last executing test programs: 5.644785755s ago: executing program 4 (id=1193): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x8, 0x5, 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000005c0)=""/111, 0x6f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r2 = gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3503, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = eventfd2(0x0, 0x0) read$eventfd(r4, &(0x7f0000000040), 0x8) 5.082457102s ago: executing program 0 (id=1198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 4.846570074s ago: executing program 0 (id=1202): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.616760887s ago: executing program 0 (id=1204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.37160445s ago: executing program 4 (id=1208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r3, r2, 0x0, 0x7ffff000) 3.524533519s ago: executing program 0 (id=1211): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x13) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 3.110680994s ago: executing program 4 (id=1215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14010}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 2.187052805s ago: executing program 2 (id=1221): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x8, &(0x7f0000004200)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'lo\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fffffffffff}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r2, 0x7, 0xf) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x2, 0x1001, 0x2, 0x7fffffff}) 2.028464607s ago: executing program 0 (id=1224): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5, 0x1}, 0x80, 0x0}, 0x24004859) close(r0) 2.006487137s ago: executing program 4 (id=1226): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 1.971698717s ago: executing program 3 (id=1227): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xdd, [0x82, 0x9, 0x4, 0x5, 0x2, 0x7fffffff], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/221}, &(0x7f0000000180)=0x78) semget$private(0x0, 0x4000000009, 0x42a) r1 = io_uring_setup(0x6ffd, &(0x7f0000000480)={0x0, 0xe83f, 0x100, 0x2, 0xb2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1a, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x4820) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x2c060000) eventfd(0x7) 1.963385208s ago: executing program 2 (id=1228): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.934565348s ago: executing program 3 (id=1229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000087fb00b70800000033e46f7b8af8ff00002a2eb5ab044e37e30ea5008fb642650000bfa200000000000007020000f8ffffffb703001008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0xe, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.102191218s ago: executing program 4 (id=1231): r0 = syz_io_uring_setup(0x7a8e, 0x0, &(0x7f0000000000)=0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x92, 0xebc0, 0x20, 0x0, 0x0) 1.057719598s ago: executing program 2 (id=1232): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88c4}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.057218808s ago: executing program 4 (id=1233): perf_event_open(&(0x7f0000000000)={0x1, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback, @empty, 0x3, 0xc20}}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 1.018342039s ago: executing program 3 (id=1234): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/llc/core\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 834.31883ms ago: executing program 3 (id=1235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 590.473203ms ago: executing program 2 (id=1239): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0xd8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 582.653334ms ago: executing program 3 (id=1241): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) r0 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x20000400) r1 = io_uring_setup(0x7de, &(0x7f00000000c0)={0x0, 0xb3cd, 0x0, 0x0, 0x384}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) rmdir(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040), 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}, {&(0x7f0000000500)="905783db451f", 0x6}], 0x2}, 0x2008854) 474.215395ms ago: executing program 2 (id=1242): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bic\x00', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 433.371295ms ago: executing program 2 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r3, r2, 0x0, 0x7ffff000) 350.294866ms ago: executing program 1 (id=1244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r1, 0x0, 0x0) 316.508377ms ago: executing program 1 (id=1245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, &(0x7f0000001a80)=""/4053, 0xfd5, 0x40000000, 0x0, 0x0) 261.136747ms ago: executing program 1 (id=1246): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 222.575318ms ago: executing program 1 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = dup2(r0, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) 101.021839ms ago: executing program 3 (id=1248): socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x800, 0x20) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0}, 0x1) unshare(0x2c020400) io_uring_enter(0xffffffffffffffff, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) 86.030879ms ago: executing program 0 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 55.77584ms ago: executing program 1 (id=1250): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4", 0x2) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) close(r3) 0s ago: executing program 1 (id=1251): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{0x0, 0x0, 0x32000000}, {0xffffffff}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0xb, 0x3, 0x0, 0x5, 0x0, 0xa21, [{0xc, 0x4, 0x7}, {0xb, 0x2, 0x6}, {0xc, 0x2, 0x18}]}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000003c0)=""/230, 0x64, 0xe6, 0x0, 0xe71d, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0xfffffffd, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000080)=0x6, 0x4) kernel console output (not intermixed with test programs): fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.379: Invalid inode table block 0 in block_group 0 [ 62.834786][ T4596] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 62.844835][ T4599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.854398][ T4596] EXT4-fs error (device loop2): ext4_quota_write:7322: inode #3: comm syz.2.379: mark_inode_dirty error [ 62.867622][ T4596] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.379: Failed to acquire dquot type 0 [ 62.881704][ T4596] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.379: Invalid inode table block 0 in