last executing test programs: 57.17483956s ago: executing program 1 (id=142): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x41009432, 0x0) 56.977425045s ago: executing program 1 (id=148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000c00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x9, 0x700, 0x7}, {0xffffffff, 0x0, 0x1, 0xfefffffffffffffc, 0x0, 0x40000000000000}]}) 56.619521885s ago: executing program 1 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 56.43214893s ago: executing program 1 (id=168): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodioread_nolock}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 56.125089598s ago: executing program 4 (id=176): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0x3}) close(0x3) 56.08572795s ago: executing program 4 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000000)) 56.039337901s ago: executing program 4 (id=181): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 55.984270072s ago: executing program 1 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigaction(0x1b, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 55.970122993s ago: executing program 4 (id=183): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3d) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 55.888886225s ago: executing program 4 (id=185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 55.571081934s ago: executing program 1 (id=199): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 55.570794364s ago: executing program 4 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 55.541154195s ago: executing program 32 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 55.527305425s ago: executing program 33 (id=199): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 37.99000708s ago: executing program 3 (id=680): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback, @multicast2}, 0xc) 37.941629811s ago: executing program 3 (id=683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 37.910757972s ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu==0||!') 37.857715103s ago: executing program 3 (id=690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1022}], 0x2, 0x0, 0x0, 0x0) 37.702199778s ago: executing program 3 (id=697): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 37.330244638s ago: executing program 3 (id=705): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x3c}}, 0x4) 37.330035218s ago: executing program 34 (id=705): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x3c}}, 0x4) 30.75584888s ago: executing program 0 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e946fb9bfb9b", 0x7}], 0x2}, 0x0) 30.75550747s ago: executing program 0 (id=857): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) 30.681480472s ago: executing program 0 (id=861): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 30.657674132s ago: executing program 0 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$nfs4(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) 30.627789633s ago: executing program 0 (id=865): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 30.517227587s ago: executing program 0 (id=867): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000340)) 30.488902528s ago: executing program 35 (id=867): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000340)) 7.911036341s ago: executing program 2 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1400"], 0x28}}, 0x0) 7.758356836s ago: executing program 2 (id=1601): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 7.575490621s ago: executing program 2 (id=1608): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 7.543244062s ago: executing program 2 (id=1610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/47) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 7.318469078s ago: executing program 2 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 7.144165143s ago: executing program 2 (id=1628): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="040910bc995fce1c8107", 0xa) 7.119443043s ago: executing program 36 (id=1628): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="040910bc995fce1c8107", 0xa) 1.366877882s ago: executing program 6 (id=1794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x40000002) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 1.326862284s ago: executing program 6 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 1.279928645s ago: executing program 6 (id=1800): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffd, 0x1000000000014, 0x5bb, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.153761478s ago: executing program 6 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.07378034s ago: executing program 6 (id=1804): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='mountstats\x00') 707.14146ms ago: executing program 7 (id=1823): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000380)=""/234, 0xea, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f", 0xbc}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 619.974403ms ago: executing program 9 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x02~s&\xb6\xcd\x94^\x8cE\xa8.1o\xc94\xfe\x82\xe0\x8c\xd4\xe2Q\x05\t\x97?\"\xc0\xed\x15\x8c\xbeA\xcc-\x85\xf3ps\xc4#\x00A^{-2E\x8c(V*\x06WD\bUv\x93\xb9\x1a\x9d\x87KT\x14Muj0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 579.714794ms ago: executing program 9 (id=1831): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 549.081145ms ago: executing program 7 (id=1833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecb, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 547.088445ms ago: executing program 9 (id=1834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0xfffffef1) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x1000000, 0x3, 0x4000}}, 0x20) 524.425256ms ago: executing program 9 (id=1836): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0xffff, 0xb, @mcast2, 0x9}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r2, &(0x7f0000000280)=""/208, 0xd0, 0x0) 446.727378ms ago: executing program 9 (id=1839): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) 400.820919ms ago: executing program 9 (id=1840): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0xa724, 0x2, 0x0, 0x0) 400.026969ms ago: executing program 7 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270121406"], 0xffdd) 375.92358ms ago: executing program 8 (id=1842): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) 297.668932ms ago: executing program 8 (id=1843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 297.249902ms ago: executing program 6 (id=1844): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x8) 274.633353ms ago: executing program 8 (id=1846): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300031a0500400012800e0001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 219.132134ms ago: executing program 7 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 205.180534ms ago: executing program 7 (id=1848): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x5040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 153.613546ms ago: executing program 8 (id=1850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 137.849356ms ago: executing program 5 (id=1851): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="442266eb5396", 'erspan0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 81.557868ms ago: executing program 5 (id=1852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x7fff, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 81.269468ms ago: executing program 8 (id=1853): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) 80.811948ms ago: executing program 5 (id=1854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4401000010000100fdffffbf00010000fe880000000000000000000000000001ff010000000000000000000000000001000107944e230005020000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000fcffffff000000000900000000000000ff01000000000000ffff0000000000001d25080000000000fefffffffffffffff8ffffffffffffff0000000000000000ffffffffffffffff03000000000000000100000000000000ff0100000000000002000000fcffffff000000002abd700000000000020001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) 59.812938ms ago: executing program 8 (id=1855): timer_create(0x7, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 51.410979ms ago: executing program 5 (id=1856): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 558.4µs ago: executing program 5 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r2) 0s ago: executing program 5 (id=1859): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) close(r0) kernel console output (not intermixed with test programs): inode #3: block 2: comm syz.6.324: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.297687][ T4436] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.324: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.322036][ T4436] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.324: Failed to acquire dquot type 0 [ 44.324992][ T4441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.376829][ T4436] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 44.378502][ T4441] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.326: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 44.412241][ T4436] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.324: mark_inode_dirty error [ 44.430635][ T4436] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 44.440972][ T4436] EXT4-fs (loop6): 1 orphan inode deleted [ 44.447666][ T4436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.460322][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.476734][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 44.492678][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.503187][ T4436] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm syz.6.324: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.554988][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.578872][ T4467] loop0: detected capacity change from 0 to 256 [ 44.585488][ T3960] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 44.606842][ T3960] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 44.641131][ T3960] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 44.716054][ T4481] netem: change failed [ 44.801916][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 44.803438][ T4488] netlink: 27 bytes leftover after parsing attributes in process `syz.3.342'. [ 44.810913][ T4492] netlink: 'syz.0.345': attribute type 9 has an invalid length. [ 44.874899][ T4496] xt_policy: neither incoming nor outgoing policy selected [ 44.889768][ T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.898960][ T31] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.917660][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.927650][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.039099][ T4511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 45.112038][ T4520] syz.5.357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.180698][ T4526] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 46.106478][ T4556] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 46.187351][ T4561] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 46.242679][ T10] IPVS: starting estimator thread 0... [ 46.316378][ T4574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.377'. [ 46.333529][ T4566] IPVS: using max 2640 ests per chain, 132000 per kthread [ 46.534727][ T4592] loop3: detected capacity change from 0 to 1024 [ 46.573485][ T4592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.609315][ T4600] netlink: 188 bytes leftover after parsing attributes in process `syz.0.391'. [ 46.660579][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 46.660591][ T29] audit: type=1400 audit(1763537066.350:520): avc: denied { name_bind } for pid=4603 comm="syz.2.393" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 46.705105][ T4606] veth0: entered promiscuous mode [ 46.712051][ T4605] veth0: left promiscuous mode [ 46.787598][ T29] audit: type=1326 audit(1763537066.470:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb640cf6c9 code=0x7ffc0000 [ 46.811139][ T29] audit: type=1326 audit(1763537066.470:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb640cf6c9 code=0x7ffc0000 [ 46.834442][ T29] audit: type=1326 audit(1763537066.470:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcb640cf6c9 code=0x7ffc0000 [ 46.857652][ T29] audit: type=1326 audit(1763537066.480:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb640cf6c9 code=0x7ffc0000 [ 46.891697][ T29] audit: type=1326 audit(1763537066.480:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb640cf6c9 code=0x7ffc0000 [ 46.916267][ T29] audit: type=1400 audit(1763537066.610:526): avc: denied { read write } for pid=4621 comm="syz.0.401" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.939866][ T29] audit: type=1400 audit(1763537066.610:527): avc: denied { open } for pid=4621 comm="syz.0.401" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.016502][ T29] audit: type=1400 audit(1763537066.710:528): avc: denied { create } for pid=4633 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.016630][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 