T12674] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 118.138327][T12674] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 118.180031][T12682] netlink: 'syz.5.4091': attribute type 298 has an invalid length. [ 118.330781][T12705] syz_tun: entered allmulticast mode [ 118.376584][T12704] syz_tun: left allmulticast mode [ 118.432920][T12715] loop4: detected capacity change from 0 to 164 [ 118.460307][T12715] Unable to read rock-ridge attributes [ 118.466703][ T1830] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 118.476098][ T1830] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 118.487679][T12715] Unable to read rock-ridge attributes [ 118.493792][T12715] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.079475][T12777] loop9: detected capacity change from 0 to 7 [ 119.087262][T12777] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.097615][T12777] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.105629][T12777] loop9: unable to read partition table [ 119.125513][T12777] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 119.125513][T12777] ) failed (rc=-5) [ 119.192927][T12786] loop5: detected capacity change from 0 to 512 [ 119.202889][T12786] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (40000) [ 119.460721][T12802] ALSA: seq fatal error: cannot create timer (-19) [ 119.514405][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4152'. [ 119.608941][T12819] tipc: Started in network mode [ 119.613840][T12819] tipc: Node identity ac14140f, cluster identity 4711 [ 119.638963][T12819] tipc: New replicast peer: 255.255.255.255 [ 119.645033][T12819] tipc: Enabled bearer , priority 10 [ 119.653355][T12827] netlink: 'syz.4.4157': attribute type 13 has an invalid length. [ 119.661205][T12827] netlink: 'syz.4.4157': attribute type 17 has an invalid length. [ 119.711818][T12827] gretap0: refused to change device tx_queue_len [ 119.718235][T12827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.820106][T12838] loop6: detected capacity change from 0 to 2048 [ 119.847462][ T57] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.863646][T12838] loop6: p1 < > p4 [ 119.869415][T12838] loop6: p4 size 8388608 extends beyond EOD, truncated [ 119.882502][ T57] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.940064][ T57] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.969315][T12847] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.976318][ T10] IPVS: starting estimator thread 0... [ 120.007283][ T57] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.062444][T12858] IPVS: using max 2688 ests per chain, 134400 per kthread [ 120.085285][T12878] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 120.097030][T12875] loop4: detected capacity change from 0 to 1024 [ 120.115634][ T57] bridge_slave_1: left allmulticast mode [ 120.121346][ T57] bridge_slave_1: left promiscuous mode [ 120.121613][T12875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.127259][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.145134][ T57] bridge_slave_0: left allmulticast mode [ 120.150824][ T57] bridge_slave_0: left promiscuous mode [ 120.156943][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.166303][T12875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.196797][T12875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4178: bg 0: block 232: padding at end of block bitmap is not set [ 120.209458][T12889] loop6: detected capacity change from 0 to 1024 [ 120.226944][T12889] EXT4-fs: Ignoring removed bh option [ 120.232625][T12889] EXT4-fs: inline encryption not supported [ 120.236023][ T5658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.248804][T12889] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.262352][T12889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 120.271538][T12889] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.4181: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.286814][T12889] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.4181: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.301441][T12889] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4181: Failed to acquire dquot type 0 [ 120.313334][T12889] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.323081][ T57]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.332846][T12889] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.4181: mark_inode_dirty error [ 120.346122][ T57]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.354609][T12889] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 120.364993][T12889] EXT4-fs (loop6): 1 orphan inode deleted [ 120.371104][T12889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.371874][ T57]  (unregistering): Released all slaves [ 120.390283][ T1082] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.404582][ T1082] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 120.425968][T12889] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.458121][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.525384][ T57] hsr_slave_0: left promiscuous mode [ 120.538453][ T57] hsr_slave_1: left promiscuous mode [ 120.544027][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.551583][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.562960][T12912] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.573959][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.581403][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.595888][ T57] veth1_macvtap: left promiscuous mode [ 120.602283][ T3391] tipc: Node number set to 2886997007 [ 120.602295][ T57] veth0_macvtap: left promiscuous mode [ 120.602340][ T57] veth1_vlan: left promiscuous mode [ 120.602368][ T57] veth0_vlan: left promiscuous mode [ 120.691763][T12924] loop7: detected capacity change from 0 to 1024 [ 120.706750][ T57] team0 (unregistering): Port device team_slave_1 removed [ 120.715796][T12924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.738731][ T57] team0 (unregistering): Port device team_slave_0 removed [ 120.749076][T12924] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 1: comm syz.7.4196: lblock 1 mapped to illegal pblock 1 (length 15) [ 120.763682][T12924] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 120.776182][T12924] EXT4-fs (loop7): This should not happen!! Data will be lost [ 120.776182][T12924] [ 120.794912][T12920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.802376][T12920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.815005][T12920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.822460][T12920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.839917][T11390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.918838][T12852] chnl_net:caif_netlink_parms(): no params data found [ 120.985316][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.992659][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.005142][T12852] bridge_slave_0: entered allmulticast mode [ 121.011811][T12852] bridge_slave_0: entered promiscuous mode [ 121.019722][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.027107][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.034466][T12852] bridge_slave_1: entered allmulticast mode [ 121.041016][T12852] bridge_slave_1: entered promiscuous mode [ 121.058555][T12968] loop6: detected capacity change from 0 to 2048 [ 121.066814][T12968] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 121.083328][T12976] loop7: detected capacity change from 0 to 128 [ 121.120439][T12852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.135295][ T57] IPVS: stop unused estimator thread 0... [ 121.164743][T12852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.177957][T12975] SELinux: failed to load policy [ 121.216169][T12852] team0: Port device team_slave_0 added [ 121.222652][T12852] team0: Port device team_slave_1 added [ 121.235489][T12988] netlink: 'GPL': attribute type 4 has an invalid length. [ 121.252844][T12852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.259901][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.285878][T12852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.299217][T12852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.306311][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.332456][T12852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.397222][T12852] hsr_slave_0: entered promiscuous mode [ 121.403817][T12852] hsr_slave_1: entered promiscuous mode [ 121.512384][T13023] loop6: detected capacity change from 0 to 128 [ 121.549250][T13029] netlink: 'syz.6.4243': attribute type 13 has an invalid length. [ 121.569466][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4247'. [ 121.654222][T13029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.731959][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4254'. [ 121.775283][T13059] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.797437][T12852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.806868][T12852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.817724][T12852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.895088][T12852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.978415][T12852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.991006][T12852] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.001477][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.008686][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.020815][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.027948][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.046454][T12852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.056971][T12852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.105406][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 122.105420][ T29] audit: type=1326 audit(126.442:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.144380][ T29] audit: type=1326 audit(126.474:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.167969][ T29] audit: type=1326 audit(126.474:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.169249][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.190970][ T29] audit: type=1326 audit(126.474:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.220720][ T29] audit: type=1326 audit(126.474:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.243914][ T29] audit: type=1326 audit(126.484:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.267173][ T29] audit: type=1326 audit(126.484:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.290591][ T29] audit: type=1326 audit(126.484:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.313502][ T29] audit: type=1326 audit(126.484:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.336464][ T29] audit: type=1326 audit(126.484:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f760e7febe9 code=0x7ffc0000 [ 122.360039][T13101] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4270'. [ 122.437092][T12852] veth0_vlan: entered promiscuous mode [ 122.446588][T13123] loop4: detected capacity change from 0 to 1024 [ 122.456182][T12852] veth1_vlan: entered promiscuous mode [ 122.477931][T12852] veth0_macvtap: entered promiscuous mode [ 122.486582][T12852] veth1_macvtap: entered promiscuous mode [ 122.493358][T13123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.514402][T12852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.527077][T12852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.542367][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.580516][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.593479][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.602855][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.624557][T13123] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4276: Allocating blocks 449-513 which overlap fs metadata [ 122.667009][T13122] EXT4-fs (loop4): pa ffff888106e91230: logic 48, phys. 177, len 21 [ 122.675155][T13122] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 122.706549][ T5658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.723869][T13150] SELinux: security_context_str_to_sid () failed with errno=-22 [ 122.887641][T13183] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4311'. [ 122.912286][T13187] loop6: detected capacity change from 0 to 1024 [ 123.046025][T13215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4316'. [ 123.058816][T13220] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4317'. [ 123.102625][T13226] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4320'. [ 123.134490][T13233] loop5: