last executing test programs: 28.213585165s ago: executing program 4 (id=1147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 28.175965955s ago: executing program 4 (id=1149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 1.661651424s ago: executing program 0 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.640678175s ago: executing program 0 (id=1951): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) 1.552702046s ago: executing program 5 (id=1955): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfe, "0062ba7d9dd00014fbb36d9df98c4038096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 1.26731167s ago: executing program 5 (id=1966): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 1.2495899s ago: executing program 5 (id=1967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = socket(0x1e, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) 1.169008981s ago: executing program 5 (id=1976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.141418952s ago: executing program 2 (id=1979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x2000, 0x88a2}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @remote}, {0x600, 0x0, 0x8}}}}}}, 0x2e) 1.072243443s ago: executing program 2 (id=1983): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40800) 1.034600484s ago: executing program 5 (id=1987): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x18) 968.409045ms ago: executing program 2 (id=1988): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 893.031606ms ago: executing program 2 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 780.157338ms ago: executing program 2 (id=1992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000020a0300"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) 779.954388ms ago: executing program 0 (id=1993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r2) 776.192238ms ago: executing program 2 (id=1994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 771.690768ms ago: executing program 0 (id=1995): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 664.35803ms ago: executing program 0 (id=1996): r0 = syz_io_uring_setup(0xef, &(0x7f0000000300)={0x0, 0xdeef, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1748, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4000080) 663.067399ms ago: executing program 5 (id=1998): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 653.00538ms ago: executing program 3 (id=1999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r3, 0x1, 0xffffffff, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 633.30523ms ago: executing program 3 (id=2001): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 518.607692ms ago: executing program 3 (id=2004): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 505.499382ms ago: executing program 3 (id=2005): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 487.061452ms ago: executing program 3 (id=2006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x10000000000ac6}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 408.106764ms ago: executing program 3 (id=2009): futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}, {0x40000000, &(0x7f0000000080)=0x40000000, 0x82}], 0x3, 0x0, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) 315.318965ms ago: executing program 1 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0xbf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffc, 0x1, 0x1, 0x1000000000000}, {0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 315.089685ms ago: executing program 1 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 242.451996ms ago: executing program 1 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 141.257797ms ago: executing program 1 (id=2014): io_setup(0x3, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002720000850000004300000095"], 0x0, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 338.83µs ago: executing program 1 (id=2015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x110058, 0x10000, 0x3, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x82501) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) 0s ago: executing program 1 (id=2016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x2, 0xf, 0x0, 0x7, 0x8, "9afce4aeac9acbb49b00541d7d6a304eb7f873", 0xffff, 0x3}) dup3(r2, r1, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 r/w without journal. Quota mode: none. [ 36.768548][ T4159] loop3: detected capacity change from 0 to 512 [ 36.784863][ T4162] loop4: detected capacity change from 0 to 128 [ 36.785302][ T4159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.806061][ T4162] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.818487][ T4159] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.818533][ T4162] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.823670][ T4162] EXT4-fs (loop4): shut down requested (2) [ 36.870072][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.889063][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.032342][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.188858][ T4182] loop3: detected capacity change from 0 to 256 [ 37.206207][ T4182] FAT-fs (loop3): Directory bread(block 64) failed [ 37.217674][ T4182] FAT-fs (loop3): Directory bread(block 65) failed [ 37.227784][ T4182] FAT-fs (loop3): Directory bread(block 66) failed [ 37.239241][ T4182] FAT-fs (loop3): Directory bread(block 67) failed [ 37.251706][ T4182] FAT-fs (loop3): Directory bread(block 68) failed [ 37.263784][ T4182] FAT-fs (loop3): Directory bread(block 69) failed [ 37.272088][ T4182] FAT-fs (loop3): Directory bread(block 70) failed [ 37.279048][ T4182] FAT-fs (loop3): Directory bread(block 71) failed [ 37.286144][ T4182] FAT-fs (loop3): Directory bread(block 72) failed [ 37.299495][ T4182] FAT-fs (loop3): Directory bread(block 73) failed [ 37.386130][ T4194] 9pnet: p9_errstr2errno: server reported unknown error [ 37.419252][ T4213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 37.429978][ T4214] veth0: entered promiscuous mode [ 37.455836][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 37.472973][ T4231] loop3: detected capacity change from 0 to 512 [ 37.493267][ T4231] ext4: Unknown parameter 'usrquota"data' [ 37.513606][ T4244] ip6gre1: entered allmulticast mode [ 37.562726][ T4272] loop2: detected capacity change from 0 to 512 [ 37.569479][ T4272] ext4: Unknown parameter 'noacl' [ 37.616437][ T4274] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 37.655614][ T4274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.693554][ T4274] bond1: (slave gretap1): making interface the new active one [ 37.715768][ T4274] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 37.768039][ T4274] bond1 (unregistering): (slave gretap1): Releasing active interface [ 37.778650][ T4274] bond1 (unregistering): Released all slaves [ 38.115153][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 38.115276][ T29] audit: type=1400 audit(1751064917.514:556): avc: denied { execmod } for pid=4286 comm="syz.1.280" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.149139][ T29] audit: type=1400 audit(1751064917.514:557): avc: denied { execute } for pid=4286 comm="syz.1.280" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.229081][ T29] audit: type=1400 audit(1751064917.614:558): avc: denied { mounton } for pid=4290 comm="syz.0.282" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 38.251589][ T29] audit: type=1400 audit(1751064917.624:559): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.309510][ T4297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.335520][ T29] audit: type=1400 audit(1751064917.734:560): avc: denied { bind } for pid=4296 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.355066][ T29] audit: type=1400 audit(1751064917.734:561): avc: denied { name_bind } for pid=4296 comm="syz.2.273" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 38.376602][ T29] audit: type=1400 audit(1751064917.734:562): avc: denied { node_bind } for pid=4296 comm="syz.2.273" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.399381][ T29] audit: type=1400 audit(1751064917.734:563): avc: denied { setopt } for pid=4296 comm="syz.2.273" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.491861][ T29] audit: type=1400 audit(1751064917.864:564): avc: denied { create } for pid=4299 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.511498][ T29] audit: type=1400 audit(1751064917.864:565): avc: denied { connect } for pid=4299 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.550955][ T4309] netlink: 'syz.0.278': attribute type 2 has an invalid length. [ 38.558931][ T4309] netlink: 'syz.0.278': attribute type 8 has an invalid length. [ 38.566656][ T4309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.278'. [ 38.578792][ T4307] loop3: detected capacity change from 0 to 512 [ 38.601566][ T4307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.613034][ T4307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.626218][ T4307] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.662020][ T4317] loop2: detected capacity change from 0 to 1024 [ 38.671068][ T4307] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.687198][ T4307] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.704057][ T4317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.721081][ T4321] netlink: 96 bytes leftover after parsing attributes in process `syz.0.284'. [ 38.730643][ T4317] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.751060][ T4307] EXT4-fs (loop3): 1 truncate cleaned up [ 38.757580][ T4307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.812467][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.838913][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.038893][ T4344] loop3: detected capacity change from 0 to 1024 [ 39.054244][ T4346] loop2: detected capacity change from 0 to 512 [ 39.062599][ T4344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.096428][ T4346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.121937][ T4346] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.153019][ T4344] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.295: Allocating blocks 449-513 which overlap fs metadata [ 39.182387][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.199401][ T4341] EXT4-fs (loop3): pa ffff888106d54230: logic 48, phys. 177, len 21 [ 39.207626][ T4341] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 39.263819][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 39.319801][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.334334][ T4364] loop1: detected capacity change from 0 to 256 [ 39.346501][ T4364] FAT-fs (loop1): Directory bread(block 64) failed [ 39.354206][ T4364] FAT-fs (loop1): Directory bread(block 65) failed [ 39.361300][ T4364] FAT-fs (loop1): Directory bread(block 66) failed [ 39.368436][ T4364] FAT-fs (loop1): Directory bread(block 67) failed [ 39.382769][ T3379] net_ratelimit: 4 callbacks suppressed [ 39.382785][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 39.390049][ T4364] FAT-fs (loop1): Directory bread(block 68) failed [ 39.408990][ T4371] bond_slave_1: mtu less than device minimum [ 39.447242][ T4376] tipc: Started in network mode [ 39.452251][ T4376] tipc: Node identity ac14140f, cluster identity 4711 [ 39.455902][ T4364] FAT-fs (loop1): Directory bread(block 69) failed [ 39.461975][ T4376] tipc: New replicast peer: 10.1.1.2 [ 39.471304][ T4376] tipc: Enabled bearer , priority 10 [ 39.476162][ T4364] FAT-fs (loop1): Directory bread(block 70) failed [ 39.501035][ T4364] FAT-fs (loop1): Directory bread(block 71) failed [ 39.509330][ T4364] FAT-fs (loop1): Directory bread(block 72) failed [ 39.521012][ T4364] FAT-fs (loop1): Directory bread(block 73) failed [ 39.593533][ T4364] bio_check_eod: 33550 callbacks suppressed [ 39.593552][ T4364] syz.1.302: attempt to access beyond end of device [ 39.593552][ T4364] loop1: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 39.616202][ T4364] syz.1.302: attempt to access beyond end of device [ 39.616202][ T4364] loop1: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 39.629890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 39.808030][ T4417] vlan2: entered allmulticast mode [ 40.023066][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.084336][ T4432] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 40.111713][ T4433] mmap: syz.4.317 (4433) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.116412][ T4435] loop1: detected capacity change from 0 to 512 [ 40.134930][ T4437] loop3: detected capacity change from 0 to 128 [ 40.149148][ T4435] ext4: Unknown parameter 'noacl' [ 40.156576][ T4437] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.174685][ T4437] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.197050][ T4437] ./file0: Can't lookup blockdev [ 40.237536][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.393610][ T4461] veth1_macvtap: left promiscuous mode [ 40.406181][ T4461] macsec0: entered promiscuous mode [ 40.421217][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.482055][ T3390] tipc: Node number set to 2886997007 [ 40.663717][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.963317][ T4529] loop4: detected capacity change from 0 to 512 [ 40.970026][ T4529] EXT4-fs: Ignoring removed bh option [ 40.976785][ T4529] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.986015][ T4529] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 40.999850][ T4529] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 41.011667][ T4529] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 41.020418][ T4529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.048773][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.305753][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.471596][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.531450][ T4653] bridge: RTM_NEWNEIGH with invalid ether address [ 41.584609][ T4659] loop0: detected capacity change from 0 to 2048 [ 41.615366][ T4659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.794203][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.862702][ T4711] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 41.906765][ T4719] netlink: 'syz.1.369': attribute type 12 has an invalid length. [ 41.941191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 42.501214][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 42.601234][ T4765] Driver unsupported XDP return value 0 on prog (id 315) dev N/A, expect packet loss! [ 42.687299][ T4773] loop0: detected capacity change from 0 to 128 [ 42.765888][ T4775] syz.0.389: attempt to access beyond end of device [ 42.765888][ T4775] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 42.784422][ T4775] syz.0.389: attempt to access beyond end of device [ 42.784422][ T4775] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 42.798242][ T4775] syz.0.389: attempt to access beyond end of device [ 42.798242][ T4775] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 42.825253][ T4775] syz.0.389: attempt to access beyond end of device [ 42.825253][ T4775] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 42.850580][ T4778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.859225][ T4775] syz.0.389: attempt to access beyond end of device [ 42.859225][ T4775] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 42.890386][ T4775] syz.0.389: attempt to access beyond end of device [ 42.890386][ T4775] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 42.906565][ T4775] syz.0.389: attempt to access beyond end of device [ 42.906565][ T4775] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 42.921063][ T4775] syz.0.389: attempt to access beyond end of device [ 42.921063][ T4775] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 43.002069][ T4778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.064616][ T4778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.084878][ T4791] program syz.0.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.094455][ T4791] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 43.107517][ T4778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.129687][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 43.129702][ T29] audit: type=1400 audit(2000000001.600:754): avc: denied { ioctl } for pid=4794 comm="syz.0.398" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.168906][ T4795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.182316][ T4795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.194219][ T29] audit: type=1400 audit(2000000001.600:755): avc: denied { write } for pid=4796 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.202348][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 43.213630][ T29] audit: type=1326 audit(2000000001.660:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.245975][ T29] audit: type=1326 audit(2000000001.660:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.269708][ T29] audit: type=1326 audit(2000000001.660:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.294027][ T29] audit: type=1326 audit(2000000001.660:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.317446][ T29] audit: type=1326 audit(2000000001.660:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.341306][ T29] audit: type=1326 audit(2000000001.660:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.365393][ T29] audit: type=1326 audit(2000000001.660:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.389150][ T29] audit: type=1326 audit(2000000001.660:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 43.393582][ T4803] loop4: detected capacity change from 0 to 1024 [ 43.417645][ T4795] ref_ctr_offset mismatch. inode: 0x1b4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 43.425125][ T4778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.433606][ T4803] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.402: Failed to acquire dquot type 0 [ 43.452224][ T4803] EXT4-fs (loop4): 1 truncate cleaned up [ 43.458469][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.461145][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 43.475680][ T4778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.495090][ T4778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.504961][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.526788][ T4778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.615507][ T4825] loop3: detected capacity change from 0 to 512 [ 43.631880][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 43.684417][ T4836] loop1: detected capacity change from 0 to 512 [ 43.691377][ T4836] EXT4-fs: Ignoring removed bh option [ 43.697508][ T4836] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.708003][ T4836] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.741330][ T4836] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 43.764954][ T4836] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 43.788270][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.838223][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.867843][ T4849] netlink: 'syz.4.422': attribute type 32 has an invalid length. [ 43.876129][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 43.908176][ T4854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.423'. [ 43.917143][ T4854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.423'. [ 43.984039][ T4869] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 44.027358][ T4860] loop2: detected capacity change from 0 to 8192 [ 44.106796][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 44.170846][ T4898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 44.508507][ T4943] loop4: detected capacity change from 0 to 128 [ 44.581556][ T36] net_ratelimit: 2 callbacks suppressed [ 44.581570][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.612750][ T4943] bio_check_eod: 75 callbacks suppressed [ 44.612791][ T4943] syz.4.445: attempt to access beyond end of device [ 44.612791][ T4943] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 44.641083][ T4943] syz.4.445: attempt to access beyond end of device [ 44.641083][ T4943] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 44.681133][ T4943] syz.4.445: attempt to access beyond end of device [ 44.681133][ T4943] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 44.716880][ T4943] syz.4.445: attempt to access beyond end of device [ 44.716880][ T4943] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 44.730914][ T4943] syz.4.445: attempt to access beyond end of device [ 44.730914][ T4943] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 44.746496][ T4943] syz.4.445: attempt to access beyond end of device [ 44.746496][ T4943] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 44.760249][ T4943] syz.4.445: attempt to access beyond end of device [ 44.760249][ T4943] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 44.774475][ T4943] syz.4.445: attempt to access beyond end of device [ 44.774475][ T4943] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 44.796251][ T4943] syz.4.445: attempt to access beyond end of device [ 44.796251][ T4943] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 44.811114][ T4943] syz.4.445: attempt to access beyond end of device [ 44.811114][ T4943] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 45.076727][ T5003] ip6gre1: entered allmulticast mode [ 45.106064][ T5005] serio: Serial port ptm0 [ 45.225429][ T5023] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 45.403216][ T5045] loop2: detected capacity change from 0 to 2048 [ 45.424128][ T5045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.464093][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.585960][ T5061] loop4: detected capacity change from 0 to 1024 [ 45.593864][ T5061] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.604908][ T5061] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.615665][ T5061] JBD2: no valid journal superblock found [ 45.621503][ T5061] EXT4-fs (loop4): Could not load journal inode [ 45.628108][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.688559][ T5069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5136 sclass=netlink_audit_socket pid=5069 comm=syz.4.482 [ 45.802317][ T5080] tipc: Failed to remove unknown binding: 66,1,1/0:2867903207/2867903209 [ 45.819993][ T5080] tipc: Failed to remove unknown binding: 66,1,1/0:2867903207/2867903209 [ 45.828746][ T5080] tipc: Failed to remove unknown binding: 66,1,1/0:2867903207/2867903209 [ 45.906256][ T5091] loop4: detected capacity change from 0 to 128 [ 45.914820][ T5091] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.927853][ T5091] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.953684][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.046432][ T5105] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 46.060523][ T5105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.075795][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 46.088219][ T5105] bond1 (unregistering): Released all slaves [ 46.315962][ T5131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.509'. [ 46.394534][ T5144] bridge: RTM_NEWNEIGH with invalid ether address [ 46.413745][ T5147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 46.812123][ T5176] serio: Serial port ptm0 [ 46.867317][ T5186] veth0_vlan: entered allmulticast mode [ 46.921990][ T5190] loop2: detected capacity change from 0 to 164 [ 46.926851][ T5186] : renamed from vlan1 [ 46.940253][ T5190] Unable to read rock-ridge attributes [ 46.956115][ T5190] Unable to read rock-ridge attributes [ 46.969230][ T5198] tipc: Failed to remove unknown binding: 66,1,1/0:2182013338/2182013340 [ 46.988587][ T5198] tipc: Failed to remove unknown binding: 66,1,1/0:2182013338/2182013340 [ 46.997167][ T5198] tipc: Failed to remove unknown binding: 66,1,1/0:2182013338/2182013340 [ 47.018878][ T5201] loop2: detected capacity change from 0 to 512 [ 47.069221][ T5205] loop4: detected capacity change from 0 to 1024 [ 47.076794][ T5205] EXT4-fs: inline encryption not supported [ 47.083102][ T5205] EXT4-fs: Ignoring removed bh option [ 47.093977][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.106998][ T5201] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.107387][ T5205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.142871][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.178670][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.247353][ T5226] serio: Serial port ptm0 [ 47.406083][ T5249] tipc: Failed to remove unknown binding: 66,1,1/2886997007:240652622/240652624 [ 47.415988][ T5249] tipc: Failed to remove unknown binding: 66,1,1/2886997007:240652622/240652624 [ 47.425270][ T5249] tipc: Failed to remove unknown binding: 66,1,1/2886997007:240652622/240652624 [ 47.632258][ T5265] serio: Serial port ptm0 [ 47.654206][ T5271] bond_slave_1: entered promiscuous mode [ 47.660279][ T5268] bond_slave_1: left promiscuous mode [ 47.921507][ T5283] netlink: 'syz.3.563': attribute type 32 has an invalid length. [ 47.931118][ T5281] vlan2: entered allmulticast mode [ 47.936426][ T5281] dummy0: entered allmulticast mode [ 48.017489][ T5296] bridge: RTM_NEWNEIGH with invalid ether address [ 48.050586][ T5302] loop4: detected capacity change from 0 to 512 [ 48.050874][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.065451][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.072830][ T5302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.087103][ T5302] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.332214][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 48.332228][ T29] audit: type=1400 audit(2000000006.810:1133): avc: denied { connect } for pid=5319 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.551684][ T5328] netlink: 'syz.2.585': attribute type 32 has an invalid length. [ 48.636689][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.657547][ T29] audit: type=1400 audit(2000000007.130:1134): avc: denied { connect } for pid=5345 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.693559][ T29] audit: type=1326 audit(2000000007.170:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 48.718988][ T5349] loop4: detected capacity change from 0 to 128 [ 48.726055][ T29] audit: type=1326 audit(2000000007.200:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 48.733794][ T5350] __nla_validate_parse: 10 callbacks suppressed [ 48.733810][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'. [ 48.749528][ T29] audit: type=1326 audit(2000000007.200:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1b769e963 code=0x7ffc0000 [ 48.787966][ T29] audit: type=1326 audit(2000000007.200:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc1b769d3df code=0x7ffc0000 [ 48.811307][ T29] audit: type=1326 audit(2000000007.200:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc1b769e9b7 code=0x7ffc0000 [ 48.835155][ T29] audit: type=1326 audit(2000000007.200:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1b769d290 code=0x7ffc0000 [ 48.846073][ T5356] loop2: detected capacity change from 0 to 2048 [ 48.862120][ T29] audit: type=1326 audit(2000000007.200:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1b769e52b code=0x7ffc0000 [ 48.862149][ T29] audit: type=1326 audit(2000000007.210:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1b769d58a code=0x7ffc0000 [ 48.933776][ T5356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.073681][ T5362] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.088546][ T5362] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 49.101084][ T5362] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.101084][ T5362] [ 49.110727][ T5362] EXT4-fs (loop2): Total free blocks count 0 [ 49.116835][ T5362] EXT4-fs (loop2): Free/Dirty block details [ 49.122840][ T5362] EXT4-fs (loop2): free_blocks=2415919104 [ 49.128632][ T5362] EXT4-fs (loop2): dirty_blocks=2512 [ 49.134302][ T5362] EXT4-fs (loop2): Block reservation details [ 49.140279][ T5362] EXT4-fs (loop2): i_reserved_data_blocks=157 [ 49.241631][ T5372] netlink: 'syz.0.597': attribute type 32 has an invalid length. [ 49.249512][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 49.258786][ T4260] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 49.294068][ T5379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 49.335856][ T5386] wireguard0: entered promiscuous mode [ 49.341486][ T5386] wireguard0: entered allmulticast mode [ 51.066709][ T5418] netlink: 'syz.1.612': attribute type 32 has an invalid length. [ 51.074512][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 51.144926][ T5431] netlink: 2 bytes leftover after parsing attributes in process `syz.0.617'. [ 51.207856][ T5438] ip6gre1: entered allmulticast mode [ 51.270844][ T5446] netlink: zone id is out of range [ 51.276242][ T5446] netlink: zone id is out of range [ 51.281522][ T5446] netlink: zone id is out of range [ 51.286728][ T5446] netlink: zone id is out of range [ 51.291879][ T5446] netlink: zone id is out of range [ 51.368886][ T5454] loop4: detected capacity change from 0 to 128 [ 51.387234][ T5456] loop2: detected capacity change from 0 to 512 [ 51.431701][ T5456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.451177][ T5456] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.455505][ T5468] loop3: detected capacity change from 0 to 512 [ 51.488979][ T5468] EXT4-fs: Ignoring removed i_version option [ 51.495071][ T5468] EXT4-fs: Ignoring removed nobh option [ 51.505982][ T5468] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.535985][ T5468] EXT4-fs (loop3): 1 truncate cleaned up [ 51.545005][ T5468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.571394][ T5472] netlink: 'syz.4.633': attribute type 32 has an invalid length. [ 51.579236][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 51.612977][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.676601][ T5486] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 51.930255][ T5519] loop4: detected capacity change from 0 to 1024 [ 51.941195][ T5521] netlink: 'syz.0.650': attribute type 32 has an invalid length. [ 51.943650][ T5519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.948986][ T5521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 52.048406][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.064497][ T5534] netlink: 96 bytes leftover after parsing attributes in process `syz.0.651'. [ 52.103645][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 52.149587][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 52.322551][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.531097][ T5562] netlink: 'syz.0.662': attribute type 32 has an invalid length. [ 52.679986][ T5582] 9pnet: p9_errstr2errno: server reported unknown error [ 52.810878][ T5602] netlink: 'syz.0.676': attribute type 32 has an invalid length. [ 53.369193][ T5628] syz.4.683 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.690419][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 53.690536][ T29] audit: type=1326 audit(2000000012.160:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.744406][ T29] audit: type=1326 audit(2000000012.160:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.767959][ T29] audit: type=1326 audit(2000000012.160:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.791654][ T29] audit: type=1326 audit(2000000012.160:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.815066][ T29] audit: type=1326 audit(2000000012.160:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.838816][ T29] audit: type=1326 audit(2000000012.160:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.862322][ T29] audit: type=1326 audit(2000000012.160:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.885816][ T29] audit: type=1326 audit(2000000012.160:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.909336][ T29] audit: type=1326 audit(2000000012.160:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 53.932838][ T29] audit: type=1326 audit(2000000012.160:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b769e929 code=0x7ffc0000 [ 54.024110][ T5661] __nla_validate_parse: 4 callbacks suppressed [ 54.024128][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 54.292918][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 54.350372][ T5702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.715'. [ 54.371701][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 54.381723][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 54.398522][ T5705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.716'. [ 54.443822][ T5713] 9pnet: p9_errstr2errno: server reported unknown error [ 54.595006][ T5724] block device autoloading is deprecated and will be removed. [ 54.666336][ T5730] netlink: 96 bytes leftover after parsing attributes in process `syz.1.727'. [ 54.728377][ T5736] netlink: 'syz.3.730': attribute type 7 has an invalid length. [ 54.736147][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 54.812977][ T5746] netlink: 372 bytes leftover after parsing attributes in process `syz.3.734'. [ 54.837170][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 55.005984][ T5764] loop3: detected capacity change from 0 to 512 [ 55.014420][ T5764] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.741: corrupted in-inode xattr: invalid ea_ino [ 55.028195][ T5764] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.741: couldn't read orphan inode 15 (err -117) [ 55.042157][ T5764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.069892][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.640991][ T2958] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.660376][ T2958] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.673880][ T2958] kernel write not supported for file /uhid (pid: 2958 comm: kworker/0:2) [ 55.843217][ T5788] batman_adv: batadv0: Adding interface: dummy0 [ 55.849582][ T5788] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.901021][ T5788] batman_adv: batadv0: Interface activated: dummy0 [ 55.924051][ T5793] batadv0: mtu less than device minimum [ 55.930007][ T5793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.940927][ T5793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.951634][ T5793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 55.962622][ T5793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.001442][ T5791] vlan0: entered promiscuous mode [ 56.045651][ T5801] loop3: detected capacity change from 0 to 1024 [ 56.063432][ T5801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.079839][ T5801] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.756: attempt to clear invalid blocks 1886221359 len 1 [ 56.103693][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.221758][ T5826] team1: entered promiscuous mode [ 56.228174][ T5826] team1: entered allmulticast mode [ 56.236997][ T5830] capability: warning: `syz.2.766' uses deprecated v2 capabilities in a way that may be insecure [ 56.322218][ T5840] loop4: detected capacity change from 0 to 512 [ 56.338147][ T5840] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.771: corrupted in-inode xattr: invalid ea_ino [ 56.352751][ T5843] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 56.354648][ T5840] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.771: couldn't read orphan inode 15 (err -117) [ 56.374763][ T5840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.381465][ T5843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.401204][ T5848] net_ratelimit: 16 callbacks suppressed [ 56.401221][ T5848] IPv4: Oversized IP packet from 127.202.26.0 [ 56.420300][ T5843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.428443][ T5843] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 56.428974][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.440064][ T5843] bond1: (slave vti0): Error -95 calling set_mac_address [ 56.702326][ T5887] loop3: detected capacity change from 0 to 512 [ 56.710235][ T5887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.723084][ T5887] EXT4-fs (loop3): 1 truncate cleaned up [ 56.729257][ T5887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.814986][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.854711][ T5898] loop4: detected capacity change from 0 to 2048 [ 56.881536][ T5898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.928204][ T3308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 56.944206][ T3308] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 56.957809][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.419048][ T5962] tipc: Started in network mode [ 57.424642][ T5962] tipc: Node identity 5ede32fc30be, cluster identity 4711 [ 57.431949][ T5962] tipc: Enabled bearer , priority 0 [ 57.442326][ T5962] tipc: Disabling bearer [ 57.661615][ T5996] sch_fq: defrate 2048 ignored. [ 57.982169][ T6028] loop3: detected capacity change from 0 to 256 [ 57.987690][ T6030] batman_adv: batadv0: Adding interface: dummy0 [ 57.989102][ T6028] FAT-fs (loop3): bogus number of FAT sectors [ 57.994822][ T6030] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.995942][ T6030] batman_adv: batadv0: Interface activated: dummy0 [ 58.001066][ T6028] FAT-fs (loop3): Can't find a valid FAT filesystem [ 58.045486][ T6032] batadv0: mtu less than device minimum [ 58.051618][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.062377][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.073170][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.074599][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.083795][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.092336][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.102720][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.121315][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.132437][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.143109][ T6032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.173117][ T6034] bridge: RTM_NEWNEIGH with invalid ether address [ 58.187235][ T6036] tipc: New replicast peer: 255.255.255.255 [ 58.193423][ T6036] tipc: Enabled bearer , priority 10 [ 58.278596][ T6049] loop4: detected capacity change from 0 to 1024 [ 58.295235][ T6049] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.861: attempt to clear invalid blocks 1886221359 len 1 [ 58.386257][ T6065] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 58.386257][ T6065] The task syz.0.862 (6065) triggered the difference, watch for misbehavior. [ 58.458898][ T6070] batman_adv: batadv0: Adding interface: dummy0 [ 58.465722][ T6070] batman_adv: batadv0: Interface activated: dummy0 [ 58.713545][ T6105] loop4: detected capacity change from 0 to 128 [ 58.720412][ T6105] vfat: Unknown parameter '' [ 58.809509][ T6114] loop3: detected capacity change from 0 to 164 [ 58.886849][ T6117] tipc: Enabled bearer , priority 0 [ 58.910198][ T6117] tipc: Disabling bearer [ 58.959059][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 58.959107][ T29] audit: type=1326 audit(2000000017.430:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 58.990633][ T29] audit: type=1326 audit(2000000017.430:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 59.014193][ T29] audit: type=1326 audit(2000000017.430:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 59.037608][ T29] audit: type=1326 audit(2000000017.430:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 59.061582][ T29] audit: type=1326 audit(2000000017.430:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 59.085088][ T29] audit: type=1326 audit(2000000017.430:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 59.108473][ T29] audit: type=1326 audit(2000000017.430:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67dcce929 code=0x7ffc0000 [ 59.131900][ T29] audit: type=1326 audit(2000000017.430:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc67dcc58e7 code=0x7ffc0000 [ 59.155288][ T29] audit: type=1326 audit(2000000017.430:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc67dc6ab19 code=0x7ffc0000 [ 59.178695][ T29] audit: type=1326 audit(2000000017.430:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc67dcc58e7 code=0x7ffc0000 [ 59.202665][ T2958] tipc: Node number set to 1851798268 [ 59.440407][ T6150] SET target dimension over the limit! [ 59.532240][ T6164] __nla_validate_parse: 16 callbacks suppressed [ 59.532254][ T6164] netlink: 96 bytes leftover after parsing attributes in process `syz.1.910'. [ 59.546081][ T6166] loop3: detected capacity change from 0 to 256 [ 60.122564][ T6193] tipc: Started in network mode [ 60.127598][ T6193] tipc: Node identity aad0c5cd5f5b, cluster identity 4711 [ 60.135474][ T6193] tipc: Enabled bearer , priority 0 [ 60.144273][ T6193] tipc: Disabling bearer [ 60.222545][ T6207] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 60.417489][ T6231] loop3: detected capacity change from 0 to 128 [ 60.428058][ T6231] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.499773][ T6280] loop3: detected capacity change from 0 to 128 [ 61.512742][ T6280] EXT4-fs: Ignoring removed nobh option [ 61.520140][ T6284] atomic_op ffff8881274f1528 conn xmit_atomic 0000000000000000 [ 61.538688][ T6280] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.593160][ T6289] loop3: detected capacity change from 0 to 512 [ 61.601373][ T6289] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 61.612168][ T6289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 61.625220][ T6289] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.967: corrupted in-inode xattr: e_value size too large [ 61.652217][ T6289] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.967: couldn't read orphan inode 15 (err -117) [ 61.763516][ T6314] kernel read not supported for file /policy (pid: 6314 comm: syz.4.976) [ 61.900779][ T6333] loop4: detected capacity change from 0 to 2048 [ 61.913924][ T6333] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.098562][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.107729][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.116669][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.145420][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.154706][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.163733][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.201520][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.210600][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.219638][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 62.258313][ T6382] loop3: detected capacity change from 0 to 512 [ 62.265939][ T6382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.283394][ T6382] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.425092][ T6396] loop3: detected capacity change from 0 to 164 [ 62.434523][ T6396] bio_check_eod: 28 callbacks suppressed [ 62.434538][ T6396] syz.3.998: attempt to access beyond end of device [ 62.434538][ T6396] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.455447][ T6396] syz.3.998: attempt to access beyond end of device [ 62.455447][ T6396] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.497671][ T6400] loop3: detected capacity change from 0 to 128 [ 62.608066][ T6416] loop4: detected capacity change from 0 to 128 [ 62.626668][ T6410] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 62.644216][ T6414] wg2: entered promiscuous mode [ 62.649251][ T6414] wg2: entered allmulticast mode [ 63.027554][ T6450] SET target dimension over the limit! [ 63.225900][ T6436] net_ratelimit: 31 callbacks suppressed [ 63.225921][ T6436] Set syz1 is full, maxelem 65536 reached [ 63.321487][ T6467] SELinux: Context @ is not valid (left unmapped). [ 63.374510][ T6471] tipc: Started in network mode [ 63.379487][ T6471] tipc: Node identity 7e98be765a4d, cluster identity 4711 [ 63.386754][ T6471] tipc: Enabled bearer , priority 0 [ 63.396662][ T6471] tipc: Disabling bearer [ 63.459926][ T6481] loop3: detected capacity change from 0 to 128 [ 63.468437][ T6481] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.553292][ T6490] loop3: detected capacity change from 0 to 1024 [ 63.565164][ T6490] EXT4-fs: Ignoring removed nobh option [ 63.570899][ T6490] EXT4-fs: Ignoring removed bh option [ 63.580746][ T6489] bond1: entered promiscuous mode [ 63.586425][ T6489] bond1: entered allmulticast mode [ 63.593318][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.630225][ T6489] bond1 (unregistering): Released all slaves [ 63.699971][ T6497] syzkaller0: entered promiscuous mode [ 63.705643][ T6497] syzkaller0: entered allmulticast mode [ 63.723995][ T6501] wireguard0: entered promiscuous mode [ 63.729542][ T6501] wireguard0: entered allmulticast mode [ 63.740616][ T6503] team1: entered promiscuous mode [ 63.746935][ T6503] team1: entered allmulticast mode [ 63.752907][ T4205] syzkaller0: tun_net_xmit 48 [ 63.763773][ T6497] syzkaller0: tun_net_xmit 1280 [ 63.768724][ T6497] syzkaller0: create flow: hash 2424772424 index 1 [ 63.821821][ T6496] syzkaller0: delete flow: hash 2424772424 index 1 [ 63.932554][ T6533] bridge: RTM_NEWNEIGH with invalid ether address [ 64.202141][ T6570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6570 comm=syz.0.1074 [ 64.224253][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 64.224269][ T29] audit: type=1400 audit(2000000022.700:1691): avc: denied { write } for pid=6571 comm="syz.3.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.252671][ T29] audit: type=1400 audit(2000000022.730:1692): avc: denied { create } for pid=6571 comm="syz.3.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.522072][ T6602] loop3: detected capacity change from 0 to 2048 [ 64.528911][ T6602] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.621578][ T6611] __nla_validate_parse: 7 callbacks suppressed [ 64.621594][ T6611] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1090'. [ 64.638423][ T6610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1088: bg 0: block 234: padding at end of block bitmap is not set [ 64.659070][ T6610] EXT4-fs (loop3): Remounting filesystem read-only [ 64.694302][ T29] audit: type=1326 audit(2000000023.170:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.718131][ T29] audit: type=1326 audit(2000000023.170:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.742386][ T29] audit: type=1326 audit(2000000023.170:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.766749][ T29] audit: type=1326 audit(2000000023.170:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.790579][ T29] audit: type=1326 audit(2000000023.170:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.814067][ T29] audit: type=1326 audit(2000000023.170:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.837882][ T29] audit: type=1326 audit(2000000023.170:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.862025][ T29] audit: type=1326 audit(2000000023.170:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 64.908354][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 64.922791][ T6618] smc: net device bond0 applied user defined pnetid SY [ 64.930307][ T6618] smc: net device bond0 erased user defined pnetid SY [ 64.954647][ T6626] loop3: detected capacity change from 0 to 512 [ 64.984053][ T6626] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.046910][ T6639] netlink: 'syz.4.1104': attribute type 1 has an invalid length. [ 65.076638][ T6639] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 65.095636][ T6644] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1103'. [ 65.197851][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.234470][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.245250][ T6665] xt_hashlimit: max too large, truncated to 1048576 [ 65.305487][ T6673] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 65.482410][ T6707] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1133'. [ 65.575866][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 65.584926][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 65.593970][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 65.603525][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 65.612673][ T6719] netlink: 'syz.3.1138': attribute type 6 has an invalid length. [ 65.717226][ T6728] loop3: detected capacity change from 0 to 2048 [ 65.838444][ T6742] loop4: detected capacity change from 0 to 164 [ 65.847813][ T6742] syz.4.1149: attempt to access beyond end of device [ 65.847813][ T6742] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.863453][ T6742] syz.4.1149: attempt to access beyond end of device [ 65.863453][ T6742] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 65.882799][ T6747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6747 comm=syz.3.1151 [ 65.931507][ T6754] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.1150'. [ 66.051257][ T6764] loop3: detected capacity change from 0 to 1024 [ 66.057911][ T6764] EXT4-fs: Ignoring removed orlov option [ 66.065529][ T6764] EXT4-fs mount: 18 callbacks suppressed [ 66.065540][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.173443][ T4225] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.233610][ T4225] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.292411][ T4225] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.328638][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.338810][ T4225] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.393378][ T6768] chnl_net:caif_netlink_parms(): no params data found [ 66.418859][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 66.468839][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.476109][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.488611][ T6768] bridge_slave_0: entered allmulticast mode [ 66.522683][ T6768] bridge_slave_0: entered promiscuous mode [ 66.533305][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.540406][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.547717][ T6768] bridge_slave_1: entered allmulticast mode [ 66.554471][ T6768] bridge_slave_1: entered promiscuous mode [ 66.589485][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.599171][ T4225] bridge_slave_1: left allmulticast mode [ 66.604903][ T4225] bridge_slave_1: left promiscuous mode [ 66.610709][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.619849][ T4225] bridge_slave_0: left promiscuous mode [ 66.625741][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.762840][ T4225] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 66.803278][ T4225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.813069][ T4225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.822691][ T4225] bond0 (unregistering): Released all slaves [ 66.830909][ T4225] bond1 (unregistering): Released all slaves [ 66.839564][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.857111][ T6794] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 66.875562][ T6804] wireguard0: entered promiscuous mode [ 66.881164][ T6804] wireguard0: entered allmulticast mode [ 66.912050][ T4225] tipc: Disabling bearer [ 66.917163][ T4225] tipc: Left network mode [ 66.917893][ T6768] team0: Port device team_slave_0 added [ 66.931414][ T6768] team0: Port device team_slave_1 added [ 66.950236][ T4225] hsr_slave_0: left promiscuous mode [ 66.963428][ T4225] hsr_slave_1: left promiscuous mode [ 66.985153][ T4225] batman_adv: batadv0: Interface deactivated: dummy0 [ 66.992124][ T4225] batman_adv: batadv0: Removing interface: dummy0 [ 67.024360][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.031952][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.056137][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.063759][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.094284][ T4225] veth1_vlan: left promiscuous mode [ 67.099788][ T4225] veth0_vlan: left promiscuous mode [ 67.224012][ T4225] team0 (unregistering): Port device team_slave_1 removed [ 67.244063][ T4225] team0 (unregistering): Port device team_slave_0 removed [ 67.275418][ T6821] No such timeout policy "syz1" [ 67.314173][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.321209][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.347441][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.360166][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.367222][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.393388][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.407098][ T6825] loop3: detected capacity change from 0 to 128 [ 67.429673][ T6825] EXT4-fs: Ignoring removed nobh option [ 67.438832][ T6768] hsr_slave_0: entered promiscuous mode [ 67.445906][ T6768] hsr_slave_1: entered promiscuous mode [ 67.462705][ T6768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.463030][ T6825] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.470500][ T6768] Cannot create hsr debugfs directory [ 67.520489][ T6825] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.571278][ T6833] bridge0: entered promiscuous mode [ 67.577245][ T6833] macsec1: entered promiscuous mode [ 67.583325][ T6833] bridge0: port 3(macsec1) entered blocking state [ 67.589922][ T6833] bridge0: port 3(macsec1) entered disabled state [ 67.596810][ T6833] macsec1: entered allmulticast mode [ 67.602342][ T6833] bridge0: entered allmulticast mode [ 67.608555][ T6833] macsec1: left allmulticast mode [ 67.613707][ T6833] bridge0: left allmulticast mode [ 67.632993][ T6833] bridge0: left promiscuous mode [ 67.682524][ T6768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.702087][ T6768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.711981][ T6768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.721695][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.743777][ T6768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.806332][ T6847] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1181' sets config #0 [ 67.825860][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.838963][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.849468][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.857139][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.870262][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.877558][ T4205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.966102][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.093781][ T6768] veth0_vlan: entered promiscuous mode [ 68.102533][ T6768] veth1_vlan: entered promiscuous mode [ 68.121356][ T6768] veth0_macvtap: entered promiscuous mode [ 68.130052][ T6768] veth1_macvtap: entered promiscuous mode [ 68.143461][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.157542][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.168574][ T6768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.177427][ T6768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.186407][ T6768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.195239][ T6768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.668011][ T6893] loop3: detected capacity change from 0 to 512 [ 68.710991][ T6897] bond1: entered promiscuous mode [ 68.716678][ T6897] bond1: entered allmulticast mode [ 68.719828][ T6893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.723524][ T6897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.751702][ T6893] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.774424][ T6897] bond1 (unregistering): Released all slaves [ 68.874833][ T6893] syz.3.1192 (6893) used greatest stack depth: 9416 bytes left [ 68.883932][ T6913] veth1_macvtap: left promiscuous mode [ 68.884315][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.903138][ T6913] macsec0: entered promiscuous mode [ 68.935265][ T6917] loop3: detected capacity change from 0 to 1024 [ 68.958435][ T6917] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.967589][ T6917] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1199: Failed to acquire dquot type 0 [ 68.980603][ T6917] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.996845][ T6917] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1199: corrupted inode contents [ 69.013728][ T6917] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.1199: mark_inode_dirty error [ 69.031041][ T6917] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1199: corrupted inode contents [ 69.043832][ T6917] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1199: mark_inode_dirty error [ 69.055627][ T6917] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1199: corrupted inode contents [ 69.074001][ T6917] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.085524][ T6917] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1199: corrupted inode contents [ 69.098207][ T6917] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.1199: mark_inode_dirty error [ 69.110353][ T6917] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.120038][ T6917] EXT4-fs (loop3): 1 truncate cleaned up [ 69.133569][ T6917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.172047][ T6940] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 69.225060][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.229036][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.241732][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.249293][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.256863][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.264328][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.271870][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.279340][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.286905][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.294552][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.302077][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.309478][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.317289][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.325730][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.333309][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.340815][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.348246][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.355757][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.363365][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.370908][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.378631][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.386067][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.393491][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.401028][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.408519][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.415989][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.423519][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.433426][ T3379] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 69.438011][ T6956] loop3: detected capacity change from 0 to 164 [ 69.470525][ T6956] syz.3.1212: attempt to access beyond end of device [ 69.470525][ T6956] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.498613][ T6956] syz.3.1212: attempt to access beyond end of device [ 69.498613][ T6956] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.526628][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 69.526642][ T29] audit: type=1400 audit(2000000028.000:1749): avc: denied { setopt } for pid=6962 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.563989][ T6968] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 69.571891][ T6968] netlink: 'syz.2.1219': attribute type 2 has an invalid length. [ 69.579619][ T6968] netlink: 'syz.2.1219': attribute type 3 has an invalid length. [ 69.640152][ T6977] __nla_validate_parse: 20 callbacks suppressed [ 69.640168][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.655691][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.664676][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.683770][ T6979] No such timeout policy "syz1" [ 69.686122][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.697852][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.707532][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.742123][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.751178][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.760871][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 69.825822][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.833569][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.841385][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.848874][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.856545][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.864319][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.872348][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.880525][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.887965][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.896062][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.903538][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.911137][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919470][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919498][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919518][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919582][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919604][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919628][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919652][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919674][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919698][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919917][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919941][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919963][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.919986][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.920010][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 69.920603][ T3379] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz1] on syz0 [ 70.122204][ T7007] netlink: 'syz.5.1233': attribute type 13 has an invalid length. [ 70.125843][ T7007] gretap0: refused to change device tx_queue_len [ 70.126424][ T7007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.259953][ T7011] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 70.274827][ T7011] syzkaller0: entered promiscuous mode [ 70.280585][ T7011] syzkaller0: entered allmulticast mode [ 70.325443][ T7018] loop3: detected capacity change from 0 to 512 [ 70.338447][ T7018] EXT4-fs: Ignoring removed i_version option [ 70.346830][ T7018] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1239: corrupted in-inode xattr: overlapping e_value [ 70.363992][ T7018] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1239: couldn't read orphan inode 15 (err -117) [ 70.376603][ T7018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.393630][ T7018] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.1239: Directory hole found for htree leaf block 0 [ 70.419815][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.671541][ T7022] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1242'. [ 70.790144][ T7038] loop3: detected capacity change from 0 to 512 [ 70.796939][ T7038] EXT4-fs: Ignoring removed nobh option [ 70.804456][ T7038] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 70.815688][ T7038] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1248: attempt to clear invalid blocks 2 len 1 [ 70.828906][ T7038] EXT4-fs (loop3): Remounting filesystem read-only [ 70.836610][ T7038] EXT4-fs (loop3): 1 truncate cleaned up [ 70.842883][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.875213][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.895676][ T7050] loop3: detected capacity change from 0 to 512 [ 70.903910][ T7050] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 70.913956][ T7050] EXT4-fs (loop3): invalid journal inode [ 70.920665][ T7050] EXT4-fs (loop3): can't get journal size [ 70.928499][ T7050] EXT4-fs (loop3): 1 truncate cleaned up [ 70.935711][ T7050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.984456][ T29] audit: type=1326 audit(2000000029.460:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.007988][ T29] audit: type=1326 audit(2000000029.460:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.031855][ T29] audit: type=1326 audit(2000000029.490:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.055344][ T29] audit: type=1326 audit(2000000029.490:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.078857][ T29] audit: type=1326 audit(2000000029.490:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.104147][ T29] audit: type=1326 audit(2000000029.580:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a04ee963 code=0x7ffc0000 [ 71.128393][ T29] audit: type=1326 audit(2000000029.580:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a04ee963 code=0x7ffc0000 [ 71.151944][ T29] audit: type=1326 audit(2000000029.580:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.175622][ T29] audit: type=1326 audit(2000000029.580:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7056 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 71.255488][ T7063] capability: warning: `syz.1.1257' uses 32-bit capabilities (legacy support in use) [ 71.294987][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.320209][ T7074] macsec0: entered promiscuous mode [ 71.325827][ T7074] macsec0: entered allmulticast mode [ 71.331186][ T7074] veth1_macvtap: entered allmulticast mode [ 71.397805][ T7084] syzkaller0: entered promiscuous mode [ 71.403503][ T7084] syzkaller0: entered allmulticast mode [ 71.452500][ T7089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7089 comm=syz.3.1268 [ 71.566861][ T7104] loop3: detected capacity change from 0 to 2048 [ 71.593333][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.659850][ T7116] wireguard1: entered promiscuous mode [ 71.660700][ T7118] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 71.665888][ T7116] wireguard1: entered allmulticast mode [ 71.681905][ T7118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 71.698635][ T7118] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.698635][ T7118] [ 71.708949][ T7118] EXT4-fs (loop3): Total free blocks count 0 [ 71.714953][ T7118] EXT4-fs (loop3): Free/Dirty block details [ 71.720910][ T7118] EXT4-fs (loop3): free_blocks=2415919504 [ 71.726632][ T7118] EXT4-fs (loop3): dirty_blocks=2976 [ 71.732063][ T7118] EXT4-fs (loop3): Block reservation details [ 71.738032][ T7118] EXT4-fs (loop3): i_reserved_data_blocks=186 [ 71.745652][ T7118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.903419][ T7121] netlink: 'syz.1.1280': attribute type 16 has an invalid length. [ 71.911363][ T7121] netlink: 'syz.1.1280': attribute type 17 has an invalid length. [ 71.925320][ T7121] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 72.084379][ T7130] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 72.092982][ T7130] geneve1: entered promiscuous mode [ 72.102933][ T7130] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 72.333142][ T7162] tipc: New replicast peer: 172.30.1.4 [ 72.339425][ T7162] tipc: Enabled bearer , priority 10 [ 72.394823][ T7169] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.270605][ T7306] netlink: 'syz.5.1340': attribute type 9 has an invalid length. [ 73.297147][ T7312] tipc: Started in network mode [ 73.302303][ T7312] tipc: Node identity ac14140f, cluster identity 4711 [ 73.309565][ T7312] tipc: New replicast peer: 255.255.255.255 [ 73.315900][ T7312] tipc: Enabled bearer , priority 10 [ 74.142495][ T7490] loop5: detected capacity change from 0 to 256 [ 74.149700][ T7490] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.168157][ T7490] FAT-fs (loop5): Directory bread(block 64) failed [ 74.182213][ T7490] FAT-fs (loop5): Directory bread(block 65) failed [ 74.191796][ T7490] FAT-fs (loop5): Directory bread(block 66) failed [ 74.198792][ T7490] FAT-fs (loop5): Directory bread(block 67) failed [ 74.205965][ T7490] FAT-fs (loop5): Directory bread(block 68) failed [ 74.212614][ T7490] FAT-fs (loop5): Directory bread(block 69) failed [ 74.221500][ T7490] FAT-fs (loop5): Directory bread(block 70) failed [ 74.228377][ T7490] FAT-fs (loop5): Directory bread(block 71) failed [ 74.235231][ T7490] FAT-fs (loop5): Directory bread(block 72) failed [ 74.242482][ T7490] FAT-fs (loop5): Directory bread(block 73) failed [ 74.441018][ T9] tipc: Node number set to 2886997007 [ 74.540378][ T7546] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.616693][ T7554] netlink: 'syz.2.1375': attribute type 21 has an invalid length. [ 74.661900][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 74.661912][ T29] audit: type=1326 audit(2000000033.140:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.730044][ T29] audit: type=1326 audit(2000000033.170:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.753780][ T29] audit: type=1326 audit(2000000033.170:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.760625][ T7560] pimreg: entered allmulticast mode [ 74.777740][ T29] audit: type=1326 audit(2000000033.170:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.777783][ T29] audit: type=1326 audit(2000000033.170:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.777807][ T29] audit: type=1326 audit(2000000033.170:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.777832][ T29] audit: type=1326 audit(2000000033.170:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.807253][ T7560] pimreg: left allmulticast mode [ 74.808528][ T29] audit: type=1326 audit(2000000033.180:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.914088][ T29] audit: type=1326 audit(2000000033.180:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.939180][ T29] audit: type=1326 audit(2000000033.180:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 74.997024][ T7579] netlink: 'syz.3.1383': attribute type 10 has an invalid length. [ 75.005070][ T7579] __nla_validate_parse: 12 callbacks suppressed [ 75.005100][ T7579] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1383'. [ 75.198376][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 75.262744][ T7596] netlink: 'syz.3.1391': attribute type 2 has an invalid length. [ 75.331122][ T7623] tls_set_device_offload_rx: netdev not found [ 75.359938][ T7628] netlink: 'syz.0.1406': attribute type 1 has an invalid length. [ 75.373485][ T7628] bond2: entered promiscuous mode [ 75.378826][ T7628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.396255][ T7628] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1406'. [ 75.408769][ T7628] batadv1: entered promiscuous mode [ 75.414315][ T7628] batadv1: entered allmulticast mode [ 75.421706][ T7628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 75.430363][ T7628] bond2: (slave batadv1): making interface the new active one [ 75.438586][ T7628] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 75.448877][ T7634] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1406'. [ 75.494390][ T7634] batadv2: entered promiscuous mode [ 75.499724][ T7634] batadv2: entered allmulticast mode [ 75.511249][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 75.519604][ T7634] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 75.640255][ T7650] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 75.681278][ T7650] bridge_slave_0: left allmulticast mode [ 75.687036][ T7650] bridge_slave_0: left promiscuous mode [ 75.692715][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.701695][ T7650] bridge_slave_1: left allmulticast mode [ 75.707476][ T7650] bridge_slave_1: left promiscuous mode [ 75.713389][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.725174][ T7650] bond0: (slave bond_slave_0): Releasing backup interface [ 75.734898][ T7650] bond0: (slave bond_slave_1): Releasing backup interface [ 75.754318][ T7650] team0: Port device team_slave_0 removed [ 75.766019][ T7650] team0: Port device team_slave_1 removed [ 75.777325][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.784925][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.796504][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.804665][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.879958][ T7650] bond2: (slave batadv1): Releasing active interface [ 75.886771][ T7650] bond2: (slave batadv1): the permanent HWaddr of slave - b2:fd:b8:bc:77:9c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 75.909450][ T7650] bond2: (slave batadv2): making interface the new active one [ 75.920703][ T7650] bond2: (slave batadv2): Releasing active interface [ 76.108627][ T7683] netlink: 'syz.3.1429': attribute type 13 has an invalid length. [ 76.169439][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.176709][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.212707][ T7683] batman_adv: batadv0: Interface deactivated: dummy0 [ 76.269095][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.290064][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.344403][ T7683] veth1_macvtap: left allmulticast mode [ 76.358698][ T7683] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.367149][ T7683] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.375610][ T7683] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.384180][ T7683] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.539857][ T7718] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 76.570826][ T7720] 9p: Unknown access argument : -22 [ 76.657792][ T7725] loop5: detected capacity change from 0 to 1024 [ 76.669408][ T7725] EXT4-fs: Ignoring removed nobh option [ 76.675060][ T7725] EXT4-fs: Ignoring removed bh option [ 76.688094][ T7727] vlan3: entered allmulticast mode [ 76.703575][ T7725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.741623][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.746659][ T7732] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 76.764790][ T7732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.815607][ T7732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.823276][ T7732] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 76.841463][ T7732] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 76.856873][ T7742] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 76.950383][ T7750] 9pnet_fd: Insufficient options for proto=fd [ 77.118123][ T7767] netlink: 'syz.0.1465': attribute type 16 has an invalid length. [ 77.126465][ T7767] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 77.150568][ T7767] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.247485][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 77.388027][ T7788] loop3: detected capacity change from 0 to 2048 [ 77.423964][ T7788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 77.511578][ T7782] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 77.524551][ T7788] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.560276][ T7788] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 830 with error 28 [ 77.572793][ T7788] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.572793][ T7788] [ 77.582658][ T7788] EXT4-fs (loop3): Total free blocks count 0 [ 77.588742][ T7788] EXT4-fs (loop3): Free/Dirty block details [ 77.594821][ T7788] EXT4-fs (loop3): free_blocks=2415919104 [ 77.600555][ T7788] EXT4-fs (loop3): dirty_blocks=832 [ 77.606019][ T7788] EXT4-fs (loop3): Block reservation details [ 77.612102][ T7788] EXT4-fs (loop3): i_reserved_data_blocks=52 [ 77.613144][ T7801] loop5: detected capacity change from 0 to 4096 [ 77.654824][ T7801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.700813][ T7809] veth1_to_bond: entered allmulticast mode [ 77.713223][ T7809] veth1_to_bond: entered promiscuous mode [ 77.720447][ T7809] veth1_to_bond: left promiscuous mode [ 77.726128][ T7809] veth1_to_bond: left allmulticast mode [ 77.775693][ T4225] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 77.889299][ T7818] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 77.992958][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.019429][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 78.170765][ T7844] syz.5.1494 (7844) used greatest stack depth: 8960 bytes left [ 78.244818][ T7849] loop5: detected capacity change from 0 to 512 [ 78.252003][ T7849] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.263663][ T7849] EXT4-fs (loop5): 1 truncate cleaned up [ 78.269881][ T7849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.360307][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.728393][ T7878] SELinux: failed to load policy [ 78.778326][ T7885] loop5: detected capacity change from 0 to 256 [ 78.787414][ T7885] FAT-fs (loop5): bogus number of FAT sectors [ 78.793643][ T7885] FAT-fs (loop5): Can't find a valid FAT filesystem [ 78.949477][ T7901] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007 [ 79.277011][ T7936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1536'. [ 79.551977][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 79.558439][ T7983] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 79.568056][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 79.602892][ T7983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.628353][ T7986] pim6reg1: entered promiscuous mode [ 79.628370][ T7986] pim6reg1: entered allmulticast mode [ 79.643002][ T7990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.643595][ T7990] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 79.644940][ T7990] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 79.786917][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1554'. [ 79.883322][ T7999] ip6gre2: entered allmulticast mode [ 80.068255][ T8012] veth1_to_bond: entered allmulticast mode [ 80.074435][ T8012] veth1_to_bond: entered promiscuous mode [ 80.075461][ T8012] veth1_to_bond: left promiscuous mode [ 80.075591][ T8012] veth1_to_bond: left allmulticast mode [ 80.264031][ T8026] __nla_validate_parse: 1 callbacks suppressed [ 80.264083][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 80.353137][ T8032] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1570'. [ 80.673109][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 80.673125][ T29] audit: type=1326 audit(2000000039.150:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.707886][ T29] audit: type=1326 audit(2000000039.150:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.731628][ T29] audit: type=1326 audit(2000000039.150:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.756167][ T29] audit: type=1326 audit(2000000039.150:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.779751][ T29] audit: type=1326 audit(2000000039.150:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.804677][ T29] audit: type=1326 audit(2000000039.150:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.828668][ T29] audit: type=1326 audit(2000000039.150:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.852650][ T29] audit: type=1326 audit(2000000039.150:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.877073][ T29] audit: type=1326 audit(2000000039.150:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 80.904555][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 80.914134][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'. [ 80.924598][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 80.933968][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'. [ 80.945318][ T8049] netlink: 'syz.5.1577': attribute type 6 has an invalid length. [ 81.131451][ T8069] pim6reg1: entered promiscuous mode [ 81.136904][ T8069] pim6reg1: entered allmulticast mode [ 81.241628][ T8081] loop3: detected capacity change from 0 to 128 [ 81.245657][ T8077] usb usb8: usbfs: process 8077 (syz.1.1590) did not claim interface 0 before use [ 81.260290][ T8081] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.273568][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 81.276508][ T8081] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.330254][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.353457][ T8087] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1594'. [ 81.382008][ T29] audit: type=1326 audit(2000000039.860:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a04ee929 code=0x7ffc0000 [ 81.484605][ T8107] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1602'. [ 81.553734][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 81.598909][ T8120] netlink: 'syz.5.1609': attribute type 3 has an invalid length. [ 81.607002][ T8120] netlink: 'syz.5.1609': attribute type 3 has an invalid length. [ 81.730737][ T8132] xt_hashlimit: size too large, truncated to 1048576 [ 81.774787][ T8136] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1617' sets config #0 [ 82.304515][ T8151] vlan3: entered allmulticast mode [ 82.321052][ T8151] dummy0: entered allmulticast mode [ 82.696288][ T8181] loop3: detected capacity change from 0 to 256 [ 82.706568][ T8181] FAT-fs (loop3): bogus number of FAT sectors [ 82.712785][ T8181] FAT-fs (loop3): Can't find a valid FAT filesystem [ 83.064032][ T8213] tipc: Started in network mode [ 83.069150][ T8213] tipc: Node identity 0675413aa06f, cluster identity 4711 [ 83.076597][ T8213] tipc: Enabled bearer , priority 0 [ 83.108471][ T8215] loop3: detected capacity change from 0 to 4096 [ 83.117408][ T8213] tipc: Disabling bearer [ 83.130739][ T8215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.144855][ T8215] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.323276][ T8245] sctp: [Deprecated]: syz.0.1665 (pid 8245) Use of int in max_burst socket option. [ 83.323276][ T8245] Use struct sctp_assoc_value instead [ 83.351669][ T8248] loop5: detected capacity change from 0 to 512 [ 83.358770][ T8248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.371198][ T8248] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.390272][ T8248] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 83.400439][ T8248] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 83.413700][ T8248] EXT4-fs (loop5): 1 truncate cleaned up [ 83.419839][ T8248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.479142][ T8248] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.548479][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.563780][ T8277] pim6reg1: entered promiscuous mode [ 83.569177][ T8277] pim6reg1: entered allmulticast mode [ 83.606668][ T8284] block device autoloading is deprecated and will be removed. [ 83.642743][ T8282] : renamed from vlan0 [ 83.855618][ T8320] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.956354][ T8320] bridge_slave_0: left allmulticast mode [ 83.962246][ T8320] bridge_slave_0: left promiscuous mode [ 83.968067][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.020751][ T8320] bridge_slave_1: left allmulticast mode [ 84.026728][ T8320] bridge_slave_1: left promiscuous mode [ 84.032479][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.045492][ T8320] bond0: (slave bond_slave_0): Releasing backup interface [ 84.056169][ T8320] bond0: (slave bond_slave_1): Releasing backup interface [ 84.090907][ T8320] team0: Port device team_slave_0 removed [ 84.117843][ T8320] team0: Port device team_slave_1 removed [ 84.125994][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.129742][ T8347] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 84.133586][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.152580][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.160316][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.194033][ T8347] bond1: entered promiscuous mode [ 84.199516][ T8347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.215651][ T8351] batadv1: entered promiscuous mode [ 84.221031][ T8351] batadv1: entered allmulticast mode [ 84.227638][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.237614][ T8351] bond1: (slave batadv1): making interface the new active one [ 84.246536][ T8351] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 84.282943][ T8347] batadv2: entered promiscuous mode [ 84.288218][ T8347] batadv2: entered allmulticast mode [ 84.294435][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 84.302935][ T8347] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 84.778984][ T8386] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 84.795573][ T8386] bond2: entered promiscuous mode [ 84.800928][ T8386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.817398][ T8386] batadv1: entered promiscuous mode [ 84.823412][ T8386] batadv1: entered allmulticast mode [ 84.831544][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.839690][ T8386] bond2: (slave batadv1): making interface the new active one [ 84.847849][ T8386] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 84.865907][ T8386] batadv2: entered promiscuous mode [ 84.871418][ T8386] batadv2: entered allmulticast mode [ 84.877208][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 84.885393][ T8386] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 84.920241][ T8396] wireguard1: entered promiscuous mode [ 85.695779][ T8437] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.746904][ T8437] bridge_slave_0: left promiscuous mode [ 85.750446][ T8442] loop5: detected capacity change from 0 to 1024 [ 85.752929][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.760769][ T8442] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.773589][ T8442] __quota_error: 101 callbacks suppressed [ 85.773602][ T8442] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 85.774696][ T8437] bridge_slave_1: left allmulticast mode [ 85.779371][ T8442] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 85.779391][ T8442] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1752: Failed to acquire dquot type 0 [ 85.779822][ T8442] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, [ 85.788699][ T8437] bridge_slave_1: left promiscuous mode [ 85.794359][ T8442] inode 13: [ 85.804107][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.815197][ T8442] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.818963][ T8442] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1752: corrupted inode contents [ 85.860893][ T8442] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #13: comm syz.5.1752: mark_inode_dirty error [ 85.877340][ T8437] bond0: (slave bond_slave_0): Releasing backup interface [ 85.884387][ T8442] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1752: corrupted inode contents [ 85.896913][ T8442] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.1752: mark_inode_dirty error [ 85.908720][ T8442] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1752: corrupted inode contents [ 85.924444][ T8437] bond0: (slave bond_slave_1): Releasing backup interface [ 85.931584][ T8442] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 85.932426][ T8442] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1752: corrupted inode contents [ 85.952533][ T8442] EXT4-fs error (device loop5): ext4_truncate:4597: inode #13: comm syz.5.1752: mark_inode_dirty error [ 85.964202][ T8442] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 85.967326][ T8437] team0: Port device team_slave_0 removed [ 85.980508][ T8442] EXT4-fs (loop5): 1 truncate cleaned up [ 85.986864][ T8442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.988028][ T8437] team0: Port device team_slave_1 removed [ 86.025516][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.033147][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.040928][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.042269][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.057480][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.094718][ T8437] bond1: (slave batadv1): Releasing active interface [ 86.101719][ T8437] bond1: (slave batadv1): the permanent HWaddr of slave - 22:6f:cc:e5:48:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 86.127536][ T8437] bond1: (slave batadv2): making interface the new active one [ 86.148020][ T8437] bond1: (slave batadv2): Releasing active interface [ 86.184066][ T8451] : renamed