47.075957][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 47.106124][ T29] audit: type=1400 audit(1763537066.740:529): avc: denied { ioctl } for pid=4633 comm="syz.0.404" path="socket:[8573]" dev="sockfs" ino=8573 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.122976][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 47.384328][ T4662] netlink: 56 bytes leftover after parsing attributes in process `syz.6.415'. [ 47.398356][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.516183][ T4674] loop3: detected capacity change from 0 to 2048 [ 47.578301][ T3889] loop3: p1 < > p4 [ 47.584602][ T3889] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.600999][ T4679] 9pnet: Could not find request transport: f [ 47.614849][ T4674] loop3: p1 < > p4 [ 47.625048][ T4674] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.766395][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.768572][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 47.815291][ T4702] loop5: detected capacity change from 0 to 512 [ 47.877684][ T4702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.892484][ T4709] Falling back ldisc for ttyS3. [ 47.916766][ T4702] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.939967][ T4702] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.433: corrupted inode contents [ 47.965414][ T4702] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.433: mark_inode_dirty error [ 48.009518][ T4702] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.433: corrupted inode contents [ 48.034083][ T4718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.433: corrupted inode contents [ 48.073172][ T4718] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.433: mark_inode_dirty error [ 48.098141][ C1] hrtimer: interrupt took 55070 ns [ 48.120720][ T4718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.433: corrupted inode contents [ 48.163744][ T4718] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.433: mark_inode_dirty error [ 48.183516][ T4718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.433: corrupted inode contents [ 48.214822][ T4718] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.433: mark_inode_dirty error [ 48.277272][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.356449][ T4733] netlink: 76 bytes leftover after parsing attributes in process `syz.5.444'. [ 48.421125][ T4736] loop5: detected capacity change from 0 to 1024 [ 48.443208][ T4736] EXT4-fs: Ignoring removed bh option [ 48.466722][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 48.488921][ T4736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.523720][ T4736] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.446: Allocating blocks 385-513 which overlap fs metadata [ 48.558243][ T4736] EXT4-fs (loop5): pa ffff88810722a0e0: logic 16, phys. 129, len 24 [ 48.566508][ T4736] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 48.624586][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.095605][ T4777] netlink: 'syz.6.463': attribute type 3 has an invalid length. [ 49.116325][ T4779] netlink: 'syz.3.464': attribute type 4 has an invalid length. [ 49.143774][ T4779] netlink: 'syz.3.464': attribute type 4 has an invalid length. [ 49.207134][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 49.463193][ T4826] loop6: detected capacity change from 0 to 1024 [ 49.477375][ T4826] EXT4-fs: Ignoring removed orlov option [ 49.494195][ T4826] EXT4-fs (loop6): Invalid log block size: 27052 [ 49.560986][ T4841] $Hÿ: renamed from bond0 (while UP) [ 49.576100][ T4841] $Hÿ: entered promiscuous mode [ 49.581251][ T4841] bond_slave_0: entered promiscuous mode [ 49.587236][ T4841] bond_slave_1: entered promiscuous mode [ 49.746508][ T4857] netlink: 'syz.5.500': attribute type 12 has an invalid length. [ 49.754315][ T4857] netlink: 'syz.5.500': attribute type 29 has an invalid length. [ 49.838263][ T4865] __nla_validate_parse: 6 callbacks suppressed [ 49.838279][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 49.855902][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 49.865893][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 49.875118][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 49.900858][ T4869] netlink: 'syz.2.505': attribute type 4 has an invalid length. [ 49.921534][ T4871] netlink: 51 bytes leftover after parsing attributes in process `syz.5.506'. [ 49.930903][ T4869] netlink: 'syz.2.505': attribute type 4 has an invalid length. [ 50.707164][ T4912] netlink: 'syz.6.526': attribute type 27 has an invalid length. [ 50.764804][ T4912] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.772318][ T4912] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.932497][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.956279][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.017453][ T2406] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.055646][ T2406] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.085013][ T2406] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.100620][ T2406] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.357034][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.542'. [ 51.365936][ T4958] netlink: 'syz.6.542': attribute type 12 has an invalid length. [ 51.373708][ T4958] netlink: 'syz.6.542': attribute type 13 has an invalid length. [ 51.406470][ T4958] vxlan0: entered promiscuous mode [ 51.412507][ T323] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.424971][ T323] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.434030][ T323] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.449986][ T323] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.501982][ T4971] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 51.550307][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.557790][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.565286][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.572671][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.580138][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.587633][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.595089][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.602500][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.610158][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.617626][ T3424] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 51.628849][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 51.633991][ T3424] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 51.704645][ T4985] fido_id[4985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.900440][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 51.900455][ T29] audit: type=1326 audit(1763537071.590:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 51.948990][ T29] audit: type=1326 audit(1763537071.620:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 51.972331][ T29] audit: type=1326 audit(1763537071.630:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 51.995616][ T29] audit: type=1326 audit(1763537071.630:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.019138][ T29] audit: type=1326 audit(1763537071.630:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.042421][ T29] audit: type=1326 audit(1763537071.630:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.065664][ T29] audit: type=1326 audit(1763537071.630:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.089032][ T29] audit: type=1326 audit(1763537071.630:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.112402][ T29] audit: type=1326 audit(1763537071.630:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.135610][ T29] audit: type=1326 audit(1763537071.630:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b2a8f6c9 code=0x7ffc0000 [ 52.213588][ T5024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.573'. [ 52.222516][ T5024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.573'. [ 52.327425][ T5035] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 52.338140][ T5034] IPVS: stopping master sync thread 5035 ... [ 52.397463][ T5041] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.441272][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'. [ 52.867046][ T5132] netlink: 'syz.2.598': attribute type 6 has an invalid length. [ 53.192620][ T5169] netlink: 'syz.5.612': attribute type 3 has an invalid length. [ 53.198212][ T5174] loop2: detected capacity change from 0 to 1024 [ 53.236511][ T5174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.291245][ T5174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.455704][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.758148][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.877335][ T5259] loop6: detected capacity change from 0 to 256 [ 54.182407][ T5296] loop6: detected capacity change from 0 to 512 [ 54.210032][ T5296] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.216594][ T5296] EXT4-fs: inline encryption not supported [ 54.236042][ T5296] EXT4-fs: test_dummy_encryption option not supported [ 54.291061][ T5309] FAT-fs (loop5): unable to read boot sector [ 54.421220][ T5332] IPVS: Error connecting to the multicast addr [ 54.575728][ T5357] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 54.595108][ T5359] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 54.601143][ T5357] batadv0: entered promiscuous mode [ 54.609592][ T5357] batadv0: entered allmulticast mode [ 54.632215][ T5357] bridge0: port 3(batadv0) entered blocking state [ 54.638870][ T5357] bridge0: port 3(batadv0) entered disabled state [ 54.662509][ T5357] bridge0: port 3(batadv0) entered blocking state [ 54.669099][ T5357] bridge0: port 3(batadv0) entered forwarding state [ 54.793349][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 54.802631][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 54.842445][ T5374] xt_hashlimit: max too large, truncated to 1048576 [ 54.922524][ T5385] __nla_validate_parse: 11 callbacks suppressed [ 54.922539][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 54.949594][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 54.951368][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.965854][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.986134][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.993832][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.024203][ T5399] netlink: 5 bytes leftover after parsing attributes in process `syz.6.675'. [ 55.033284][ T5399] 0ªî{X¹¦: renamed from gretap0 [ 55.039699][ T5399] 0ªî{X¹¦: entered allmulticast mode [ 55.046251][ T5399] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 55.132500][ T5409] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 55.144545][ T5409] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 55.273867][ T5432] loop3: detected capacity change from 0 to 512 [ 55.291052][ T5432] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.304204][ T5432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.331658][ T5432] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.346443][ T5432] EXT4-fs (loop3): 1 truncate cleaned up [ 55.357395][ T5432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.415062][ T3320] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /127/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 55.457317][ T3320] EXT4-fs (loop3): Remounting filesystem read-only [ 55.523048][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 55.543377][ T5455] loop5: detected capacity change from 0 to 164 [ 55.546348][ T5457] loop2: detected capacity change from 0 to 1024 [ 55.557134][ T5455] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.569582][ T5457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.572356][ T5455] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.590902][ T5455] Symlink component flag not implemented [ 55.596565][ T5455] Symlink component flag not implemented [ 55.602438][ T5455] Symlink component flag not implemented (7) [ 55.608462][ T5455] Symlink component flag not implemented (116) [ 55.612390][ T5457] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.702: Allocating blocks 449-513 which overlap fs metadata [ 55.644677][ T5456] EXT4-fs (loop2): pa ffff88810722a0e0: logic 48, phys. 177, len 21 [ 55.652821][ T5456] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 55.672273][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.704183][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.716670][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.775805][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.804866][ T5475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.831503][ T5475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.852862][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.895522][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.934735][ T5496] SELinux: policydb version 0 does not match my version range 15-35 [ 55.956034][ T5496] SELinux: failed to load policy [ 55.966854][ T31] bridge_slave_1: left allmulticast mode [ 55.972558][ T31] bridge_slave_1: left promiscuous mode [ 55.978578][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.986351][ T31] bridge_slave_0: left allmulticast mode [ 55.991993][ T31] bridge_slave_0: left promiscuous mode [ 