detected capacity change from 0 to 1024 [ 123.163325][T13233] EXT4-fs: Ignoring removed nobh option [ 123.180835][T13233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.185530][T13243] netlink: 'syz.6.4327': attribute type 4 has an invalid length. [ 123.196962][T13233] EXT4-fs warning (device loop5): ext4_rename_delete:3731: inode #12: comm syz.5.4333: Deleting old file: nlink 2, error=-2 [ 123.231370][T13243] netlink: 'syz.6.4327': attribute type 4 has an invalid length. [ 123.239870][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.326654][T13260] loop6: detected capacity change from 0 to 1024 [ 123.339501][T13260] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.339527][T13260] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.340067][T13260] JBD2: no valid journal superblock found [ 123.340078][T13260] EXT4-fs (loop6): Could not load journal inode [ 123.353180][T13262] bond1: entered promiscuous mode [ 123.359342][T13260] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 123.364051][T13262] bond1: entered allmulticast mode [ 123.396676][T13262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.418579][T13262] bond1 (unregistering): Released all slaves [ 123.492842][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4341'. [ 123.670529][T13297] loop7: detected capacity change from 0 to 128 [ 123.749341][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4358'. [ 123.761421][T13310] bio_check_eod: 213 callbacks suppressed [ 123.761436][T13310] syz.7.4351: attempt to access beyond end of device [ 123.761436][T13310] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 123.794286][T13310] syz.7.4351: attempt to access beyond end of device [ 123.794286][T13310] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 123.847262][T13310] syz.7.4351: attempt to access beyond end of device [ 123.847262][T13310] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 123.862282][T13310] syz.7.4351: attempt to access beyond end of device [ 123.862282][T13310] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 123.876707][T13310] syz.7.4351: attempt to access beyond end of device [ 123.876707][T13310] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 123.892325][T13310] syz.7.4351: attempt to access beyond end of device [ 123.892325][T13310] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 123.906105][T13310] syz.7.4351: attempt to access beyond end of device [ 123.906105][T13310] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 123.949240][T13310] syz.7.4351: attempt to access beyond end of device [ 123.949240][T13310] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 123.981386][T13310] syz.7.4351: attempt to access beyond end of device [ 123.981386][T13310] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 123.995581][T13310] syz.7.4351: attempt to access beyond end of device [ 123.995581][T13310] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 124.153799][T13365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13365 comm=syz.6.4382 [ 124.232820][T13377] netlink: 'syz.2.4387': attribute type 12 has an invalid length. [ 124.241086][T13377] netlink: 'syz.2.4387': attribute type 29 has an invalid length. [ 124.249195][T13377] netlink: 'syz.2.4387': attribute type 1 has an invalid length. [ 124.257114][T13377] netlink: 'syz.2.4387': attribute type 2 has an invalid length. [ 125.175050][T13436] loop5: detected capacity change from 0 to 512 [ 125.185254][T13431] hub 2-0:1.0: USB hub found [ 125.190216][T13431] hub 2-0:1.0: 8 ports detected [ 125.198656][T13436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c098, mo2=0002] [ 125.207014][T13436] System zones: 0-2, 18-18, 34-34 [ 125.212997][T13436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.260370][T13447] loop4: detected capacity change from 0 to 128 [ 125.267745][T13436] EXT4-fs (loop5): shut down requested (2) [ 125.282478][T13436] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 125.291397][T13436] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 125.325367][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.508468][T13478] __nla_validate_parse: 4 callbacks suppressed [ 125.508482][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4431'. [ 125.537572][T13478] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4431'. [ 125.607283][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 125.626775][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 125.655963][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 125.689090][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 125.698498][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 125.873570][T13534] random: crng reseeded on system resumption [ 125.998223][ T36] hid_parser_main: 22 callbacks suppressed [ 125.998249][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 126.033195][ T36] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.116071][T13567] loop5: detected capacity change from 0 to 512 [ 126.130836][T13567] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 126.150233][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 126.164361][T13567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 126.174765][T13567] System zones: 1-12 [ 126.181271][T13567] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4469: corrupted in-inode xattr: e_value size too large [ 126.195758][T13567] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4469: couldn't read orphan inode 15 (err -117) [ 126.211859][T13567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.231726][T13562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.285811][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.424637][T13590] vhci_hcd: invalid port number 96 [ 126.429915][T13590] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 126.478044][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 126.485881][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.493366][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.500878][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.508415][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.525759][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.533435][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.540952][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 126.548471][ T1034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 126.562341][ T1034] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 126.585473][T13616] binfmt_misc: register: failed to install interpreter file ./file2 [ 126.804845][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4507'. [ 126.849718][T13654] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4519'. [ 127.087090][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 127.087102][ T29] audit: type=1400 audit(131.674:4890): avc: denied { read } for pid=13674 comm="syz.5.4516" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.117124][ T29] audit: type=1400 audit(131.674:4891): avc: denied { open } for pid=13674 comm="syz.5.4516" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.179032][ T36] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 127.221475][ T29] audit: type=1400 audit(131.811:4892): avc: denied { ioctl } for pid=13680 comm="syz.6.4531" path="socket:[41403]" dev="sockfs" ino=41403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.303395][T13693] loop6: detected capacity change from 0 to 128 [ 127.323199][T13693] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.341935][T13699] SELinux: Context  is not valid (left unmapped). [ 127.349068][ T29] audit: type=1400 audit(131.947:4893): avc: denied { create } for pid=13698 comm="syz.4.4527" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=04 [ 127.370163][ T29] audit: type=1400 audit(131.947:4894): avc: denied { associate } for pid=13698 comm="syz.4.4527" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=04 [ 127.392213][ T29] audit: type=1400 audit(131.958:4895): avc: denied { write open } for pid=13698 comm="syz.4.4527" path="/722/bus" dev="tmpfs" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=04 [ 127.421525][T13693] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.4526: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 127.446834][T13701] loop5: detected capacity change from 0 to 1024 [ 127.453420][T13693] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem [ 127.469724][ T29] audit: type=1400 audit(132.073:4896): avc: denied { unlink } for pid=5658 comm="syz-executor" name="bus" dev="tmpfs" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=04 [ 127.474079][T13693] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.4526: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 127.514541][T13701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.550864][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.569347][T13693] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem [ 127.615686][ T29] audit: type=1400 audit(132.220:4897): avc: denied { getopt } for pid=13710 comm="syz.4.4533" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.658138][ T29] audit: type=1326 audit(132.273:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.4.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 127.681513][ T29] audit: type=1326 audit(132.273:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.4.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 127.719791][ T5714] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.740187][T13721] sd 0:0:1:0: device reset [ 127.799351][T13731] loop5: detected capacity change from 0 to 128 [ 127.813042][T13731] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 127.820956][T13731] FAT-fs (loop5): Filesystem has been set read-only [ 127.828407][T13731] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 127.836377][T13731] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 128.060814][T13750] loop6: detected capacity change from 0 to 4096 [ 128.081076][T13750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.130869][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.530242][T13731] bio_check_eod: 21297 callbacks suppressed [ 128.530260][T13731] syz.5.4545: attempt to access beyond end of device [ 128.530260][T13731] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.549596][T13731] syz.5.4545: attempt to access beyond end of device [ 128.549596][T13731] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.562977][T13731] syz.5.4545: attempt to access beyond end of device [ 128.562977][T13731] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.576499][T13731] syz.5.4545: attempt to access beyond end of device [ 128.576499][T13731] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.667783][T13852] loop6: detected capacity change from 0 to 1024 [ 128.694097][T13731] syz.5.4545: attempt to access beyond end of device [ 128.694097][T13731] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.718945][T13852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.753200][T13852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.791759][T13731] syz.5.4545: attempt to access beyond end of device [ 128.791759][T13731] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.842448][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.947482][T13902] loop5: detected capacity change from 0 to 512 [ 128.982484][T13902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 129.025074][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 129.115567][T13939] netlink: 'syz.5.4580': attribute type 6 has an invalid length. [ 129.270983][T13968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13968 comm=+}[@ [ 129.283169][T13968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13968 comm=+}[@ [ 129.410285][T13992] macvtap0: refused to change device tx_queue_len [ 129.455557][ T1082] bridge_slave_1: left allmulticast mode [ 129.461255][ T1082] bridge_slave_1: left promiscuous mode [ 129.467296][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.482487][ T1082] bridge_slave_0: left allmulticast mode [ 129.488592][ T1082] bridge_slave_0: left promiscuous mode [ 129.494338][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.508808][T14005] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4608'. [ 129.562628][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.573909][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.589508][ T1082] bond0 (unregistering): (slave bond1): Releasing backup interface [ 129.604578][ T1082] bond0 (unregistering): Released all slaves [ 129.614958][ T1082] bond1 (unregistering): Released all slaves [ 129.624624][ T1082] bond2 (unregistering): Released all slaves [ 129.638144][T14009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.694416][ T1082] tipc: Disabling bearer [ 129.699417][ T1082] tipc: Disabling bearer [ 129.704416][ T1082] tipc: Left network mode [ 129.732960][ T1082] IPVS: stopping backup sync thread 5802 ... [ 129.735946][T13966] chnl_net:caif_netlink_parms(): no params data found [ 129.794657][ T1082] hsr_slave_0: left promiscuous mode [ 129.808363][ T1082] hsr_slave_1: left promiscuous mode [ 129.814042][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.826126][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.841443][T14039] loop7: detected capacity change from 0 to 512 [ 129.848664][T14037] loop4: detected capacity change from 0 to 1024 [ 129.862092][T14037] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.873366][T14037] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.886406][T14037] JBD2: no valid journal superblock found [ 129.892145][T14037] EXT4-fs (loop4): Could not load journal inode [ 129.900248][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 129.913737][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 129.924206][T14039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.988410][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.995769][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.006148][T11390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.013074][T13966] bridge_slave_0: entered allmulticast mode [ 130.022345][T13966] bridge_slave_0: entered promiscuous mode [ 130.045263][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.052556][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.063064][T13966] bridge_slave_1: entered allmulticast mode [ 130.070135][T13966] bridge_slave_1: entered promiscuous mode [ 130.103677][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.122764][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.147407][T13966] team0: Port device team_slave_0 added [ 130.153167][T14070] loop7: detected capacity change from 0 to 1764 [ 130.154201][T13966] team0: Port device team_slave_1 added [ 130.177933][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.185178][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.211243][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.222553][T14070] iso9660: Bad value for 'session' [ 130.230824][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.237890][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.263856][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.310154][T13966] hsr_slave_0: entered promiscuous mode [ 130.318090][T13966] hsr_slave_1: entered promiscuous mode [ 130.331226][T13966] debugfs: 'hsr0' already exists in 'hsr' [ 130.336984][T13966] Cannot create hsr debugfs directory [ 130.429820][T13966] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 130.440342][T13966] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.453387][T13966] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.466036][ T1082] IPVS: stop unused estimator thread 0... [ 130.468563][T14082] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 130.479201][T13966] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.528282][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.535590][T13966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.542970][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.550167][T13966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.579745][T13966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.591350][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.600393][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.618964][T13966] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.629456][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.636564][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.647724][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.655010][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.724713][T13966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.851461][T13966] veth0_vlan: entered promiscuous mode [ 130.860081][T13966] veth1_vlan: entered promiscuous mode [ 130.889213][T14109] netlink: 'syz.6.4637': attribute type 2 has an invalid length. [ 130.895139][T13966] veth0_macvtap: entered promiscuous mode [ 130.897082][T14109] netlink: 'syz.6.4637': attribute type 1 has an invalid length. [ 130.904826][T13966] veth1_macvtap: entered promiscuous mode [ 130.910505][T14109] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.4637'. [ 130.921972][T13966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.937818][T13966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.950068][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.964532][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.975661][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.994064][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.095111][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4642'. [ 131.104261][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4642'. [ 131.225911][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4650'. [ 131.330565][T14158] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 131.332318][T14159] loop6: detected capacity change from 0 to 512 [ 131.354444][T14159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.373816][T14163] loop4: detected capacity change from 0 to 512 [ 131.380881][T14163] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.392549][T14163] EXT4-fs (loop4): 1 truncate cleaned up [ 131.398956][T14163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.412102][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.442546][ T5658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.503301][T14178] netlink: 'syz.6.4666': attribute type 10 has an invalid length. [ 131.511254][T14178] dummy0: left promiscuous mode [ 131.520277][T14178] team0: Port device dummy0 added [ 131.529010][T14178] netlink: 'syz.6.4666': attribute type 10 has an invalid length. [ 131.540477][T14178] team0: Port device dummy0 removed [ 131.548147][T14178] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.658437][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5cbc00: rx timeout, send abort [ 131.666922][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a5cbc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 131.683287][T14205] loop5: detected capacity change from 0 to 512 [ 131.690622][T14205] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.701185][T14205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.727587][T14205] EXT4-fs (loop5): 1 truncate cleaned up [ 131.734135][T14205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.920237][T14233] loop4: detected capacity change from 0 to 512 [ 131.929359][T14233] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (40000) [ 131.988852][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 131.988868][ T29] audit: type=1400 audit(136.829:5133): avc: denied { create } for pid=14236 comm="syz.4.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 131.989893][T14238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.995424][ T29] audit: type=1400 audit(136.829:5134): avc: denied { write } for pid=14236 comm="syz.4.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.015724][T14238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.073481][ T29] audit: type=1326 audit(136.902:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 132.121129][ T29] audit: type=1326 audit(136.934:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 132.144176][ T29] audit: type=1326 audit(136.934:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 132.167538][ T29] audit: type=1326 audit(136.934:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 132.190423][ T29] audit: type=1326 audit(136.934:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b192febe9 code=0x7ffc0000 [ 132.221368][T14243] random: crng reseeded on system resumption [ 132.243369][ T29] audit: type=1400 audit(137.060:5140): avc: denied { create } for pid=14246 comm="syz.8.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.262505][ T29] audit: type=1400 audit(137.060:5141): avc: denied { read append } for pid=14242 comm="syz.6.4704" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.285616][ T29] audit: type=1400 audit(137.060:5142): avc: denied { ioctl open } for pid=14242 comm="syz.6.4704" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.338242][T14254] sd 0:0:1:0: device reset [ 132.387731][T14261] loop6: detected capacity change from 0 to 164 [ 132.398753][T14261] Unable to read rock-ridge attributes [ 132.454040][T14261] Unable to read rock-ridge attributes [ 132.473019][T14261] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 132.543982][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.720279][T14305] netlink: 'syz.7.4724': attribute type 6 has an invalid length. [ 132.728218][T14305] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4724'. [ 132.908653][T14321] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4734'. [ 132.984029][ T1082] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.045885][ T1082] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.129579][T14342] : renamed from veth0_to_bond (while UP) [ 133.148668][ T1082] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.248509][ T1082] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.376623][ T1082] bridge_slave_1: left allmulticast mode [ 133.382517][ T1082] bridge_slave_1: left promiscuous mode [ 133.388284][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.397416][ T1082] bridge_slave_0: left allmulticast mode [ 133.403208][ T1082] bridge_slave_0: left promiscuous mode [ 133.408980][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.515081][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.578415][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.608581][ T1082] bond0 (unregistering): Released all slaves [ 133.638826][T14378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.649303][T14378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.758825][ T1082] hsr_slave_0: left promiscuous mode [ 133.764596][ T1082] hsr_slave_1: left promiscuous mode [ 133.770281][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.777731][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.785268][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.792816][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.802460][ T1082] veth1_macvtap: left promiscuous mode [ 133.808079][ T1082] veth0_macvtap: left promiscuous mode [ 133.813776][ T1082] veth1_vlan: left promiscuous mode [ 133.819167][ T1082] veth0_vlan: left promiscuous mode [ 133.874452][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 133.884267][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 133.926629][T14343] chnl_net:caif_netlink_parms(): no params data found [ 133.959666][T14343] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.966797][T14343] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.974685][T14343] bridge_slave_0: entered allmulticast mode [ 133.981255][T14343] bridge_slave_0: entered promiscuous mode [ 133.988491][T14343] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.995748][T14343] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.003511][T14343] bridge_slave_1: entered allmulticast mode [ 134.010992][T14343] bridge_slave_1: entered promiscuous mode [ 134.027393][T14387] 9pnet_fd: Insufficient options for proto=fd [ 134.035523][T14343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.045988][T14343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.067776][T14343] team0: Port device team_slave_0 added [ 134.075170][T14343] team0: Port device team_slave_1 added [ 134.091499][T14343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.098507][T14343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.124646][T14343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.136237][T14343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.143265][T14343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.169443][T14343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.193066][ T1082] IPVS: stop unused estimator thread 0... [ 134.194854][T14396] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.220095][T14343] hsr_slave_0: entered promiscuous mode [ 134.226272][T14343] hsr_slave_1: entered promiscuous mode [ 134.233365][T14343] debugfs: 'hsr0' already exists in 'hsr' [ 134.239185][T14343] Cannot create hsr debugfs directory [ 134.313399][T14343] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 134.323065][T14343] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 134.332238][T14343] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 134.341428][T14343] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 134.357628][T14343] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.364739][T14343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.369110][T14417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.372165][T14343] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.372198][T14343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.397764][T14343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.411840][T14343] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.433505][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.448119][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.471478][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.478606][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.498783][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4771'. [ 134.502694][T14343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.518128][T14343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.534638][T14424] bridge0: port 3(batadv1) entered blocking state [ 134.541153][T14424] bridge0: port 3(batadv1) entered disabled state [ 134.547802][T14424] batadv1: entered allmulticast mode [ 134.554550][T14424] batadv1: entered promiscuous mode [ 134.562331][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.569494][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.624436][T14421] loop6: detected capacity change from 0 to 32768 [ 134.643763][T14343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.664940][T14421] loop6: p1 p3 < > [ 134.778443][T14343] veth0_vlan: entered promiscuous mode [ 134.787299][T14343] veth1_vlan: entered promiscuous mode [ 134.812098][T14343] veth0_macvtap: entered promiscuous mode [ 134.819992][T14343] veth1_macvtap: entered promiscuous mode [ 134.832059][T14343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.843307][T14343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.854815][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.865768][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.883135][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.910069][T14465] loop8: detected capacity change from 0 to 1024 [ 134.911899][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.945542][T14468] loop5: detected capacity change from 0 to 2048 [ 134.955672][T14468] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 134.966181][T14465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.989924][T14465] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.4782: inode #808782138: comm syz.8.4782: iget: illegal inode # [ 135.012742][T14465] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.4782: error while reading EA inode 808782138 err=-117 [ 135.026168][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 135.035471][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 135.056797][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.089013][T14482] loop9: detected capacity change from 0 to 1024 [ 135.096334][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 135.121900][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 135.136066][T14482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.262826][T14511] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4800'. [ 135.278387][ T12] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.303543][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 135.315952][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 135.315952][ T12] [ 135.325807][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 135.331875][ T12] EXT4-fs (loop9): Free/Dirty block details [ 135.337762][ T12] EXT4-fs (loop9): free_blocks=68451041280 [ 135.343606][ T12] EXT4-fs (loop9): dirty_blocks=320 [ 135.348798][ T12] EXT4-fs (loop9): Block reservation details [ 135.354794][ T12] EXT4-fs (loop9): i_reserved_data_blocks=20 [ 135.372826][T14343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.646330][T14551] loop4: detected capacity change from 0 to 1024 [ 135.658248][T14551] EXT4-fs: Ignoring removed bh option [ 135.667921][T14551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.717356][T14561] netlink: 'syz.9.4822': attribute type 3 has an invalid length. [ 135.738438][T14551] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4815: inode #2115177415: comm syz.4.4815: iget: illegal inode # [ 135.808653][T14551] EXT4-fs (loop4): Remounting filesystem read-only [ 135.818486][T14551] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #19: comm syz.4.4815: dec ref error=-30 [ 135.832051][T14563] loop9: detected capacity change from 0 to 128 [ 135.858407][T14563] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.885320][ T5658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.929674][T14563] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.138728][T14607] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 136.146177][T14607] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.183001][T14611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 136.189561][T14611] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.197169][T14611] vhci_hcd vhci_hcd.0: Device attached [ 136.210350][T14611] loop4: detected capacity change from 0 to 512 [ 136.238745][T14611] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.255694][T14611] EXT4-fs (loop4): mount failed [ 136.264506][T14612] vhci_hcd: connection closed [ 136.264658][ T12] vhci_hcd: stop threads [ 136.273634][ T12] vhci_hcd: release socket [ 136.278395][ T12] vhci_hcd: disconnect device [ 136.434471][T14643] pim6reg: entered allmulticast mode [ 136.441345][T14643] pim6reg: left allmulticast mode [ 136.656261][T14668] bond1: entered promiscuous mode [ 136.661327][T14668] bond1: entered allmulticast mode [ 136.668169][T14668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.688890][T14668] bond1 (unregistering): Released all slaves [ 136.703452][T14671] __nla_validate_parse: 5 callbacks suppressed [ 136.703466][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4871'. [ 136.830650][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 136.830664][ T29] audit: type=1400 audit(141.899:5372): avc: denied { create } for pid=14686 comm="syz.8.4877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.883652][ T29] audit: type=1400 audit(141.931:5373): avc: denied { setopt } for pid=14686 comm="syz.8.4877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.918267][T14700] loop9: detected capacity change from 0 to 256 [ 136.937615][ T29] audit: type=1400 audit(142.015:5374): avc: denied { mac_admin } for pid=14697 comm="syz.8.4881" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.987421][T14709] loop8: detected capacity change from 0 to 512 [ 136.994668][ T29] audit: type=1400 audit(142.046:5375): avc: denied { write } for pid=14693 comm="syz.4.4880" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.018307][ T29] audit: type=1326 audit(142.057:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355bffebe9 code=0x7ffc0000 [ 137.041374][ T29] audit: type=1326 audit(142.057:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f355bffebe9 code=0x7ffc0000 [ 137.064169][ T29] audit: type=1326 audit(142.057:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.6.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355bffebe9 code=0x7ffc0000 [ 137.088459][T14709] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 137.089228][ T29] audit: type=1400 audit(142.109:5379): avc: denied { ioctl } for pid=14710 comm="syz.6.4888" path="socket:[44829]" dev="sockfs" ino=44829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.145688][T14709] EXT4-fs (loop8): 1 truncate cleaned up [ 137.150121][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4890'. [ 137.162679][T14709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.163142][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4890'. [ 137.194169][ T29] audit: type=1400 audit(142.277:5380): avc: denied { append } for pid=14708 comm="syz.8.4885" path="/69/file2/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.276315][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.305096][ T29] audit: type=1400 audit(142.393:5381): avc: denied { create } for pid=14733 comm="syz.8.4895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.327279][T14732] loop9: detected capacity change from 0 to 512 [ 137.381449][T14732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.427131][T14343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.482419][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4910'. [ 137.504554][T14765] loop8: detected capacity change from 0 to 1024 [ 137.534126][T14765] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.542958][T14767] loop5: detected capacity change from 0 to 2048 [ 137.605535][T14765] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.4911: lblock 1 mapped to illegal pblock 1 (length 15) [ 137.621998][T14767] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.625143][T14765] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 137.646550][T14765] EXT4-fs (loop8): This should not happen!! Data will be lost [ 137.646550][T14765] [ 137.730054][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.769126][ T41] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.799810][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1984 with error 28 [ 137.812770][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 137.812770][ T41] [ 137.822509][ T41] EXT4-fs (loop5): Total free blocks count 0 [ 137.828540][ T41] EXT4-fs (loop5): Free/Dirty block details [ 137.834473][ T41] EXT4-fs (loop5): free_blocks=2415919104 [ 137.840306][ T41] EXT4-fs (loop5): dirty_blocks=2000 [ 137.845589][ T41] EXT4-fs (loop5): Block reservation details [ 137.851598][ T41] EXT4-fs (loop5): i_reserved_data_blocks=125 [ 137.868387][T14792] 9pnet_fd: Insufficient options for proto=fd [ 137.921513][T12852] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 137.954566][T14802] veth0: entered promiscuous mode [ 137.966162][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4925'. [ 138.009666][T14804] loop5: detected capacity change from 0 to 2048 [ 138.047514][T14804] loop5: p1 < > p4 [ 138.051950][T14804] loop5: p4 size 8388608 extends beyond EOD, truncated [ 138.121209][T14826] loop5: detected capacity change from 0 to 1024 [ 138.133726][T14826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.138878][T14833] loop8: detected capacity change from 0 to 1024 [ 138.153306][T14833] EXT4-fs: Ignoring removed nobh option [ 138.162840][T14833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.177686][T14826] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.4937: Allocating blocks 449-513 which overlap fs metadata [ 138.201752][T14825] EXT4-fs (loop5): pa ffff888106e913f0: logic 48, phys. 177, len 21 [ 138.201784][T14833] EXT4-fs warning (device loop8): ext4_rename_delete:3731: inode #12: comm syz.8.4939: Deleting old file: nlink 2, error=-2 [ 138.210093][T14825] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 138.251462][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.274481][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.357359][T14864] loop6: detected capacity change from 0 to 128 [ 138.382743][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4955'. [ 138.392701][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4955'. [ 138.402039][ T1830] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 138.402317][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4955'. [ 138.420975][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4955'. [ 138.812105][ T1034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1034 comm=kworker/0:2 [ 138.898306][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4980'. [ 139.006554][ T1034] IPVS: starting estimator thread 0... [ 139.062382][T14958] netlink: 'syz.6.4993': attribute type 1 has an invalid length. [ 139.103704][T14945] IPVS: using max 2832 ests per chain, 141600 per kthread [ 139.223711][T14994] atomic_op ffff88810fe53128 conn xmit_atomic 0000000000000000 [ 139.234233][T14991] syzkaller1: entered promiscuous