from vlan0 (while UP) [ 86.231850][ T8463] tipc: Enabled bearer , priority 0 [ 86.240264][ T8463] tipc: Disabling bearer [ 86.275436][ T29] audit: type=1400 audit(2000000044.750:2101): avc: denied { lock } for pid=8472 comm="syz.0.1761" path="socket:[18617]" dev="sockfs" ino=18617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 86.336759][ T8480] netlink: 'syz.3.1765': attribute type 4 has an invalid length. [ 86.381901][ T29] audit: type=1400 audit(2000000044.860:2102): avc: denied { bind } for pid=8486 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.428788][ T8489] openvswitch: netlink: Message has 6 unknown bytes. [ 86.473657][ T29] audit: type=1400 audit(2000000044.940:2103): avc: denied { nlmsg_read } for pid=8494 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.549942][ T8504] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 86.565675][ T8503] IPVS: stopping master sync thread 8504 ... [ 86.655405][ T29] audit: type=1326 audit(2000000045.130:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 86.678948][ T29] audit: type=1326 audit(2000000045.130:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 86.702916][ T29] audit: type=1326 audit(2000000045.130:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 86.726694][ T29] audit: type=1326 audit(2000000045.130:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 86.750135][ T29] audit: type=1326 audit(2000000045.130:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 87.026997][ T8534] __nla_validate_parse: 8 callbacks suppressed [ 87.027014][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 87.825662][ T8581] veth0_vlan: left allmulticast mode [ 87.844262][ T8581] macsec0: left promiscuous mode [ 87.855960][ T8581] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.865527][ T8581] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.874787][ T8581] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.883750][ T8581] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.903806][ T8581] ip6gre1: left allmulticast mode [ 87.912153][ T8581] bond2: left promiscuous mode [ 87.918201][ T8581] batadv1: left promiscuous mode [ 87.923989][ T8581] batadv1: left allmulticast mode [ 87.929226][ T8581] batadv2: left promiscuous mode [ 87.934225][ T8581] batadv2: left allmulticast mode [ 88.650794][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1829'. [ 89.100590][ T8758] loop3: detected capacity change from 0 to 512 [ 89.123345][ T8758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.181400][ T8758] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.344163][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.358641][ T8794] netlink: 'syz.0.1848': attribute type 4 has an invalid length. [ 89.388908][ T8798] macsec1: entered promiscuous mode [ 89.394258][ T8798] bridge0: entered promiscuous mode [ 89.399909][ T8798] bridge0: port 1(macsec1) entered blocking state [ 89.406478][ T8798] bridge0: port 1(macsec1) entered disabled state [ 89.413358][ T8798] macsec1: entered allmulticast mode [ 89.418965][ T8798] bridge0: entered allmulticast mode [ 89.425652][ T8798] macsec1: left allmulticast mode [ 89.430750][ T8798] bridge0: left allmulticast mode [ 89.437216][ T8798] bridge0: left promiscuous mode [ 89.504310][ T8808] loop3: detected capacity change from 0 to 128 [ 89.513380][ T8808] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.527285][ T8808] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.569039][ T8808] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.1854: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 89.578546][ T8813] block device autoloading is deprecated and will be removed. [ 89.588441][ T8808] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 89.619943][ T8808] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.3.1854: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 89.655605][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.789960][ T8824] loop5: detected capacity change from 0 to 1024 [ 89.797116][ T8824] EXT4-fs: Ignoring removed nobh option [ 89.802972][ T8824] EXT4-fs: Ignoring removed bh option [ 89.812249][ T8824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.827110][ T8824] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1860: error while reading EA inode 32 err=-116 [ 89.839999][ T8824] EXT4-fs (loop5): Remounting filesystem read-only [ 89.846571][ T8824] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.5.1860: cleanup dec ref error -30 [ 89.859365][ T8824] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #18: comm syz.5.1860: dec ref error=-30 [ 89.880646][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.898397][ T8830] loop1: detected capacity change from 0 to 2048 [ 89.923516][ T8830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.942918][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1863'. [ 89.951575][ T3302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 89.966762][ T3302] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 89.979963][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.328548][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1875'. [ 90.337671][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1875'. [ 90.828552][ T8913] loop3: detected capacity change from 0 to 1024 [ 90.850654][ T8916] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 90.868150][ T8913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.887245][ T8913] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.928513][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 90.939733][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.963739][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 90.963755][ T29] audit: type=1326 audit(2000000049.440:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 90.993792][ T29] audit: type=1326 audit(2000000049.440:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 91.017383][ T29] audit: type=1326 audit(2000000049.440:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 91.040872][ T29] audit: type=1326 audit(2000000049.440:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a3ce929 code=0x7ffc0000 [ 91.199065][ T8964] loop3: detected capacity change from 0 to 1024 [ 91.218996][ T8964] EXT4-fs: Ignoring removed nobh option [ 91.224836][ T8964] EXT4-fs: Ignoring removed bh option [ 91.253115][ T29] audit: type=1326 audit(2000000049.710:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 91.276765][ T29] audit: type=1326 audit(2000000049.710:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 91.300327][ T29] audit: type=1326 audit(2000000049.710:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 91.323924][ T29] audit: type=1326 audit(2000000049.720:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 91.347779][ T29] audit: type=1326 audit(2000000049.720:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 91.371251][ T29] audit: type=1326 audit(2000000049.720:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.5.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f55dbc9e929 code=0x7ffc0000 [ 91.406587][ T8964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.454310][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.678030][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'. [ 91.748452][ T9032] bridge_slave_0: default FDB implementation only supports local addresses [ 91.783594][ T9032] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.006194][ T9083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9083 comm=syz.2.1930 [ 92.125111][ T9109] $H: renamed from bond0 (while UP) [ 92.156328][ T9109] $H: entered promiscuous mode [ 92.308249][ T9146] pim6reg1: entered promiscuous mode [ 92.313681][ T9146] pim6reg1: entered allmulticast mode [ 92.393322][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 92.532223][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1956'. [ 92.541333][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1956'. [ 92.682541][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 92.993564][ T9238] openvswitch: netlink: Message has 6 unknown bytes. [ 93.017364][ T9240] loop3: detected capacity change from 0 to 512 [ 93.031050][ T9244] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1985'. [ 93.053795][ T9240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.081856][ T9240] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.143568][ T9249] IPv4: Oversized IP packet from 127.202.26.0 [ 93.155873][ T9240] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.1986: corrupted inode contents [ 93.180684][ T9240] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.1986: mark_inode_dirty error [ 93.197541][ T9240] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.1986: corrupted inode contents [ 93.211561][ T9255] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1992'. [ 93.253417][ T9240] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.1986: mark_inode_dirty error [ 93.271052][ T9240] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.1986: mark inode dirty (error -117) [ 93.299772][ T9240] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 93.327250][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.393948][ T9269] loop5: detected capacity change from 0 to 2048 [ 93.409735][ T9278] loop1: detected capacity change from 0 to 128 [ 93.442108][ T9278] syz.1.2002: attempt to access beyond end of device [ 93.442108][ T9278] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 93.460309][ T9269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 93.486869][ T4270] kworker/u8:66: attempt to access beyond end of device [ 93.486869][ T4270] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 93.591518][ T9290] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2007'. [ 93.637088][ T9297] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2010'. [ 93.688531][ T9295] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.707808][ T9295] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1876 with error 28 [ 93.720415][ T9295] EXT4-fs (loop5): This should not happen!! Data will be lost [ 93.720415][ T9295] [ 93.730224][ T9295] EXT4-fs (loop5): Total free blocks count 0 [ 93.736293][ T9295] EXT4-fs (loop5): Free/Dirty block details [ 93.742222][ T9295] EXT4-fs (loop5): free_blocks=2415919104 [ 93.748038][ T9295] EXT4-fs (loop5): dirty_blocks=1888 [ 93.753478][ T9295] EXT4-fs (loop5): Block reservation details [ 93.759468][ T9295] EXT4-fs (loop5): i_reserved_data_blocks=118 [ 93.799672][ T9307] pim6reg1: entered promiscuous mode [ 93.805382][ T9307] pim6reg1: entered allmulticast mode [ 94.078413][ T4236] ================================================================== [ 94.086532][ T4236] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 94.095044][ T4236] [ 94.097447][ T4236] write to 0xffff888118cbed08 of 44 bytes by task 9314 on cpu 1: [ 94.105274][ T4236] tty_set_termios+0xc0/0x8c0 [ 94.109972][ T4236] set_termios+0x35b/0x4e0 [ 94.114388][ T4236] tty_mode_ioctl+0x379/0x5c0 [ 94.119080][ T4236] n_tty_ioctl_helper+0x91/0x210 [ 94.124025][ T4236] n_tty_ioctl+0x101/0x200 [ 94.128436][ T4236] tty_ioctl+0x845/0xb80 [ 94.132690][ T4236] __se_sys_ioctl+0xce/0x140 [ 94.137388][ T4236] __x64_sys_ioctl+0x43/0x50 [ 94.142031][ T4236] x64_sys_call+0x19a8/0x2fb0 [ 94.146705][ T4236] do_syscall_64+0xd2/0x200 [ 94.151200][ T4236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.157268][ T4236] [ 94.159675][ T4236] read to 0xffff888118cbed22 of 1 bytes by task 4236 on cpu 0: [ 94.167213][ T4236] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 94.173017][ T4236] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 94.179097][ T4236] tty_port_default_lookahead_buf+0x8e/0xc0 [ 94.185009][ T4236] flush_to_ldisc+0x281/0x360 [ 94.189690][ T4236] process_scheduled_works+0x4ce/0x9d0 [ 94.195239][ T4236] worker_thread+0x582/0x770 [ 94.199854][ T4236] kthread+0x486/0x510 [ 94.203920][ T4236] ret_from_fork+0xda/0x150 [ 94.208431][ T4236] ret_from_fork_asm+0x1a/0x30 [ 94.213241][ T4236] [ 94.215556][ T4236] value changed: 0x13 -> 0x00 [ 94.220215][ T4236] [ 94.222525][ T4236] Reported by Kernel Concurrency Sanitizer on: [ 94.228681][ T4236] CPU: 0 UID: 0 PID: 4236 Comm: kworker/u8:36 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 94.241432][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.251571][ T4236] Workqueue: events_unbound flush_to_ldisc [ 94.257404][ T4236] ================================================================== [ 94.285602][ T4209] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28