55.997747][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.095383][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.105200][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.115017][ T31] bond0 (unregistering): Released all slaves [ 56.190392][ T31] hsr_slave_0: left promiscuous mode [ 56.206296][ T31] hsr_slave_1: left promiscuous mode [ 56.214436][ T5512] loop6: detected capacity change from 0 to 512 [ 56.218040][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.228119][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.237080][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.244632][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.253661][ T5512] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.717: inode has both inline data and extents flags [ 56.273090][ T31] veth1_macvtap: left promiscuous mode [ 56.281571][ T31] veth0_macvtap: left promiscuous mode [ 56.281672][ T5512] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.717: couldn't read orphan inode 15 (err -117) [ 56.288143][ T31] veth1_vlan: left promiscuous mode [ 56.307404][ T31] veth0_vlan: left promiscuous mode [ 56.313764][ T5512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.413262][ T31] team0 (unregistering): Port device team_slave_1 removed [ 56.423736][ T31] team0 (unregistering): Port device team_slave_0 removed [ 56.552639][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 56.574310][ T5512] syz.6.717 (5512) used greatest stack depth: 9192 bytes left [ 56.596035][ T5543] loop5: detected capacity change from 0 to 764 [ 56.606262][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.654103][ T5543] rock: directory entry would overflow storage [ 56.656825][ T5555] netlink: 16 bytes leftover after parsing attributes in process `syz.6.726'. [ 56.660310][ T5543] rock: sig=0x4f50, size=4, remaining=3 [ 56.674904][ T5543] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.751460][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.758591][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.783689][ T5484] bridge_slave_0: entered allmulticast mode [ 56.830404][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.728'. [ 56.839212][ T5484] bridge_slave_0: entered promiscuous mode [ 56.861406][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.868581][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.901555][ T5484] bridge_slave_1: entered allmulticast mode [ 56.908804][ T5568] loop6: detected capacity change from 0 to 2048 [ 56.910152][ T5484] bridge_slave_1: entered promiscuous mode [ 56.939510][ T5568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.964271][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.975207][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.997214][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.009020][ T5484] team0: Port device team_slave_0 added [ 57.015643][ T5484] team0: Port device team_slave_1 added [ 57.040710][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.047743][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.073741][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.112937][ T5585] wireguard0: entered promiscuous mode [ 57.118446][ T5585] wireguard0: entered allmulticast mode [ 57.126855][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.133874][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.159851][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.216787][ T5599] netlink: 'syz.5.736': attribute type 39 has an invalid length. [ 57.218629][ T5484] hsr_slave_0: entered promiscuous mode [ 57.235632][ T5484] hsr_slave_1: entered promiscuous mode [ 57.241533][ T5484] debugfs: 'hsr0' already exists in 'hsr' [ 57.247311][ T5484] Cannot create hsr debugfs directory [ 57.321887][ T5608] netlink: 188 bytes leftover after parsing attributes in process `syz.6.738'. [ 57.425665][ T5484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 57.447628][ T5484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 57.465981][ T5484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 57.483395][ T5484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 57.535224][ T5641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 57.546506][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.568963][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.606732][ T2406] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.613875][ T2406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.628507][ T2406] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.635663][ T2406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.638780][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 57.692101][ T5650] bond1: Unable to set down delay as MII monitoring is disabled [ 57.704969][ T5650] bond1 (unregistering): Released all slaves [ 57.770146][ T5664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5664 comm=syz.5.752 [ 57.782552][ T5664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5664 comm=syz.5.752 [ 57.791428][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 57.791443][ T29] audit: type=1400 audit(57.760:750): avc: denied { associate } for pid=5666 comm="syz.2.750" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.821410][ T5667] loop0: detected capacity change from 0 to 2048 [ 57.869577][ T5673] program syz.5.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.872584][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.878924][ T29] audit: type=1400 audit(57.840:751): avc: denied { append } for pid=5672 comm="syz.5.754" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.919006][ T5667] loop0: p1 < > p4 [ 57.933251][ T5680] capability: warning: `syz.5.758' uses 32-bit capabilities (legacy support in use) [ 57.943014][ T5667] loop0: p4 size 8388608 extends beyond EOD, truncated [ 57.989285][ T29] audit: type=1326 audit(57.960:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.011867][ T29] audit: type=1326 audit(57.960:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.036460][ T29] audit: type=1326 audit(58.010:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.059147][ T29] audit: type=1326 audit(58.010:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.081853][ T29] audit: type=1326 audit(58.010:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.104445][ T29] audit: type=1326 audit(58.010:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.127283][ T29] audit: type=1326 audit(58.010:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.149990][ T29] audit: type=1326 audit(58.010:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 58.349234][ T5700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 58.358722][ T5700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 58.385541][ T5702] loop6: detected capacity change from 0 to 512 [ 58.410178][ T5702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.438858][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 58.451105][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 58.477370][ T5702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.519335][ T5484] veth0_vlan: entered promiscuous mode [ 58.568608][ T5484] veth1_vlan: entered promiscuous mode [ 58.593345][ T5714] loop0: detected capacity change from 0 to 512 [ 58.610814][ T5714] EXT4-fs: Ignoring removed oldalloc option [ 58.627374][ T5714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.649094][ T5484] veth0_macvtap: entered promiscuous mode [ 58.662179][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.663415][ T5484] veth1_macvtap: entered promiscuous mode [ 58.685334][ T5714] EXT4-fs (loop0): 1 truncate cleaned up [ 58.697604][ T5714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.717507][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.728958][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.747147][ T2103] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.791142][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.808597][ T2103] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.817393][ T2103] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.826624][ T2103] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.917920][ T5736] netlink: 'syz.7.774': attribute type 39 has an invalid length. [ 58.921746][ T5735] pim6reg: entered allmulticast mode [ 58.955815][ T5742] xt_policy: neither incoming nor outgoing policy selected [ 58.966865][ T5735] pim6reg: left allmulticast mode [ 58.996402][ T5745] loop0: detected capacity change from 0 to 1024 [ 59.014840][ T5745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.051130][ T5745] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.777: Allocating blocks 449-513 which overlap fs metadata [ 59.075490][ T5744] EXT4-fs (loop0): pa ffff88810722a230: logic 48, phys. 177, len 21 [ 59.083690][ T5744] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 59.101640][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.133284][ T5750] loop0: detected capacity change from 0 to 2048 [ 59.144512][ T5750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.165269][ T5750] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.778: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 59.192084][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.492152][ T5763] loop5: detected capacity change from 0 to 1024 [ 59.499320][ T5763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.514379][ T5765] netlink: 'syz.0.784': attribute type 27 has an invalid length. [ 59.524460][ T5763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.605856][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.613159][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.827097][ T2406] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.836369][ T2406] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.855299][ T5800] loop6: detected capacity change from 0 to 1024 [ 59.875727][ T2406] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.884810][ T2406] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.904328][ T5800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.928579][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.930966][ T2406] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.946624][ T2406] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.982821][ T2406] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.991718][ T2406] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.066843][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.079667][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.419337][ T5830] loop7: detected capacity change from 0 to 2048 [ 60.437321][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.469965][ T5830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.508718][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.696267][ T5853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5853 comm=syz.6.807 [ 60.708746][ T5853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5853 comm=syz.6.807 [ 60.734005][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.7.809'. [ 60.759033][ T5859] pimreg: entered allmulticast mode [ 60.787105][ T5859] pimreg: left allmulticast mode [ 60.927436][ T5876] loop5: detected capacity change from 0 to 1024 [ 60.951880][ T5882] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 60.958504][ T5882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.966192][ T5882] vhci_hcd vhci_hcd.0: Device attached [ 60.982980][ T5883] vhci_hcd: connection closed [ 60.983282][ T2103] vhci_hcd: stop threads [ 60.992240][ T2103] vhci_hcd: release socket [ 60.996757][ T2103] vhci_hcd: disconnect device [ 61.002273][ T5876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.260564][ T5897] SELinux: failed to load policy [ 61.392931][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.467065][ T5918] netlink: 96 bytes leftover after parsing attributes in process `syz.2.833'. [ 61.568240][ T5933] pim6reg: entered allmulticast mode [ 61.575575][ T5933] pim6reg: left allmulticast mode [ 61.643895][ T5943] loop6: detected capacity change from 0 to 764 [ 61.643986][ T5942] loop2: detected capacity change from 0 to 1024 [ 61.662044][ T5943] rock: directory entry would overflow storage [ 61.664079][ T5942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.668372][ T5943] rock: sig=0x4f50, size=4, remaining=3 [ 61.686075][ T5943] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 61.995375][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.206185][ T5969] loop2: detected capacity change from 0 to 164 [ 62.223360][ T5969] bio_check_eod: 13080 callbacks suppressed [ 62.223376][ T5969] syz.2.853: attempt to access beyond end of device [ 62.223376][ T5969] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.243169][ T5969] syz.2.853: attempt to access beyond end of device [ 62.243169][ T5969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.277832][ T5972] netlink: 'syz.2.854': attribute type 39 has an invalid length. [ 62.507731][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 62.516766][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 62.525684][ T5999] netlink: 'syz.2.866': attribute type 6 has an invalid length. [ 62.577599][ T2406] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.589170][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 62.598017][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 