mode [ 139.239768][T14991] syzkaller1: entered allmulticast mode [ 139.298825][T14995] loop9: detected capacity change from 0 to 8192 [ 139.360247][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 139.393911][T15023] ref_ctr_offset mismatch. inode: 0x120 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 139.409854][T15024] loop4: detected capacity change from 0 to 512 [ 139.427439][T15024] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 139.436135][T15026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.456663][T15024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 139.464641][T15024] System zones: 1-12 [ 139.567048][T15041] bridge0: entered promiscuous mode [ 139.582736][T15024] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5026: corrupted in-inode xattr: e_value size too large [ 139.594758][T15041] bridge0: port 4(macsec1) entered blocking state [ 139.603377][T15041] bridge0: port 4(macsec1) entered disabled state [ 139.612681][T15024] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5026: couldn't read orphan inode 15 (err -117) [ 139.637482][T15041] macsec1: entered allmulticast mode [ 139.642961][T15041] bridge0: entered allmulticast mode [ 139.643575][T15024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.661668][T15041] macsec1: left allmulticast mode [ 139.667004][T15041] bridge0: left allmulticast mode [ 139.673897][T15041] bridge0: left promiscuous mode [ 139.740468][ T5658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.761641][T15053] loop9: detected capacity change from 0 to 1024 [ 139.791176][T15053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.839189][T15063] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 139.845743][T15063] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.853324][T15063] vhci_hcd vhci_hcd.0: Device attached [ 139.889342][T15053] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5039: Allocating blocks 449-513 which overlap fs metadata [ 139.903854][T15070] vhci_hcd: connection closed [ 139.904320][ T51] vhci_hcd: stop threads [ 139.913584][ T51] vhci_hcd: release socket [ 139.918056][ T51] vhci_hcd: disconnect device [ 139.935115][T15073] loop8: detected capacity change from 0 to 1024 [ 139.941788][T15073] EXT4-fs: Ignoring removed bh option [ 139.943120][T15052] EXT4-fs (loop9): pa ffff888106dc9bd0: logic 48, phys. 177, len 21 [ 139.947374][T15073] EXT4-fs: inline encryption not supported [ 139.955219][T15052] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 139.980350][T15073] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.991442][T15073] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 139.992572][T14343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.001816][T15073] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.5044: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.024935][T15073] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.5044: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.040231][T15073] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.5044: Failed to acquire dquot type 0 [ 140.057008][T15073] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 140.066877][T15073] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.5044: mark_inode_dirty error [ 140.079688][T15073] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 140.090080][T15073] EXT4-fs (loop8): 1 orphan inode deleted [ 140.096395][T15073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.109789][ T1830] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.142379][ T1830] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 140.189256][T15073] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.210348][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.254121][T15091] loop5: detected capacity change from 0 to 512 [ 140.271638][T15091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.310135][T12852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.340981][T15107] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 140.349316][T15107] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 140.376069][ T3411] hid_parser_main: 26 callbacks suppressed [ 140.376087][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 140.389471][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.396996][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.404451][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.411949][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.420577][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.428049][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.435437][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.442886][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 140.450462][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.462563][ T3411] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 140.665255][T15157] loop4: detected capacity change from 0 to 2048 [ 140.680435][T15161] loop6: detected capacity change from 0 to 1024 [ 140.687405][T15161] EXT4-fs: Ignoring removed nobh option [ 140.694665][T15157] loop4: p1 < > p4 [ 140.698732][T15161] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.710119][T15157] loop4: p4 size 8388608 extends beyond EOD, truncated [ 140.710942][T15161] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.5083: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 140.736158][T15161] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5083: couldn't read orphan inode 11 (err -117) [ 140.750518][T15161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.850148][T15164] loop4: detected capacity change from 0 to 1024 [ 140.863883][T15164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.900765][T15164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.924155][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.961955][T15180] netlink: 'syz.9.5089': attribute type 1 has an invalid length. [ 140.970584][ T5658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.009103][T15180] bond1: entered promiscuous mode [ 141.017226][T15180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.032368][T15180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.040023][T15180] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 141.050286][T15180] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 141.062916][T15180] bond1: (slave vxcan3): making interface the new active one [ 141.070383][T15180] vxcan3: entered promiscuous mode [ 141.077275][T15180] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 141.110919][T15196] loop8: detected capacity change from 0 to 1024 [ 141.124435][T15196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.148331][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.372303][T15234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15234 comm=+}[@ [ 141.384554][T15234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15234 comm=+}[@ [ 141.469217][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.479062][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.506031][T15249] netlink: 'syz.8.5120': attribute type 6 has an invalid length. [ 141.525415][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.535540][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.591609][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.601413][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.631455][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 141.631470][ T29] audit: type=1326 audit(146.949:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b7a5ebe9 code=0x7ffc0000 [ 141.644731][T15271] loop9: detected capacity change from 0 to 128 [ 141.678190][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.679831][ T29] audit: type=1326 audit(146.980:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f89b7a5ebe9 code=0x7ffc0000 [ 141.688154][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.711450][ T29] audit: type=1326 audit(146.980:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b7a5ebe9 code=0x7ffc0000 [ 141.744220][ T29] audit: type=1326 audit(146.980:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f89b7a5ebe9 code=0x7ffc0000 [ 141.767294][ T29] audit: type=1326 audit(146.980:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b7a5ebe9 code=0x7ffc0000 [ 141.790345][ T29] audit: type=1326 audit(146.980:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.5128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b7a5ebe9 code=0x7ffc0000 [ 141.897536][ T57] bridge_slave_1: left allmulticast mode [ 141.903414][ T57] bridge_slave_1: left promiscuous mode [ 141.909253][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.919612][ T57] bridge_slave_0: left allmulticast mode [ 141.925452][ T57] bridge_slave_0: left promiscuous mode [ 141.931136][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.948922][ T51] kworker/u8:3: attempt to access beyond end of device [ 141.948922][ T51] loop9: rw=1, sector=145, nr_sectors = 8 limit=128 [ 141.964009][ T51] kworker/u8:3: attempt to access beyond end of device [ 141.964009][ T51] loop9: rw=1, sector=161, nr_sectors = 8 limit=128 [ 141.978001][ T51] kworker/u8:3: attempt to access beyond end of device [ 141.978001][ T51] loop9: rw=1, sector=177, nr_sectors = 8 limit=128 [ 141.992654][ T51] kworker/u8:3: attempt to access beyond end of device [ 141.992654][ T51] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 141.997880][T15288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.997880][T15288] program syz.8.5138 not setting count and/or reply_len properly [ 142.006432][ T51] kworker/u8:3: attempt to access beyond end of device [ 142.006432][ T51] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 142.036617][ T51] kworker/u8:3: attempt to access beyond end of device [ 142.036617][ T51] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 142.060180][T15290] loop8: detected capacity change from 0 to 1024 [ 142.067710][T15290] EXT4-fs: quotafile must be on filesystem root [ 142.078429][ T51] kworker/u8:3: attempt to access beyond end of device [ 142.078429][ T51] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 142.092073][ T51] kworker/u8:3: attempt to access beyond end of device [ 142.092073][ T51] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 142.118290][ T51] kworker/u8:3: attempt to access beyond end of device [ 142.118290][ T51] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 142.139403][T15294] loop8: detected capacity change from 0 to 1024 [ 142.140960][ T51] kworker/u8:3: attempt to access beyond end of device [ 142.140960][ T51] loop9: rw=1, sector=289, nr_sectors = 8 limit=128 [ 142.160781][T15294] EXT4-fs: Ignoring removed nobh option [ 142.166402][T15294] EXT4-fs: Ignoring removed bh option [ 142.182359][T15294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.197487][T15294] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.5141: Allocating blocks 481-513 which overlap fs metadata [ 142.198378][ T29] audit: type=1326 audit(147.537:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6851baebe9 code=0x7ffc0000 [ 142.226593][T15294] EXT4-fs (loop8): pa ffff888106dc9c40: logic 352, phys. 465, len 3 [ 142.242494][T15294] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 142.254800][ T29] audit: type=1326 audit(147.579:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6851baebe9 code=0x7ffc0000 [ 142.256300][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.281972][ T29] audit: type=1326 audit(147.621:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6851baebe9 code=0x7ffc0000 [ 142.282003][ T29] audit: type=1326 audit(147.621:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6851baebe9 code=0x7ffc0000 [ 142.314146][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.315199][ T57] bond0 (unregistering): Released all slaves [ 142.317547][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.317653][ T57] bond1 (unregistering): Released all slaves [ 142.356659][T15304] loop6: detected capacity change from 0 to 1764 [ 142.357079][T15304] iso9660: Bad value for 'session' [ 142.395564][ T57] IPVS: stopping master sync thread 9243 ... [ 142.479716][ T57] hsr_slave_0: left promiscuous mode [ 142.489113][ T57] hsr_slave_1: left promiscuous mode [ 142.505822][ T57] veth1_macvtap: left promiscuous mode [ 142.511653][ T57] veth0_macvtap: left promiscuous mode [ 142.517586][ T57] veth1_vlan: left promiscuous mode [ 142.523082][ T57] veth0_vlan: left promiscuous mode [ 142.591289][ T57] team0 (unregistering): Port device