62.606956][ T5999] netlink: 'syz.2.866': attribute type 6 has an invalid length. [ 62.615128][ T2406] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.637264][ T2406] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.657691][ T2406] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.777726][ T323] bridge_slave_1: left allmulticast mode [ 62.783485][ T323] bridge_slave_1: left promiscuous mode [ 62.789126][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.821790][ T323] bridge_slave_0: left allmulticast mode [ 62.827508][ T323] bridge_slave_0: left promiscuous mode [ 62.833365][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.932261][ T323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.953677][ T323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.975945][ T323] bond0 (unregistering): Released all slaves [ 63.031852][ T323] hsr_slave_0: left promiscuous mode [ 63.065237][ T323] hsr_slave_1: left promiscuous mode [ 63.184564][ T323] team0 (unregistering): Port device team_slave_1 removed [ 63.202556][ T323] team0 (unregistering): Port device team_slave_0 removed [ 63.206793][ T6043] SELinux: failed to load policy [ 63.218457][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 63.218469][ T29] audit: type=1326 audit(63.190:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9dd7f6c9 code=0x7ffc0000 [ 63.261591][ T29] audit: type=1326 audit(63.190:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9dd7f6c9 code=0x7ffc0000 [ 63.284386][ T29] audit: type=1326 audit(63.220:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad9dd7f6c9 code=0x7ffc0000 [ 63.307020][ T29] audit: type=1326 audit(63.220:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9dd7f6c9 code=0x7ffc0000 [ 63.329735][ T29] audit: type=1326 audit(63.220:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fad9dd7f6c9 code=0x7ffc0000 [ 63.352695][ T29] audit: type=1326 audit(63.220:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9dd7f6c9 code=0x7ffc0000 [ 63.403307][ T29] audit: type=1326 audit(63.370:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.6.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 63.425993][ T29] audit: type=1326 audit(63.370:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.6.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 63.448975][ T29] audit: type=1326 audit(63.370:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.6.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 63.471624][ T29] audit: type=1326 audit(63.370:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.6.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 63.682374][ T323] IPVS: stop unused estimator thread 0... [ 63.746683][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 63.763853][ T6102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 63.770451][ T6102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.778054][ T6102] vhci_hcd vhci_hcd.0: Device attached [ 63.815868][ T6103] vhci_hcd: connection closed [ 63.819066][ T41] vhci_hcd: stop threads [ 63.828112][ T41] vhci_hcd: release socket [ 63.832560][ T41] vhci_hcd: disconnect device [ 63.856894][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.864081][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.891792][ T6008] bridge_slave_0: entered allmulticast mode [ 63.919390][ T6008] bridge_slave_0: entered promiscuous mode [ 63.952505][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.959788][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.993113][ T6008] bridge_slave_1: entered allmulticast mode [ 64.003658][ T6008] bridge_slave_1: entered promiscuous mode [ 64.084477][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.133301][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.179871][ T6147] xt_hashlimit: max too large, truncated to 1048576 [ 64.191616][ T6008] team0: Port device team_slave_0 added [ 64.201415][ T6008] team0: Port device team_slave_1 added [ 64.229122][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.236137][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.262331][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.284484][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.291496][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.317420][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.411551][ T6168] IPv6: Can't replace route, no match found [ 64.440087][ T6008] hsr_slave_0: entered promiscuous mode [ 64.458484][ T6008] hsr_slave_1: entered promiscuous mode [ 64.472262][ T6008] debugfs: 'hsr0' already exists in 'hsr' [ 64.478048][ T6008] Cannot create hsr debugfs directory [ 64.527886][ T6182] loop7: detected capacity change from 0 to 1024 [ 64.565261][ T6182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.693438][ T6008] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 64.709305][ T6008] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 64.727332][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.740286][ T6008] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 64.755362][ T6008] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 64.855343][ T6220] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 64.861895][ T6220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.869432][ T6220] vhci_hcd vhci_hcd.0: Device attached [ 64.870596][ T6224] tmpfs: Too small a size for current use [ 64.895915][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.916091][ T6226] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 64.924503][ T6226] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 64.927453][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.940852][ T6221] vhci_hcd: connection closed [ 64.941138][ T41] vhci_hcd: stop threads [ 64.950275][ T41] vhci_hcd: release socket [ 64.954732][ T41] vhci_hcd: disconnect device [ 64.979911][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.987077][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.000368][ T6229] loop7: detected capacity change from 0 to 1024 [ 65.018853][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.026043][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.034646][ T6229] EXT4-fs (loop7): filesystem is read-only [ 65.040671][ T6229] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 65.054129][ T6229] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.084679][ T6229] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.928: inode #1: comm syz.7.928: iget: illegal inode # [ 65.114837][ T6229] EXT4-fs (loop7): no journal found [ 65.120156][ T6229] EXT4-fs (loop7): can't get journal size [ 65.141893][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.149097][ T6229] EXT4-fs (loop7): failed to initialize system zone (-22) [ 65.156698][ T6229] EXT4-fs (loop7): mount failed [ 65.456377][ T6008] veth0_vlan: entered promiscuous mode [ 65.495218][ T6008] veth1_vlan: entered promiscuous mode [ 65.507317][ T6275] loop6: detected capacity change from 0 to 1024 [ 65.541682][ T6008] veth0_macvtap: entered promiscuous mode [ 65.554460][ T6275] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.565387][ T6275] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.584904][ T6008] veth1_macvtap: entered promiscuous mode [ 65.615440][ T6275] JBD2: no valid journal superblock found [ 65.621289][ T6275] EXT4-fs (loop6): Could not load journal inode [ 65.632141][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.654062][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.680524][ T6275] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 65.712188][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.744714][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.777680][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.810643][ T6296] loop7: detected capacity change from 0 to 512 [ 65.822835][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.837776][ T6296] EXT4-fs: Ignoring removed i_version option [ 65.855911][ T6296] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 65.874276][ T6296] EXT4-fs (loop7): 1 truncate cleaned up [ 65.880544][ T6296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.933879][ T6296] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.949: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 65.997989][ T6309] EXT4-fs error (device loop7): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.7.949: path /36/file0/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=148 fake=0 [ 66.066734][ T6296] EXT4-fs error (device loop7): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.7.949: path /36/file0/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=148 fake=0 [ 66.115425][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.8.956'. [ 66.158736][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.238932][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.963'. [ 66.345711][ T6343] vhci_hcd: invalid port number 23 [ 66.354617][ T6344] netlink: 32 bytes leftover after parsing attributes in process `syz.7.968'. [ 66.363516][ T6344] netem: unknown loss type 13 [ 66.368228][ T6344] netem: change failed [ 66.435404][ T6348] loop7: detected capacity change from 0 to 1024 [ 66.465861][ T6348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.497958][ T6348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 66.518421][ T6346] loop6: detected capacity change from 0 to 8192 [ 66.533373][ T6348] System zones: 0-1, 3-36 [ 66.545227][ T6348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.563077][ T6346] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.606391][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.673473][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.975'. [ 66.793781][ T6375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.879018][ T6380] loop2: detected capacity change from 0 to 4096 [ 66.922552][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.020757][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.8.988'. [ 67.070954][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.156138][ T6405] loop8: detected capacity change from 0 to 256 [ 67.196256][ T6405] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 67.908818][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1030'. [ 67.929912][ T6502] netlink: 'syz.8.1031': attribute type 3 has an invalid length. [ 67.974974][ T6507] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1034'. [ 68.013744][ T6510] loop8: detected capacity change from 0 to 128 [ 68.328861][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 68.328873][ T29] audit: type=1326 audit(324.307:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.367196][ T6549] loop6: detected capacity change from 0 to 256 [ 68.396695][ T29] audit: type=1326 audit(324.337:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.419793][ T29] audit: type=1326 audit(324.337:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.442697][ T29] audit: type=1326 audit(324.337:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.465474][ T29] audit: type=1326 audit(324.337:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.483105][ T6553] loop7: detected capacity change from 0 to 1024 [ 68.488299][ T29] audit: type=1326 audit(324.337:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.517681][ T29] audit: type=1326 audit(324.337:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.540515][ T29] audit: type=1326 audit(324.337:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.550032][ T6553] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 68.563323][ T29] audit: type=1326 audit(324.337:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.563431][ T29] audit: type=1326 audit(324.337:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 68.630065][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.630065][ T323] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 68.666683][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.666683][ T323] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 68.684608][ T6549] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 68.702422][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.702422][ T323] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 68.721977][ T6553] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.732993][ T6553] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.759794][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.759794][ T323] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 68.791114][ T6553] JBD2: no valid journal superblock found [ 68.797016][ T6553] EXT4-fs (loop7): Could not load journal inode [ 68.813361][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.813361][ T323] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 68.863295][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.863295][ T323] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 68.922292][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.922292][ T323] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 68.970902][ T323] kworker/u8:5: attempt to access beyond end of device [ 68.970902][ T323] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 69.006914][ T6587] vlan2: entered allmulticast mode [ 69.034328][ T323] kworker/u8:5: attempt to access beyond end of device [ 69.034328][ T323] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 69.087504][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1062'. [ 69.119971][ T323] kworker/u8:5: attempt to access beyond end of device [ 69.119971][ T323] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 69.180566][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 69.228150][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 69.614849][ T6650] vlan2: entered promiscuous mode [ 69.619940][ T6650] gretap0: entered promiscuous mode [ 69.945933][ T6677] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.013676][ T6686] loop6: detected capacity change from 0 to 1024 [ 70.064656][ T6686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 70.099912][ T5787] kernel read not supported for file bpf-prog (pid: 5787 comm: kworker/1:9) [ 70.112640][ T6694] ip6t_srh: unknown srh match flags 4000 [ 70.118547][ T6686] System zones: 0-1, 3-36 [ 70.136286][ T6686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.160627][ T6697] loop8: detected capacity change from 0 to 512 [ 70.183917][ T6697] EXT4-fs: Ignoring removed oldalloc option [ 70.216108][ T6697] EXT4-fs: Ignoring removed bh option [ 70.223353][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.258838][ T6697] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.1096: corrupted in-inode xattr: e_value size too large [ 70.299792][ T6697] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1096: couldn't read orphan inode 15 (err -117) [ 70.336990][ T6697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.350477][ T6708] loop6: detected capacity change from 0 to 128 [ 70.370214][ T6708] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.427024][ T6697] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 12: comm syz.8.1096: lblock 3 mapped to illegal pblock 12 (length 1) [ 70.469318][ T3960] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.484521][ T6714] loop2: detected capacity change from 0 to 2048 [ 70.500649][ T3006] udevd[3006]: worker [3889] terminated by signal 33 (Unknown signal 33) [ 70.509653][ T3006] udevd[3006]: worker [3889] failed while handling '/devices/virtual/block/loop7' [ 70.522170][ T6008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.546232][ T3309] loop2: p1 < > p4 [ 70.552205][ T3309] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.566703][ T6720] netlink: 'syz.7.1107': attribute type 1 has an invalid length. [ 70.574495][ T6720] netlink: 'syz.7.1107': attribute type 2 has an invalid length. [ 70.592284][ T6714] loop2: p1 < > p4 [ 70.606564][ T6714] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.618708][ T6728] loop6: detected capacity change from 0 to 512 [ 70.633275][ T3006] loop2: p1 < > p4 [ 70.643315][ T3006] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.684347][ T6728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.770448][ T5777] hid_parser_main: 9 callbacks suppressed [ 70.770464][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.783818][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.791218][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.798659][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.818567][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.826120][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.833563][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.841023][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.848430][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.853318][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.855911][ T5777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.875902][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 70.887290][ T5777] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.947634][ T6761] fido_id[6761]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.994774][ T6718] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 18: comm syz.6.1104: lblock 23 mapped to illegal pblock 18 (length 1) [ 71.010191][ T6718] EXT4-fs (loop6): Remounting filesystem read-only [ 71.074043][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.157981][ T6790] netlink: 'syz.5.1130': attribute type 13 has an invalid length. [ 71.231564][ T6794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6794 comm=syz.2.1132 [ 71.276594][ T6798] loop2: detected capacity change from 0 to 128 [ 71.283361][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.290662][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.299171][ T6798] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.345009][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.381452][ T5777] IPVS: starting estimator thread 0... [ 71.393056][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.410102][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.425594][ T6810] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 71.472979][ T6805] IPVS: using max 2448 ests per chain, 122400 per kthread [ 71.544966][ T6822] loop2: detected capacity change from 0 to 512 [ 71.589977][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.667601][ T6813] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.1138: lblock 23 mapped to illegal pblock 18 (length 1) [ 71.683445][ T6813] EXT4-fs (loop2): Remounting filesystem read-only [ 71.690296][ T323] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.690366][ T6792] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 71.709695][ T323] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.718705][ T323] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.727632][ T323] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.765320][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.929693][ T6861] netem: incorrect gi model size [ 71.934791][ T6861] netem: change failed [ 71.959696][ T6864] __nla_validate_parse: 1 callbacks suppressed [ 71.959709][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1154'. [ 72.101403][ T5792] IPVS: starting estimator thread 0... [ 72.192813][ T6888] IPVS: using max 2880 ests per chain, 144000 per kthread [ 72.213111][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1171'. [ 72.259798][ T6907] smc: net device bond0 applied user defined pnetid SYZ0 [ 72.293207][ T6907] smc: net device bond0 erased user defined pnetid SYZ0 [ 72.322272][ T5792] IPVS: starting estimator thread 0... [ 72.385851][ T323] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.412979][ T6918] IPVS: using max 2688 ests per chain, 134400 per kthread [ 72.499922][ T6941] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 72.570148][ T6949] loop2: detected capacity change from 0 to 512 [ 72.584971][ T6949] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.615677][ T6949] EXT4-fs (loop2): mount failed [ 72.791397][ T6971] netlink: 'syz.8.1201': attribute type 13 has an invalid length. [ 73.035099][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.042290][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.096533][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.108010][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.377419][ T323] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.414400][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 73.414413][ T29] audit: type=1400 audit(329.387:1182): avc: denied { create } for pid=6981 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.440724][ T323] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.449967][ T323] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.459070][ T323] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.468147][ T29] audit: type=1400 audit(329.397:1183): avc: denied { setopt } for pid=6981 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.490617][ T6984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6984 comm=syz.5.1207 [ 73.503142][ T6984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6984 comm=syz.5.1207 [ 73.538222][ T29] audit: type=1326 audit(329.517:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.561115][ T29] audit: type=1326 audit(329.517:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.616894][ T29] audit: type=1326 audit(329.567:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.639915][ T29] audit: type=1326 audit(329.567:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.662696][ T29] audit: type=1326 audit(329.577:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.685510][ T29] audit: type=1326 audit(329.577:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.708322][ T29] audit: type=1326 audit(329.577:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 73.731182][ T29] audit: type=1326 audit(329.577:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.6.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee87f6c9 code=0x7ffc0000 [ 74.070709][ T7036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.200091][ T7049] loop8: detected capacity change from 0 to 1024 [ 74.208610][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 74.219587][ T7049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.244240][ T6008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.278228][ T7051] SELinux: failed to load policy [ 74.402794][ T6930] Bluetooth: hci0: command 0x1003 tx timeout [ 74.402813][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.714709][ T7095] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.768260][ T7101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7101 comm=syz.5.1259 [ 74.780864][ T7101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7101 comm=syz.5.1259 [ 74.969042][ T7111] sctp: [Deprecated]: syz.7.1265 (pid 7111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.969042][ T7111] Use struct sctp_sack_info instead [ 75.245538][ T7146] sctp: [Deprecated]: syz.5.1278 (pid 7146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.245538][ T7146] Use struct sctp_sack_info instead [ 75.325853][ T7154] macvtap0: refused to change device tx_queue_len [ 75.448331][ T7165] loop6: detected capacity change from 0 to 512 [ 75.473558][ T7165] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1282: bad orphan inode 13 [ 75.493611][ T7165] ext4_test_bit(bit=12, block=4) = 1 [ 75.498947][ T7165] is_bad_inode(inode)=0 [ 75.503125][ T7165] NEXT_ORPHAN(inode)=0 [ 75.507204][ T7165] max_ino=32 [ 75.510394][ T7165] i_nlink=1 [ 75.541323][ T7165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.562976][ T7166] Falling back ldisc for ttyS3. [ 75.565074][ T7159] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1282: Unrecognised inode hash code 20 [ 75.579356][ T7159] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1282: Corrupt directory, running e2fsck is recommended [ 75.592356][ T7159] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1282: Unrecognised inode hash code 20 [ 75.603899][ T7159] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1282: Corrupt directory, running e2fsck is recommended [ 75.619040][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1285'. [ 75.628109][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1285'. [ 75.692543][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.754585][ T7189] sctp: [Deprecated]: syz.6.1289 (pid 7189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.754585][ T7189] Use struct sctp_sack_info instead [ 76.013362][ T7212] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1297'. [ 76.042465][ T7216] bridge1: entered promiscuous mode [ 76.480896][ T7262] loop8: detected capacity change from 0 to 512 [ 76.504496][ T7262] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.673954][ T6008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.687554][ T7282] loop5: detected capacity change from 0 to 128 [ 76.715139][ T7282] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.742134][ T7292] loop7: detected capacity change from 0 to 128 [ 76.750597][ T7292] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.769533][ T7282] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.791418][ T7292] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.803220][ T7300] loop6: detected capacity change from 0 to 512 [ 76.831586][ T7300] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1326: inode has both inline data and extents flags [ 76.882171][ T7300] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1326: couldn't read orphan inode 15 (err -117) [ 76.896424][ T7300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.067400][ T7324] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1334'. [ 77.148252][ T7330] netlink: 'syz.7.1336': attribute type 3 has an invalid length. [ 77.355798][ T7347] loop5: detected capacity change from 0 to 512 [ 77.369786][ T7345] netlink: 'syz.2.1343': attribute type 3 has an invalid length. [ 77.384223][ T7347] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1344: corrupted in-inode xattr: invalid ea_ino [ 77.403279][ T7347] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1344: couldn't read orphan inode 15 (err -117) [ 77.419379][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.420020][ T7347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.455253][ T7349] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.462596][ T7349] vhci_hcd: invalid port number 96 [ 77.467842][ T7349] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 