team_slave_1 removed [ 142.601409][ T57] team0 (unregistering): Port device team_slave_0 removed [ 142.635285][T15314] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.643301][T15326] macvtap0: refused to change device tx_queue_len [ 142.649857][ T3411] infiniband syz1: ib_query_port failed (-19) [ 142.658285][T15250] chnl_net:caif_netlink_parms(): no params data found [ 142.684521][T15337] __nla_validate_parse: 10 callbacks suppressed [ 142.684536][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5157'. [ 142.699948][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5157'. [ 142.750779][T15250] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.758308][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.765716][T15250] bridge_slave_0: entered allmulticast mode [ 142.772303][T15250] bridge_slave_0: entered promiscuous mode [ 142.779211][T15250] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.786298][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.793542][T15250] bridge_slave_1: entered allmulticast mode [ 142.800279][T15250] bridge_slave_1: entered promiscuous mode [ 142.967463][T15250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.982068][T15250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.002401][T15250] team0: Port device team_slave_0 added [ 143.009488][T15250] team0: Port device team_slave_1 added [ 143.026822][T15250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.034176][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.060180][T15250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.073990][ T57] IPVS: stop unused estimator thread 0... [ 143.080383][T15250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.087353][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.113802][T15250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.146401][T15359] loop9: detected capacity change from 0 to 7 [ 143.157623][T14343] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.165609][T14343] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.168420][T15250] hsr_slave_0: entered promiscuous mode [ 143.173527][T14343] loop9: unable to read partition table [ 143.180721][T15250] hsr_slave_1: entered promiscuous mode [ 143.191846][T15359] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.193196][T15250] debugfs: 'hsr0' already exists in 'hsr' [ 143.199986][T15359] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.205541][T15250] Cannot create hsr debugfs directory [ 143.213344][T15359] loop9: unable to read partition table [ 143.226780][T15359] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 143.226780][T15359] ) failed (rc=-5) [ 143.228628][T15361] vhci_hcd: invalid port number 96 [ 143.245177][T15361] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 143.319258][T15364] pim6reg1: entered promiscuous mode [ 143.324618][T15364] pim6reg1: entered allmulticast mode [ 143.324794][T15368] loop8: detected capacity change from 0 to 1024 [ 143.364088][T15368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.391101][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.566044][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5182'. [ 143.659159][T15250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.672597][T15250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.693416][T15250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.700194][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881090b3400: rx timeout, send abort [ 143.700242][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881090b3c00: rx timeout, send abort [ 143.708461][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881090b3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.708525][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881090b3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.764744][T15250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.823649][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 143.850186][T15250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.865240][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 143.877014][T15250] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.890866][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.898094][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.915564][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 143.935988][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 143.938385][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.952176][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.967554][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 144.028387][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 144.103467][T15250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.129861][T15462] binfmt_misc: register: failed to install interpreter file ./file0 [ 144.210221][T15477] random: crng reseeded on system resumption [ 144.228933][T15477] Restarting kernel threads ... [ 144.239065][T15477] Done restarting kernel threads. [ 144.258629][T15486] loop8: detected capacity change from 0 to 128 [ 144.265797][T15250] veth0_vlan: entered promiscuous mode [ 144.289203][T15250] veth1_vlan: entered promiscuous mode [ 144.312502][T15250] veth0_macvtap: entered promiscuous mode [ 144.337225][T15250] veth1_macvtap: entered promiscuous mode [ 144.350884][T15250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.367318][T15250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.385406][ T1082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.395239][ T1082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.407207][T15495] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2 [ 144.411203][ T1082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.452731][ T1082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.489902][T15499] hub 2-0:1.0: USB hub found [ 144.494579][T15499] hub 2-0:1.0: 8 ports detected [ 144.825594][T15548] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5243'. [ 145.073890][T15591] loop8: detected capacity change from 0 to 1024 [ 145.094144][T15591] EXT4-fs: Ignoring removed orlov option [ 145.099907][T15591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.156543][T15591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.206216][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.493763][T15627] netlink: 'syz.5.5276': attribute type 10 has an invalid length. [ 145.509148][T15627] team0: Port device dummy0 added [ 145.519653][T15627] netlink: 'syz.5.5276': attribute type 10 has an invalid length. [ 145.530702][T15627] team0: Port device dummy0 removed [ 145.538801][T15627] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.598968][T15631] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 145.909268][T15644] 9pnet_fd: Insufficient options for proto=fd [ 146.789203][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af0e200: rx timeout, send abort [ 146.797486][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811af0e200: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.154558][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 147.154574][ T29] audit: type=1400 audit(152.744:5882): avc: denied { mounton } for pid=15660 comm="syz.5.5291" path="/proc/412/task" dev="proc" ino=47635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 147.334926][ T29] audit: type=1400 audit(152.922:5883): avc: denied { audit_write } for pid=15675 comm="syz.6.5297" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.355653][ T29] audit: type=1107 audit(152.922:5884): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 147.457122][ T29] audit: type=1326 audit(153.059:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.480205][ T29] audit: type=1326 audit(153.059:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.503150][ T29] audit: type=1326 audit(153.059:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.526485][ T29] audit: type=1326 audit(153.059:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.549414][ T29] audit: type=1326 audit(153.059:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.572388][ T29] audit: type=1326 audit(153.059:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.595342][ T29] audit: type=1326 audit(153.059:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.1.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 147.623520][T15686] __nla_validate_parse: 1 callbacks suppressed [ 147.623534][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5301'. [ 147.644619][T15686] bridge0: port 3(batadv1) entered blocking state [ 147.651231][T15686] bridge0: port 3(batadv1) entered disabled state [ 147.658292][T15686] batadv1: entered allmulticast mode [ 147.664025][T15686] batadv1: entered promiscuous mode [ 147.688722][T15689] random: crng reseeded on system resumption [ 148.097904][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5315'. [ 148.107466][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5315'. [ 148.125255][ T1082] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 148.134540][ T1082] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 148.492894][T15739] loop6: detected capacity change from 0 to 512 [ 148.513237][T15742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5327'. [ 148.704306][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 148.739217][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 148.745580][T15768] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.791034][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 149.140568][T15816] netlink: 'syz.5.5361': attribute type 3 has an invalid length. [ 149.166431][T15818] loop8: detected capacity change from 0 to 512 [ 149.383457][T15834] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.390921][T15834] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.497357][T15848] netlink: 200 bytes leftover after parsing attributes in process `syz.8.5375'. [ 149.928350][T15862] pim6reg: entered allmulticast mode [ 149.938245][T15862] pim6reg: left allmulticast mode [ 149.949633][T15864] loop8: detected capacity change from 0 to 256 [ 150.299312][T15905] loop6: detected capacity change from 0 to 1024 [ 150.366184][T15905] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.5409: lblock 1 mapped to illegal pblock 1 (length 15) [ 150.415034][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5400'. [ 150.425463][T15905] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 150.437911][T15905] EXT4-fs (loop6): This should not happen!! Data will be lost [ 150.437911][T15905] [ 150.562327][T15928] loop6: detected capacity change from 0 to 512 [ 150.600535][T15932] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 150.607212][T15932] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 150.614861][T15932] vhci_hcd vhci_hcd.0: Device attached [ 150.665639][T15932] loop8: detected capacity change from 0 to 512 [ 150.683267][T15932] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.707106][T15932] EXT4-fs (loop8): mount failed [ 150.751955][T15933] vhci_hcd: connection closed [ 150.752193][ T1082] vhci_hcd: stop threads [ 150.761367][ T1082] vhci_hcd: release socket [ 150.765866][ T1082] vhci_hcd: disconnect device [ 150.792067][ T36] vhci_hcd: vhci_device speed not set [ 150.845991][T15955] loop6: detected capacity change from 0 to 164 [ 150.854809][T15955] Unable to read rock-ridge attributes [ 150.873150][T15955] Unable to read rock-ridge attributes [ 151.281560][T15972] openvswitch: netlink: Message has 6 unknown bytes. [ 151.293978][T15974] loop8: detected capacity change from 0 to 2048 [ 151.334724][T15974] loop8: p1 < > p4 [ 151.339696][T15974] loop8: p4 size 8388608 extends beyond EOD, truncated [ 151.395693][T15985] ref_ctr_offset mismatch. inode: 0x41a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 151.414648][T15980] hub 2-0:1.0: USB hub found [ 151.419546][T15980] hub 2-0:1.0: 8 ports detected [ 152.006931][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 152.006974][ T29] audit: type=1326 audit(157.835:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 152.048981][ T29] audit: type=1326 audit(157.867:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 152.071991][ T29] audit: type=1326 audit(157.867:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 152.094916][ T29] audit: type=1326 audit(157.867:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.1.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7deebe9 code=0x7ffc0000 [ 152.215270][ T29] audit: type=1326 audit(158.056:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.5.