77.559161][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.930633][ T7389] loop5: detected capacity change from 0 to 512 [ 77.948380][ T7389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.965451][ T7389] EXT4-fs: Ignoring removed oldalloc option [ 77.983707][ T7391] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 78.010538][ T7389] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1363: Parent and EA inode have the same ino 15 [ 78.023528][ T7389] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1363: Parent and EA inode have the same ino 15 [ 78.039421][ T7389] EXT4-fs (loop5): 1 orphan inode deleted [ 78.045919][ T7389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.100002][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1366'. [ 78.114653][ C0] vcan0: j1939_session_tx_dat: 0xffff888119341800: queue data error: -100 [ 78.123453][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 78.131009][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 78.138649][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.146513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.154389][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.162192][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.170040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.177905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.185742][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.193569][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.201404][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.209242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.217097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.224951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.232790][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.238260][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.240598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.257396][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.265220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.273095][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.280898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.288739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.296565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.304571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.312368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.320443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.328249][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.336100][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.343937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.351768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.359594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.367405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.375197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.383014][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.390970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.398819][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.406791][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.414640][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.422434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.430357][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.438150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.445951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.453759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.461556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.469353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.477159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.484957][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.492788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.500604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.508413][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.517268][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.525082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.532871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.540694][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.548508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.556317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.564108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.571923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.579814][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.587630][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.595422][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.603416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.611203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.619030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.626837][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.634635][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.642454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.650269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.658122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.665940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.673752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.681556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.689358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.697177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.704973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.712806][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.720599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.728409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.736206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.744025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.751802][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.759621][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.767458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.775268][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.783080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.790883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.798684][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.806519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.814317][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.822115][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.829915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.835358][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 78.835369][ T29] audit: type=1400 audit(334.807:1498): avc: denied { connect } for pid=7405 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.837730][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.870646][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.878522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.886337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.894159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.901946][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.909780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.917597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.925418][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.933212][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.941087][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.948882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.956686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.964494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.972294][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.980091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.987918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.995823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.003716][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.011506][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.019332][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.027156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.034982][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.042790][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.050787][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.058592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.066458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.074288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.082076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.089899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.097707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.105520][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.113537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.121331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.129233][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.137030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.144871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.152670][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.187876][ T29] audit: type=1400 audit(335.167:1499): avc: denied { read } for pid=7411 comm="syz.5.1372" dev="nsfs" ino=4026533488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.208701][ T29] audit: type=1400 audit(335.167:1500): avc: denied { open } for pid=7411 comm="syz.5.1372" path="net:[4026533488]" dev="nsfs" ino=4026533488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.232318][ T29] audit: type=1400 audit(335.177:1501): avc: denied { create } for pid=7411 comm="syz.5.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.251756][ T29] audit: type=1400 audit(335.177:1502): avc: denied { bind } for pid=7411 comm="syz.5.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.270986][ T29] audit: type=1400 audit(335.197:1503): avc: denied { open } for pid=7414 comm=2B935B40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.276234][ T7416] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 79.289433][ T29] audit: type=1400 audit(335.197:1504): avc: denied { kernel } for pid=7414 comm=2B935B40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.315354][ T29] audit: type=1400 audit(335.197:1505): avc: denied { tracepoint } for pid=7414 comm=2B935B40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.334587][ T29] audit: type=1400 audit(335.257:1506): avc: denied { write } for pid=7411 comm="syz.5.1372" path="socket:[17170]" dev="sockfs" ino=17170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.359855][ T29] audit: type=1400 audit(335.337:1507): avc: denied { execmem } for pid=7417 comm="syz.8.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.444425][ T7431] loop7: detected capacity change from 0 to 256 [ 79.479509][ T7431] FAT-fs (loop7): Directory bread(block 64) failed [ 79.489125][ T7431] FAT-fs (loop7): Directory bread(block 65) failed [ 79.502874][ T7431] FAT-fs (loop7): Directory bread(block 66) failed [ 79.518051][ T7438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7438 comm=syz.2.1379 [ 79.529110][ T7437] loop5: detected capacity change from 0 to 512 [ 79.531055][ T7431] FAT-fs (loop7): Directory bread(block 67) failed [ 79.553114][ T7431] FAT-fs (loop7): Directory bread(block 68) failed [ 79.560814][ T7437] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.581568][ T7431] FAT-fs (loop7): Directory bread(block 69) failed [ 79.602121][ T7431] FAT-fs (loop7): Directory bread(block 70) failed [ 79.612864][ T7437] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 79.627218][ T7431] FAT-fs (loop7): Directory bread(block 71) failed [ 79.633925][ T7431] FAT-fs (loop7): Directory bread(block 72) failed [ 79.640490][ T7431] FAT-fs (loop7): Directory bread(block 73) failed [ 79.652142][ T7437] EXT4-fs (loop5): 1 truncate cleaned up [ 79.668515][ T7437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.681717][ T7431] bio_check_eod: 101 callbacks suppressed [ 79.681732][ T7431] syz.7.1380: attempt to access beyond end of device [ 79.681732][ T7431] loop7: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 79.742787][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.891995][ T7462] xt_hashlimit: max too large, truncated to 1048576 [ 80.350547][ T7507] rdma_op ffff8881043fb980 conn xmit_rdma 0000000000000000 [ 80.614688][ T7532] rdma_op ffff8881043fa980 conn xmit_rdma 0000000000000000 [ 80.695249][ T7536] loop6: detected capacity change from 0 to 512 [ 80.718944][ T7536] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.775964][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.785106][ T7543] macvtap0: refused to change device tx_queue_len [ 80.812260][ T7536] EXT4-fs (loop6): 1 truncate cleaned up [ 80.820011][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.848874][ T60] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 80.849243][ T7536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.020927][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.066194][ T7556] loop2: detected capacity change from 0 to 1024 [ 81.106550][ T7556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.115065][ T7556] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 81.493836][ T7590] loop6: detected capacity change from 0 to 1024 [ 81.510475][ T7590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.518968][ T7590] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 81.548227][ T7594] loop7: detected capacity change from 0 to 1024 [ 81.573404][ T7594] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.613397][ T7594] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 81.658154][ T7594] EXT4-fs (loop7): orphan cleanup on readonly fs [ 81.683719][ T7594] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.1449: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.732386][ T7594] EXT4-fs (loop7): 1 orphan inode deleted [ 81.740515][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1455'. [ 81.740668][ T7611] loop5: detected capacity change from 0 to 512 [ 81.768346][ T7594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.772367][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1455'. [ 81.794316][ T7611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.837469][ T7611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.853508][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.916564][ T7620] loop7: detected capacity change from 0 to 512 [ 81.940223][ T7620] EXT4-fs: Ignoring removed oldalloc option [ 81.969302][ T7620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.995020][ T7620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 81.995917][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.011772][ T7620] System zones: 1-3, 19-19, 35-38 [ 82.042940][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.054766][ T7620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.071338][ T7630] loop8: detected capacity change from 0 to 512 [ 82.098664][ T7630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.112678][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.189858][ T6008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.356555][ T7648] atomic_op ffff88811a55e928 conn xmit_atomic 0000000000000000 [ 82.461134][ T7660] netlink: 'syz.8.1476': attribute type 1 has an invalid length. [ 82.468995][ T7660] netlink: 'syz.8.1476': attribute type 2 has an invalid length. [ 82.476836][ T7660] netlink: 'syz.8.1476': attribute type 3 has an invalid length. [ 82.484699][ T7660] netlink: 208 bytes leftover after parsing attributes in process `syz.8.1476'. [ 82.550282][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.568780][ T7663] SELinux: failed to load policy [ 82.578449][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1479'. [ 82.755402][ T7686] syzkaller1: entered promiscuous mode [ 82.760916][ T7686] syzkaller1: entered allmulticast mode [ 82.780052][ T7687] vhci_hcd: invalid port number 96 [ 82.785413][ T7687] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 82.864158][ T7692] loop6: detected capacity change from 0 to 512 [ 82.957799][ T7692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.025213][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.063401][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 83.084694][ T7713] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 83.225115][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1512'. [ 83.255959][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1512'. [ 83.256570][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.283058][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.417617][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1517'. [ 83.496608][ T7757] netlink: 'syz.5.1521': attribute type 1 has an invalid length. [ 83.511583][ T7757] bond0: entered promiscuous mode [ 83.518030][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.539117][ T7762] loop8: detected capacity change from 0 to 512 [ 83.546026][ T7757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.564377][ T7757] bond0: (slave bond1): making interface the new active one [ 83.571738][ T7757] bond1: entered promiscuous mode [ 83.583096][ T7757] bond0: (slave bond1): Enslaving as an active interface with an up link [ 83.604729][ T7762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.652666][ T7762] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1523: corrupted inode contents [ 83.676012][ T7762] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.1523: mark_inode_dirty error [ 83.695145][ T7762] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1523: corrupted inode contents [ 83.720910][ T6008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.895569][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 83.895583][ T29] audit: type=1400 audit(339.877:1706): avc: denied { read write } for pid=7799 comm="syz.2.1539" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.937677][ T29] audit: type=1400 audit(339.877:1707): avc: denied { open } for pid=7799 comm="syz.2.1539" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.945315][ T7804] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1542'. [ 84.033415][ T7812] netlink: 'syz.5.1545': attribute type 14 has an invalid length. [ 84.041247][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1545'. [ 84.064899][ T41] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.074352][ T7816] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1547'. [ 84.083603][ T29] audit: type=1400 audit(340.057:1708): avc: denied { nlmsg_read } for pid=7815 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.084679][ T7812] netlink: 'syz.5.1545': attribute type 14 has an invalid length. [ 84.104633][ T41] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.111554][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1545'. [ 84.120369][ T41] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.139610][ T41] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.216774][ T7829] netlink: 'syz.5.1553': attribute type 1 has an invalid length. [ 84.250668][ T7834] loop8: detected capacity change from 0 to 512 [ 84.259004][ T7829] bond2: entered promiscuous mode [ 84.264413][ T7829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.304246][ T7829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.329193][ T7829] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 84.339499][ T7829] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 84.348963][ T7843] loop6: detected capacity change from 0 to 512 [ 84.364190][ T7843] EXT4-fs (loop6): orphan cleanup on readonly fs [ 84.372190][ T7829] bond2: (slave vxcan3): making interface the new active one [ 84.379691][ T7829] vxcan3: entered promiscuous mode [ 84.413345][ T7843] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1560: bg 0: block 248: padding at end of block bitmap is not set [ 84.434025][ T7829] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 84.443847][ T7843] Quota error (device loop6): write_blk: dquota write failed [ 84.451256][ T7843] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 84.461483][ T7843] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1560: Failed to acquire dquot type 1 [ 84.474879][ T7843] EXT4-fs (loop6): 1 truncate cleaned up [ 84.483590][ T7843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.506415][ T7843] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 84.542830][ T7843] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 0 [ 84.562905][ T29] audit: type=1400 audit(340.537:1709): avc: denied { shutdown } for pid=7847 comm="syz.8.1562" lport=38889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.599314][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.676333][ T7864] loop5: detected capacity change from 0 to 128 [ 84.683252][ T29] audit: type=1326 audit(340.657:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.8.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09304f6c9 code=0x7ffc0000 [ 84.706261][ T29] audit: type=1326 audit(340.657:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.8.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09304f6c9 code=0x7ffc0000 [ 84.730466][ T29] audit: type=1326 audit(340.657:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.8.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09304f6c9 code=0x7ffc0000 [ 84.753296][ T29] audit: type=1326 audit(340.657:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.8.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09304f6c9 code=0x7ffc0000 [ 84.784115][ T7864] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 84.846425][ T7878] netlink: 'syz.7.1577': attribute type 1 has an invalid length. [ 84.914780][ T7878] bond1: entered promiscuous mode [ 84.937650][ T7878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.984603][ T7886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.986501][ T7882] SELinux: failed to load policy [ 84.998538][ T7886] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.008805][ T7886] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 85.020087][ T7886] bond1: (slave vxcan3): making interface the new active one [ 85.027546][ T7886] vxcan3: entered promiscuous mode [ 85.033982][ T7886] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 85.252956][ T7912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7912 comm=syz.2.1592 [ 85.265523][ T7912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7912 comm=syz.2.1592 [ 85.319600][ T7920] loop5: detected capacity change from 0 to 512 [ 85.376081][ T7920] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1596: couldn't read orphan inode 26 (err -116) [ 85.390396][ T7920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.391930][ T7928] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.391930][ T7928] program syz.8.1600 not setting count and/or reply_len properly [ 85.420156][ T7920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.513955][ T7941] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 85.522655][ T7943] loop7: detected capacity change from 0 to 512 [ 85.560434][ T7943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.584805][ T7951] loop2: detected capacity change from 0 to 512 [ 85.613116][ T7951] EXT4-fs: Ignoring removed oldalloc option [ 85.636707][ T7951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.641915][ T7943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.660865][ T7951] EXT4-fs (loop2): 1 truncate cleaned up [ 85.667937][ T7951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.762957][ T7951] loop2: detected capacity change from 512 to 64 [ 85.784232][ T5484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.797031][ T3316] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -12) [ 85.842274][ T3316] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 85.864066][ T3316] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 85.884337][ T7984] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 85.918481][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.919083][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.937757][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.013410][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.023798][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.065452][ T7999] loop8: detected capacity change from 0 to 512 [ 86.074424][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.084762][ T7999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.097341][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.107765][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.125393][ T7999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.162150][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.172520][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.244190][ T6008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.304675][ T41] bridge0: port 3(batadv0) entered disabled state [ 86.328396][ T41] bridge_slave_1: left allmulticast mode [ 86.334193][ T41] bridge_slave_1: left promiscuous mode [ 86.339872][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.352979][ T41] bridge_slave_0: left promiscuous mode [ 86.358702][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.507162][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.522023][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.522974][ T8049] loop8: detected capacity change from 0 to 512 [ 86.538361][ T41] bond0 (unregistering): Released all slaves [ 86.560861][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 86.613530][ T41] hsr_slave_0: left promiscuous mode [ 86.620845][ T41] hsr_slave_1: left promiscuous mode [ 86.627019][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.634670][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.649706][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.657606][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.674019][ T41] veth1_macvtap: left promiscuous mode [ 86.679572][ T41] veth0_macvtap: left promiscuous mode [ 86.696841][ T41] veth1_vlan: left promiscuous mode [ 86.702176][ T41] veth0_vlan: left promiscuous mode [ 86.830720][ T41] team0 (unregistering): Port device team_slave_1 removed [ 86.843667][ T41] team0 (unregistering): Port device team_slave_0 removed [ 87.007588][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.015147][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.023129][ T7992] bridge_slave_0: entered allmulticast mode [ 87.029789][ T7992] bridge_slave_0: entered promiscuous mode [ 87.037829][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.044925][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.065747][ T7992] bridge_slave_1: entered allmulticast mode [ 87.072435][ T7992] bridge_slave_1: entered