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 152.238191][ T29] audit: type=1326 audit(158.056:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.5.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 152.283617][ T29] audit: type=1326 audit(158.056:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.5.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 152.306551][ T29] audit: type=1326 audit(158.056:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.5.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 152.329432][ T29] audit: type=1326 audit(158.056:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.5.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 152.352346][ T29] audit: type=1326 audit(158.108:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.5.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 152.386187][T16047] netlink: 'syz.5.5461': attribute type 13 has an invalid length. [ 152.470134][T16047] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.477482][T16047] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.528495][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.541668][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.597971][ T57] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.616179][ T57] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.642739][ T57] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.656498][ T57] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.974441][T16100] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5487'. [ 152.999289][T16104] netlink: 'syz.8.5489': attribute type 3 has an invalid length. [ 153.078682][T16112] openvswitch: netlink: Message has 6 unknown bytes. [ 153.176000][T16126] loop8: detected capacity change from 0 to 1024 [ 153.213520][T16126] EXT4-fs mount: 8 callbacks suppressed [ 153.213537][T16126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.269020][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.599813][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5523'. [ 153.617504][T16178] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5523'. [ 153.731471][T16186] bridge0: entered promiscuous mode [ 153.778196][T16186] bridge0: port 4(macsec1) entered blocking state [ 153.784796][T16186] bridge0: port 4(macsec1) entered disabled state [ 153.792352][T16186] macsec1: entered allmulticast mode [ 153.797824][T16186] bridge0: entered allmulticast mode [ 153.813464][T16186] macsec1: left allmulticast mode [ 153.818581][T16186] bridge0: left allmulticast mode [ 153.831406][T16186] bridge0: left promiscuous mode [ 154.070524][T16198] atomic_op ffff88810466e528 conn xmit_atomic 0000000000000000 [ 154.108631][T16200] loop8: detected capacity change from 0 to 1024 [ 154.136158][T16200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.185479][T16200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.234099][T16200] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5534: bg 0: block 232: padding at end of block bitmap is not set [ 154.301400][T16210] tipc: Started in network mode [ 154.306411][T16210] tipc: Node identity ac14140f, cluster identity 4711 [ 154.344084][T16210] tipc: New replicast peer: 255.255.255.83 [ 154.350038][T16210] tipc: Enabled bearer , priority 10 [ 154.357399][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.371285][T16213] netlink: 'syz.1.5535': attribute type 1 has an invalid length. [ 154.379656][T16213] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.5535'. [ 154.775052][T16245] loop8: detected capacity change from 0 to 512 [ 154.837478][T16249] binfmt_misc: register: failed to install interpreter file ./file2 [ 154.840571][T16245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.951179][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 154.982435][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.261082][T16271] vhci_hcd: invalid port number 96 [ 155.266310][T16271] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 155.302339][T16273] loop6: detected capacity change from 0 to 1024 [ 155.328266][T16273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.413112][T12048] tipc: Node number set to 2886997007 [ 155.419244][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.696908][T16313] loop6: detected capacity change from 0 to 8192 [ 155.913026][T16335] netlink: 'syz.6.5596': attribute type 6 has an invalid length. [ 155.994513][T16349] loop6: detected capacity change from 0 to 128 [ 156.015097][T16349] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.023076][T16349] FAT-fs (loop6): Filesystem has been set read-only [ 156.033381][T16349] bio_check_eod: 102 callbacks suppressed [ 156.033396][T16349] syz.6.5601: attempt to access beyond end of device [ 156.033396][T16349] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 156.053179][T16349] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.061065][T16349] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.069575][T16349] syz.6.5601: attempt to access beyond end of device [ 156.069575][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.084331][T16349] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.092586][T16349] syz.6.5601: attempt to access beyond end of device [ 156.092586][T16349] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 156.106452][T16349] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.114326][T16349] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.123818][T16349] syz.6.5601: attempt to access beyond end of device [ 156.123818][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.137505][T16349] syz.6.5601: attempt to access beyond end of device [ 156.137505][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.151082][T16349] syz.6.5601: attempt to access beyond end of device [ 156.151082][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.165151][T16349] syz.6.5601: attempt to access beyond end of device [ 156.165151][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.178656][T16349] syz.6.5601: attempt to access beyond end of device [ 156.178656][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.192254][T16349] syz.6.5601: attempt to access beyond end of device [ 156.192254][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.205854][T16349] syz.6.5601: attempt to access beyond end of device [ 156.205854][T16349] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.851326][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 156.851342][ T29] audit: type=1326 audit(162.927:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 156.857812][T16454] loop8: detected capacity change from 0 to 1024 [ 156.994085][T16454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.004274][ T29] audit: type=1326 audit(162.958:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.027417][ T29] audit: type=1326 audit(162.958:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.050864][ T29] audit: type=1326 audit(162.958:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.073738][ T29] audit: type=1326 audit(162.958:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.098496][ T29] audit: type=1326 audit(162.958:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.121314][ T29] audit: type=1326 audit(162.958:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.5.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.157003][ T29] audit: type=1326 audit(163.116:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.5.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.164788][T16454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.180354][ T29] audit: type=1326 audit(163.126:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.5.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.215507][ T29] audit: type=1326 audit(163.126:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.5.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e264ebe9 code=0x7ffc0000 [ 157.320185][T16504] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5623'. [ 157.348351][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.349845][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5623'. [ 157.372348][T16510] loop6: detected capacity change from 0 to 512 [ 157.423231][T16514] loop8: detected capacity change from 0 to 1764 [ 157.430429][T16514] iso9660: Bad value for 'session' [ 157.433908][T16510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.483166][T16521] loop8: detected capacity change from 0 to 512 [ 157.515924][T16525] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 157.515924][T16525] program syz.5.5633 not setting count and/or reply_len properly [ 157.557618][T16521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.668181][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.691262][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.726574][T16546] macvtap0: refused to change device tx_queue_len [ 158.071360][T16592] netlink: 'syz.8.5660': attribute type 2 has an invalid length. [ 158.079225][T16592] netlink: 'syz.8.5660': attribute type 1 has an invalid length. [ 158.087393][T16592] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.5660'. [ 158.436284][T16612] loop9: detected capacity change from 0 to 7 [ 158.442789][T16612] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.450818][T16612] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.458683][T16612] loop9: unable to read partition table [ 158.465668][T16612] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 158.465668][T16612] ) failed (rc=-5) [ 159.104935][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.160595][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.172656][T16676] SELinux: failed to load policy [ 159.208055][T16645] chnl_net:caif_netlink_parms(): no params data found [ 159.220235][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.264483][T16645] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.271615][T16645] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.279379][T16645] bridge_slave_0: entered allmulticast mode [ 159.286351][T16645] bridge_slave_0: entered promiscuous mode [ 159.295171][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.307055][T16645] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.314494][T16645] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.322059][T16645] bridge_slave_1: entered allmulticast mode [ 159.328605][T16645] bridge_slave_1: entered promiscuous mode [ 159.347089][T16645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.348827][T16675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.357482][T16645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.368455][T16675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.407467][T16645] team0: Port device team_slave_0 added [ 159.417170][T16645] team0: Port device team_slave_1 added [ 159.440298][T16645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.447331][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.473281][T16645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.487385][T16645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.494404][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.520523][T16645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.544413][ T12] bridge_slave_1: left allmulticast mode [ 159.550123][ T12] bridge_slave_1: left promiscuous mode [ 159.555768][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.564229][ T12] bridge_slave_0: left allmulticast mode [ 159.569970][ T12] bridge_slave_0: left promiscuous mode [ 159.575864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.615316][T16711] binfmt_misc: register: failed to install interpreter file ./file0 [ 159.681878][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.692280][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.702516][ T12] bond0 (unregistering): Released all slaves [ 159.712012][ T12] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 159.720475][ T12] vxcan3: left promiscuous mode [ 159.726361][ T12] bond1 (unregistering): Released all slaves [ 159.753114][T16727] random: crng reseeded on system resumption [ 159.771094][T16727] Restarting kernel threads ... [ 159.771600][T16645] hsr_slave_0: entered promiscuous mode [ 159.782005][T16727] Done restarting kernel threads. [ 159.782978][T16645] hsr_slave_1: entered promiscuous mode [ 159.795372][T16645] debugfs: 'hsr0' already exists in 'hsr' [ 159.801113][T16645] Cannot create hsr debugfs directory [ 159.856100][ T12] hsr_slave_0: left promiscuous mode [ 159.865332][ T12] hsr_slave_1: left promiscuous mode [ 159.881363][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.889138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.900008][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.907634][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.951442][ T12] veth1_macvtap: left promiscuous mode [ 159.956982][ T12] veth0_macvtap: left promiscuous mode [ 159.962532][ T12] veth1_vlan: left promiscuous mode [ 159.971997][T16740] SELinux: failed to load policy [ 159.978191][ T12] veth0_vlan: left promiscuous mode [ 160.081137][T16755] loop6: detected capacity change from 0 to 128 [ 160.094976][ T12] team0 (unregistering): Port device team_slave_1 removed [ 160.104621][ T12] team0 (unregistering): Port device team_slave_0 removed [ 160.151467][T16744] pim6reg: entered allmulticast mode [ 160.158303][T16747] pim6reg: left allmulticast mode [ 160.165613][T16754] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5730'. [ 160.280741][T16786] netlink: 260 bytes leftover after parsing attributes in process `syz.8.5743'. [ 160.289978][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5743'. [ 160.402535][T16800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.410017][T16800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.426114][T16798] hub 2-0:1.0: USB hub found [ 160.430837][T16798] hub 2-0:1.0: 8 ports detected [ 160.449276][T16800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.456725][T16800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.512290][ T12] IPVS: stop unused estimator thread 0... [ 160.555034][T16815] macvtap0: refused to change device tx_queue_len [ 160.703006][T16645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.707101][T16840] loop8: detected capacity change from 0 to 256 [ 160.711733][T16834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 160.723133][T16834] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.730910][T16834] vhci_hcd vhci_hcd.0: Device attached [ 160.738767][T16645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.747786][T16838] vhci_hcd: connection closed [ 160.749895][ T31] vhci_hcd: stop threads [ 160.750287][T16645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.754735][ T31] vhci_hcd: release socket [ 160.770172][ T31] vhci_hcd: disconnect device [ 160.797471][T16645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.848976][T16845] loop6: detected capacity change from 0 to 512 [ 160.856947][T16845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 160.889406][T16845] System zones: 1-12 [ 160.906823][T16645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.916093][T16845] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.5769: error while reading EA inode 32 err=-116 [ 160.920732][T16645] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.941971][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.949063][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.973495][T16845] EXT4-fs (loop6): Remounting filesystem read-only [ 160.980166][T16845] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 161.003956][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.011192][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.026058][T16845] EXT4-fs (loop6): 1 orphan inode deleted [ 161.042219][T16845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.079470][T16645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.089909][T16645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.137501][T16867] syzkaller1: entered promiscuous mode [ 161.143012][T16867] syzkaller1: entered allmulticast mode [ 161.149475][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.200777][T16645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.280040][T16887] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5781'. [ 161.316119][T16645] veth0_vlan: entered promiscuous mode [ 161.339137][T16645] veth1_vlan: entered promiscuous mode [ 161.367578][T16645] veth0_macvtap: entered promiscuous mode [ 161.377743][T16645] veth1_macvtap: entered promiscuous mode [ 161.407305][T16645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.427720][T16645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.445643][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.462131][T16913] pimreg: entered allmulticast mode [ 161.474503][T16913] pimreg: left allmulticast mode [ 161.498578][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.514175][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.523122][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.800423][T16935] loop8: detected capacity change from 0 to 512 [ 161.826457][T16935] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 161.855211][T16935] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 161.870687][T16935] EXT4-fs (loop8): 1 truncate cleaned up [ 161.877465][T16935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.965845][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.976766][T16948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16948 comm=syz.0.5803 [ 162.020100][T16952] netlink: 332 bytes leftover after parsing attributes in process `syz.8.5805'. [ 162.119773][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 162.119786][ T29] audit: type=1400 audit(168.459:6648): avc: denied { create } for pid=16961 comm="syz.5.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.147768][ T29] audit: type=1400 audit(168.480:6649): avc: denied { connect } for pid=16961 comm="syz.5.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.232267][ T29] audit: type=1400 audit(168.575:6650): avc: denied { read } for pid=16969 comm="syz.5.5813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.347338][ T29] audit: type=1400 audit(168.690:6651): avc: denied { name_connect } for pid=16974 comm="syz.8.5814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 162.367443][ T29] audit: type=1400 audit(168.690:6652): avc: denied { getopt } for pid=16974 comm="syz.8.5814" lport=50710 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.418265][T16979] loop8: detected capacity change from 0 to 1024 [ 162.425521][T16979] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.436512][T16979] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 162.444857][T16979] EXT4-fs (loop8): orphan cleanup on readonly fs [ 162.451662][T16979] Quota error (device loop8): v2_read_file_info: Can't read info structure [ 162.460404][T16979] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 162.474923][T16979] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 162.482408][T16979] EXT4-fs (loop8): 1 truncate cleaned up [ 162.488392][T16979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.510583][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.525223][ T29] audit: type=1400 audit(168.879:6653): avc: denied { bind } for pid=16981 comm="syz.8.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.545434][ T29] audit: type=1400 audit(168.879:6654): avc: denied { name_bind } for pid=16981 comm="syz.8.5817" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 162.566886][ T29] audit: type=1400 audit(168.879:6655): avc: denied { node_bind } for pid=16981 comm="syz.8.5817" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 162.608336][ T29] audit: type=1400 audit(168.963:6656): avc: denied { name_bind } for pid=16987 comm="syz.8.5820" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 162.664640][T16998] loop6: detected capacity change from 0 to 128 [ 162.671533][T16998] vfat: Bad value for 'gid' [ 162.676056][T16998] vfat: Bad value for 'gid' [ 162.710764][T17004] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 162.762845][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 162.772460][T17013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5832'. [ 162.966841][T17044] netlink: 'syz.1.5847': attribute type 1 has an invalid length. [ 163.078079][T17053] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5851'. [ 163.247064][T17066] sd 0:0:1:0: device reset [ 163.777035][T17148] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5894'. [ 163.797218][T17148] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5894'. [ 163.822290][T17148] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5894'. [ 164.545587][T17185] netlink: 'syz.1.5906': attribute type 3 has an invalid length. [ 164.564759][T17173] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.709425][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5918'. [ 164.721701][T17209] bridge0: port 4(batadv0) entered blocking state [ 164.728426][T17209] bridge0: port 4(batadv0) entered disabled state [ 164.735102][T17209] batadv0: entered allmulticast mode [ 164.741487][T17209] batadv0: entered promiscuous mode [ 164.769378][T17212] loop8: detected capacity change from 0 to 512 [ 164.776622][T17212] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.784190][T17212] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 164.799352][T17212] EXT4-fs (loop8): 1 truncate cleaned up [ 164.805916][T17212] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.862531][T17227] netlink: 'syz.1.5925': attribute type 10 has an invalid length. [ 164.874228][T17227] team0: Port device dummy0 added [ 164.884758][T17227] netlink: 'syz.1.5925': attribute type 10 has an invalid length. [ 164.897405][T17227] team0: Port device dummy0 removed [ 164.904923][T17227] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.203843][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 165.213395][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 165.511896][T17228] ================================================================== [ 165.520029][T17228] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 165.528307][T17228] [ 165.530644][T17228] write to 0xffff88810060fb04 of 4 bytes by task 17212 on cpu 0: [ 165.538336][T17228] xas_set_mark+0x12b/0x140 [ 165.542824][T17228] __folio_start_writeback+0x1dd/0x440 [ 165.548267][T17228] ext4_bio_write_folio+0x5ad/0x9f0 [ 165.553487][T17228] mpage_process_page_bufs+0x4a1/0x620 [ 165.559126][T17228] mpage_prepare_extent_to_map+0x786/0xc00 [ 165.564949][T17228] ext4_do_writepages+0xa05/0x2750 [ 165.570061][T17228] ext4_writepages+0x176/0x300 [ 165.574811][T17228] do_writepages+0x1c6/0x310 [ 165.579383][T17228] file_write_and_wait_range+0x156/0x2c0 [ 165.585004][T17228] generic_buffers_fsync_noflush+0x45/0x120 [ 165.590885][T17228] ext4_sync_file+0x1ab/0x690 [ 165.595546][T17228] vfs_fsync_range+0x10d/0x130 [ 165.600299][T17228] ext4_buffered_write_iter+0x34f/0x3c0 [ 165.605867][T17228] ext4_file_write_iter+0xdbf/0xf00 [ 165.611055][T17228] iter_file_splice_write+0x663/0xa60 [ 165.616409][T17228] direct_splice_actor+0x153/0x2a0 [ 165.621528][T17228] splice_direct_to_actor+0x30f/0x680 [ 165.626981][T17228] do_splice_direct+0xda/0x150 [ 165.631747][T17228] do_sendfile+0x380/0x650 [ 165.636201][T17228] __x64_sys_sendfile64+0x105/0x150 [ 165.641403][T17228] x64_sys_call+0x2bb0/0x2ff0 [ 165.646075][T17228] do_syscall_64+0xd2/0x200 [ 165.650582][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.656481][T17228] [ 165.658804][T17228] read to 0xffff88810060fb04 of 4 bytes by task 17228 on cpu 1: [ 165.666619][T17228] filemap_write_and_wait_range+0xfc/0x340 [ 165.672555][T17228] filemap_invalidate_pages+0xa4/0x1a0 [ 165.678094][T17228] kiocb_invalidate_pages+0x6e/0x80 [ 165.683324][T17228] __iomap_dio_rw+0x5d4/0x1250 [ 165.688088][T17228] iomap_dio_rw+0x40/0x90 [ 165.692421][T17228] ext4_file_write_iter+0xad9/0xf00 [ 165.697630][T17228] iter_file_splice_write+0x663/0xa60 [ 165.703001][T17228] direct_splice_actor+0x153/0x2a0 [ 165.708114][T17228] splice_direct_to_actor+0x30f/0x680 [ 165.713565][T17228] do_splice_direct+0xda/0x150 [ 165.718337][T17228] do_sendfile+0x380/0x650 [ 165.722755][T17228] __x64_sys_sendfile64+0x105/0x150 [ 165.727956][T17228] x64_sys_call+0x2bb0/0x2ff0 [ 165.732628][T17228] do_syscall_64+0xd2/0x200 [ 165.737173][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.743074][T17228] [ 165.745386][T17228] value changed: 0x0a000021 -> 0x04000021 [ 165.751091][T17228] [ 165.753400][T17228] Reported by Kernel Concurrency Sanitizer on: [ 165.759638][T17228] CPU: 1 UID: 0 PID: 17228 Comm: syz.8.5919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.769444][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.779544][T17228] ================================================================== [ 165.892266][T13966] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.