promiscuous mode [ 87.089852][ T8090] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 87.114135][ T8094] loop5: detected capacity change from 0 to 1024 [ 87.124698][ T8094] EXT4-fs: Ignoring removed orlov option [ 87.146531][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.160960][ T8094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.177458][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.251710][ T7992] team0: Port device team_slave_0 added [ 87.276542][ T7992] team0: Port device team_slave_1 added [ 87.293830][ T41] IPVS: stop unused estimator thread 0... [ 87.316154][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.323268][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.349346][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.372462][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.379735][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.405887][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.457326][ T7992] hsr_slave_0: entered promiscuous mode [ 87.466070][ T7992] hsr_slave_1: entered promiscuous mode [ 87.625967][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.662883][ T7992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 87.691988][ T7992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 87.713432][ T7992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 87.719650][ T8139] loop5: detected capacity change from 0 to 512 [ 87.735047][ T7992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 87.735917][ T8139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.816513][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.826438][ T8139] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1666: corrupted inode contents [ 87.845639][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.852513][ T8139] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1666: mark_inode_dirty error [ 87.866552][ T2103] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.873639][ T2103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.884376][ T8139] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1666: corrupted inode contents [ 87.917521][ T2406] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.924629][ T2406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.934146][ T8139] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1666: mark_inode_dirty error [ 87.951560][ T8170] loop6: detected capacity change from 0 to 2048 [ 87.954400][ T7992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.958183][ T8168] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #18: comm syz.5.1666: directory missing '.' [ 87.968313][ T7992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.014604][ T8170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.032657][ T8170] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1671: bg 0: block 234: padding at end of block bitmap is not set [ 88.048846][ T3956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.059576][ T8176] netlink: 'syz.8.1672': attribute type 30 has an invalid length. [ 88.083006][ T6930] Bluetooth: hci0: command 0x1003 tx timeout [ 88.085519][ T3960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.098251][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.115049][ T41] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.132803][ T41] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.141553][ T41] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.152085][ T41] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.220357][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.260179][ T8201] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.453298][ T8230] bond1: entered promiscuous mode [ 88.458377][ T8230] bond1: entered allmulticast mode [ 88.463719][ T8230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.472682][ T8230] bond1 (unregistering): Released all slaves [ 88.492539][ T7992] veth0_vlan: entered promiscuous mode [ 88.500775][ T7992] veth1_vlan: entered promiscuous mode [ 88.531550][ T7992] veth0_macvtap: entered promiscuous mode [ 88.546974][ T7992] veth1_macvtap: entered promiscuous mode [ 88.573529][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.582336][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.600732][ T2818] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.625000][ T8240] loop8: detected capacity change from 0 to 256 [ 88.641730][ T8240] FAT-fs (loop8): bogus number of FAT sectors [ 88.647962][ T8240] FAT-fs (loop8): Can't find a valid FAT filesystem [ 88.657158][ T2818] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.686572][ T8244] __nla_validate_parse: 2 callbacks suppressed [ 88.686586][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1693'. [ 88.704823][ T2103] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.734161][ T2103] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.746623][ T8249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.821295][ T8252] loop9: detected capacity change from 0 to 8192 [ 88.854677][ T3309] loop9: p2 p3 p4 [ 88.862418][ T3309] loop9: p2 start 164919041 is beyond EOD, truncated [ 88.869218][ T3309] loop9: p3 size 66846464 extends beyond EOD, truncated [ 88.920812][ T3309] loop9: p4 size 37048832 extends beyond EOD, truncated [ 88.946812][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 88.946825][ T29] audit: type=1400 audit(344.927:1909): avc: denied { create } for pid=8297 comm="syz.8.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.008148][ T3006] udevd[3006]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 89.032836][ T29] audit: type=1400 audit(344.977:1910): avc: denied { write } for pid=8297 comm="syz.8.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.064047][ T8252] loop9: p2 p3 p4 [ 89.071118][ T8252] loop9: p2 start 164919041 is beyond EOD, truncated [ 89.077972][ T8252] loop9: p3 size 66846464 extends beyond EOD, truncated [ 89.115722][ T3006] udevd[3006]: worker [3309] failed while handling '/devices/virtual/block/loop9' [ 89.123331][ T8252] loop9: p4 size 37048832 extends beyond EOD, truncated [ 89.149217][ T29] audit: type=1326 audit(345.017:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb94cf66567 code=0x7ffc0000 [ 89.172022][ T29] audit: type=1326 audit(345.017:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb94cf0b789 code=0x7ffc0000 [ 89.194799][ T29] audit: type=1326 audit(345.017:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb94cf66567 code=0x7ffc0000 [ 89.217547][ T29] audit: type=1326 audit(345.017:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb94cf0b789 code=0x7ffc0000 [ 89.240358][ T29] audit: type=1326 audit(345.017:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94cf6f6c9 code=0x7ffc0000 [ 89.263229][ T29] audit: type=1326 audit(345.017:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94cf6f6c9 code=0x7ffc0000 [ 89.286038][ T29] audit: type=1326 audit(345.037:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb94cf6f6c9 code=0x7ffc0000 [ 89.308962][ T29] audit: type=1326 audit(345.037:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.9.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb94cf6f703 code=0x7ffc0000 [ 89.363911][ T4055] udevd[4055]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 89.373806][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 89.494360][ T4055] udevd[4055]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 89.534131][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 89.543998][ T8341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.697253][ T8347] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 89.722856][ T8347] SELinux: failed to load policy [ 89.812721][ T8355] atomic_op ffff888104971d28 conn xmit_atomic 0000000000000000 [ 89.997594][ T8390] netlink: 'syz.9.1732': attribute type 1 has an invalid length. [ 90.005521][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1732'. [ 90.036052][ T8303] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.045054][ T8303] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.054932][ T8390] netlink: 'syz.9.1732': attribute type 1 has an invalid length. [ 90.062787][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1732'. [ 90.079689][ T8303] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.089320][ T8303] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.351869][ T8412] loop7: detected capacity change from 0 to 8192 [ 90.393358][ T4055] loop7: p2 p3 p4 [ 90.401646][ T4055] loop7: p2 start 164919041 is beyond EOD, truncated [ 90.408688][ T4055] loop7: p3 size 66846464 extends beyond EOD, truncated [ 90.420081][ T4055] loop7: p4 size 37048832 extends beyond EOD, truncated [ 90.443968][ T8412] loop7: p2 p3 p4 [ 90.447753][ T8412] loop7: p2 start 164919041 is beyond EOD, truncated [ 90.454516][ T8412] loop7: p3 size 66846464 extends beyond EOD, truncated [ 90.466921][ T8412] loop7: p4 size 37048832 extends beyond EOD, truncated [ 90.476032][ T8432] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.611898][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 90.613793][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 90.691823][ T8454] loop5: detected capacity change from 0 to 256 [ 90.706824][ T8457] rdma_op ffff888104971980 conn xmit_rdma 0000000000000000 [ 90.716850][ T8454] FAT-fs (loop5): bogus number of FAT sectors [ 90.723355][ T8454] FAT-fs (loop5): Can't find a valid FAT filesystem [ 90.734796][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 90.752233][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 90.982562][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1778'. [ 91.150017][ T8499] loop9: detected capacity change from 0 to 128 [ 91.169530][ T8499] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.203555][ T7992] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.437221][ T8507] loop9: detected capacity change from 0 to 256 [ 91.445816][ T8507] FAT-fs (loop9): bogus number of FAT sectors [ 91.451980][ T8507] FAT-fs (loop9): Can't find a valid FAT filesystem [ 92.138554][ T8571] bridge0: entered allmulticast mode [ 92.148449][ T8571] pim6reg: entered allmulticast mode [ 92.333646][ T8588] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.547156][ T8628] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 92.596212][ T8634] loop7: detected capacity change from 0 to 256 [ 92.614024][ T8634] FAT-fs (loop7): bogus number of FAT sectors [ 92.620154][ T8634] FAT-fs (loop7): Can't find a valid FAT filesystem [ 92.671596][ T8644] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1839'. [ 92.746064][ T8648] syzkaller0: entered promiscuous mode [ 92.751589][ T8648] syzkaller0: entered allmulticast mode [ 92.793505][ T8653] loop8: detected capacity change from 0 to 128 [ 92.839207][ T8658] netlink: 'syz.5.1845': attribute type 21 has an invalid length. [ 92.847495][ T8658] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1845'. [ 92.856658][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1845'. [ 92.870901][ T8661] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1846'. [ 92.925926][ T8671] netlink: 'syz.5.1849': attribute type 2 has an invalid length. [ 92.926020][ T8669] loop7: detected capacity change from 0 to 1024 [ 92.940576][ T8669] EXT4-fs: Ignoring removed orlov option [ 93.037954][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1854'. [ 93.126163][ T8669] ================================================================== [ 93.134290][ T8669] BUG: KCSAN: data-race in filemap_read / filemap_read [ 93.141163][ T8669] [ 93.143605][ T8669] write to 0xffff888117ba4168 of 8 bytes by task 8679 on cpu 1: [ 93.151320][ T8669] filemap_read+0x974/0xa00 [ 93.155836][ T8669] generic_file_read_iter+0x79/0x330 [ 93.161134][ T8669] ext4_file_read_iter+0x1cc/0x290 [ 93.166245][ T8669] copy_splice_read+0x442/0x660 [ 93.171101][ T8669] splice_direct_to_actor+0x290/0x680 [ 93.176481][ T8669] do_splice_direct+0xda/0x150 [ 93.181247][ T8669] do_sendfile+0x380/0x650 [ 93.185676][ T8669] __x64_sys_sendfile64+0x105/0x150 [ 93.190882][ T8669] x64_sys_call+0x2bb4/0x3000 [ 93.195553][ T8669] do_syscall_64+0xd2/0x200 [ 93.200044][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.205922][ T8669] [ 93.208227][ T8669] write to 0xffff888117ba4168 of 8 bytes by task 8669 on cpu 0: [ 93.215836][ T8669] filemap_read+0x974/0xa00 [ 93.220332][ T8669] generic_file_read_iter+0x79/0x330 [ 93.225616][ T8669] ext4_file_read_iter+0x1cc/0x290 [ 93.230723][ T8669] copy_splice_read+0x442/0x660 [ 93.235559][ T8669] splice_direct_to_actor+0x290/0x680 [ 93.240927][ T8669] do_splice_direct+0xda/0x150 [ 93.245684][ T8669] do_sendfile+0x380/0x650 [ 93.250100][ T8669] __x64_sys_sendfile64+0x105/0x150 [ 93.255304][ T8669] x64_sys_call+0x2bb4/0x3000 [ 93.260066][ T8669] do_syscall_64+0xd2/0x200 [ 93.264571][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.270455][ T8669] [ 93.272760][ T8669] value changed: 0x000000000000021c -> 0x000000000000021d [ 93.279847][ T8669] [ 93.282163][ T8669] Reported by Kernel Concurrency Sanitizer on: [ 93.288321][ T8669] CPU: 0 UID: 0 PID: 8669 Comm: syz.7.1848 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.298096][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.308153][ T8669] ==================================================================