block_group 0 [ 62.903027][ T4596] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 62.913525][ T4599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.924371][ T4599] bond0 (unregistering): Released all slaves [ 62.925401][ T4596] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.379: mark_inode_dirty error [ 62.946798][ T4596] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.379: Invalid inode table block 0 in block_group 0 [ 62.962887][ T4596] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 62.974110][ T4596] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 62.984537][ T4596] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.379: Invalid inode table block 0 in block_group 0 [ 62.997999][ T4596] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 63.008902][ T4596] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.379: mark_inode_dirty error [ 63.029133][ T4596] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 63.039982][ T4615] loop4: detected capacity change from 0 to 1024 [ 63.046623][ T4596] EXT4-fs (loop2): 1 truncate cleaned up [ 63.053812][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.076970][ T4615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.101854][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.203284][ T4632] $Hÿ: renamed from bond0 (while UP) [ 63.212456][ T4632] $Hÿ: entered promiscuous mode [ 63.217549][ T4632] bond_slave_0: entered promiscuous mode [ 63.223458][ T4632] bond_slave_1: entered promiscuous mode [ 63.272066][ T4615] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.383: Allocating blocks 497-513 which overlap fs metadata [ 63.287857][ T4638] loop2: detected capacity change from 0 to 512 [ 63.297590][ T4638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.309729][ T4614] EXT4-fs (loop4): pa ffff888106a901c0: logic 128, phys. 273, len 15 [ 63.318883][ T4614] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 63.330872][ T4638] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.390: invalid block [ 63.345626][ T4638] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.390: invalid indirect mapped block 4294967295 (level 1) [ 63.347543][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.360593][ T4638] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.390: invalid indirect mapped block 4294967295 (level 1) [ 63.383152][ T4638] EXT4-fs (loop2): 2 truncates cleaned up [ 63.389489][ T4638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.405384][ T4638] EXT4-fs (loop2): shut down requested (2) [ 63.411691][ T4638] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 63.420753][ T4638] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 63.456048][ T4643] capability: warning: `syz.4.392' uses deprecated v2 capabilities in a way that may be insecure [ 63.492226][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.553862][ T4651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'. [ 63.576558][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 63.624930][ T4656] lo speed is unknown, defaulting to 1000 [ 63.672498][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.680002][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.687483][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.694992][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.703192][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.710828][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.718247][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x4 [ 63.725696][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.733861][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.741374][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.748833][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x2 [ 63.756379][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.764566][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.772102][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x4 [ 63.779528][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.787378][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.794993][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x2 [ 63.803108][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.810655][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.818086][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.825561][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.833673][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.841333][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.848981][ T2961] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 63.864893][ T2961] hid-generic 0006:0000:0000.0002: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 64.402085][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 64.402103][ T29] audit: type=1400 audit(1749920242.621:1812): avc: denied { getopt } for pid=4665 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.441258][ T4668] $Hÿ: renamed from bond0 [ 64.452075][ T4668] $Hÿ: entered promiscuous mode [ 64.457183][ T4668] bond_slave_0: entered promiscuous mode [ 64.463303][ T4668] bond_slave_1: entered promiscuous mode [ 64.471123][ T4666] loop3: detected capacity change from 0 to 2048 [ 64.523583][ T4666] Alternate GPT is invalid, using primary GPT. [ 64.529977][ T4666] loop3: p1 p2 p3 [ 64.875012][ T4686] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 64.878938][ T29] audit: type=1400 audit(1749920243.091:1813): avc: granted { setsecparam } for pid=4688 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 64.908401][ T29] audit: type=1326 audit(1749920243.121:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 64.933124][ T29] audit: type=1326 audit(1749920243.121:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 64.956611][ T29] audit: type=1326 audit(1749920243.121:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 64.980771][ T29] audit: type=1326 audit(1749920243.121:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 65.004296][ T29] audit: type=1326 audit(1749920243.121:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 65.028481][ T29] audit: type=1326 audit(1749920243.121:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 65.052666][ T29] audit: type=1326 audit(1749920243.121:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 65.078698][ T29] audit: type=1326 audit(1749920243.231:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97910f58e7 code=0x7ffc0000 [ 65.775043][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 65.823207][ T4711] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.428'. [ 66.001506][ T4718] netlink: 240 bytes leftover after parsing attributes in process `syz.4.420'. [ 66.026821][ T4713] loop4: detected capacity change from 0 to 764 [ 66.033489][ T4713] iso9660: Unknown parameter '' [ 66.096861][ T4720] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.421'. [ 66.612620][ T4728] lo speed is unknown, defaulting to 1000 [ 67.154922][ T4743] loop2: detected capacity change from 0 to 164 [ 67.174754][ T4743] isofs_fill_super: root inode is not a directory. Corrupted media? [ 67.563543][ T4751] tipc: Bearer : already 2 bearers with priority 10 [ 67.570883][ T4751] tipc: Bearer : trying with adjusted priority [ 67.579979][ T4751] tipc: New replicast peer: 255.255.255.255 [ 67.586260][ T4751] tipc: Enabled bearer , priority 9 [ 67.624012][ T4755] loop0: detected capacity change from 0 to 512 [ 67.632841][ T4755] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.434: casefold flag without casefold feature [ 67.648255][ T4755] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.434: couldn't read orphan inode 15 (err -117) [ 67.662277][ T4755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.760975][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.783686][ T4766] loop2: detected capacity change from 0 to 256 [ 68.073705][ T4784] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 68.113639][ T4784] team0 (unregistering): Port device team_slave_0 removed [ 68.124716][ T4784] team0 (unregistering): Port device team_slave_1 removed [ 68.396928][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 68.406693][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 68.420931][ T4804] netlink: 14 bytes leftover after parsing attributes in process `syz.2.450'. [ 68.441157][ T4804] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.453020][ T4804] bond_slave_0: left promiscuous mode [ 68.485967][ T4804] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.498514][ T4804] bond_slave_1: left promiscuous mode [ 68.505463][ T4804] $Hÿ (unregistering): Released all slaves [ 68.598559][ T4823] loop1: detected capacity change from 0 to 1024 [ 68.648794][ T4823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.787774][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.976486][ T4859] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.987485][ T4864] loop1: detected capacity change from 0 to 1024 [ 69.072743][ T4859] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.147813][ T4870] xt_CT: No such helper "snmp_trap" [ 69.193171][ T4864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.213256][ T4859] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.329214][ T4864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 69.372910][ T4859] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.427141][ T4882] loop4: detected capacity change from 0 to 128 [ 69.441361][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.452410][ T4882] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.479360][ T4882] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.498306][ T4859] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.510828][ T4859] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.522857][ T4859] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.534985][ T4859] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535211][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 69.535229][ T29] audit: type=1400 audit(1749920247.751:2134): avc: denied { bind } for pid=4891 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.690585][ T29] audit: type=1400 audit(1749920247.791:2135): avc: denied { setopt } for pid=4891 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.711397][ T29] audit: type=1400 audit(1749920247.851:2136): avc: denied { setattr } for pid=4881 comm="syz.4.466" path="/94/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.802102][ T29] audit: type=1400 audit(1749920247.991:2137): avc: denied { ioctl } for pid=4881 comm="syz.4.466" path="/94/file1/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.881689][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.938176][ T4923] loop4: detected capacity change from 0 to 128 [ 69.953872][ T4923] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.967029][ T4923] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.993454][ T29] audit: type=1400 audit(1749920248.211:2138): avc: denied { create } for pid=4922 comm="syz.4.473" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.015789][ T4898] wireguard0: entered promiscuous mode [ 70.022997][ T4898] wireguard0: entered allmulticast mode [ 70.060845][ T29] audit: type=1400 audit(1749920248.281:2139): avc: denied { add_name } for pid=4922 comm="syz.4.473" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.127776][ T29] audit: type=1400 audit(1749920248.281:2140): avc: denied { create } for pid=4922 comm="syz.4.473" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.170102][ T29] audit: type=1400 audit(1749920248.281:2141): avc: denied { remove_name } for pid=4922 comm="syz.4.473" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.213901][ T29] audit: type=1400 audit(1749920248.281:2142): avc: denied { rename } for pid=4922 comm="syz.4.473" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.259923][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.419937][ T29] audit: type=1400 audit(1749920248.501:2143): avc: denied { read write } for pid=4914 comm="syz.0.471" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.584388][ T4913] lo speed is unknown, defaulting to 1000 [ 70.585448][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 70.599154][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 70.733705][ T4953] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 70.741528][ T4953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.477'. [ 70.787805][ T4959] loop4: detected capacity change from 0 to 512 [ 70.801028][ T4959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.477: bg 0: block 393: padding at end of block bitmap is not set [ 70.820491][ T4959] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 70.838570][ T4959] EXT4-fs (loop4): 2 truncates cleaned up [ 70.845306][ T4959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.896912][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.918651][ T4966] loop4: detected capacity change from 0 to 512 [ 70.928031][ T4966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.944334][ T4966] EXT4-fs (loop4): 1 truncate cleaned up [ 70.950522][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.967862][ T4966] syz.4.481 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.992936][ T4971] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 71.019378][ T4971] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 71.087097][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.287356][ T3908] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 71.458695][ T4995] syzkaller0: entered promiscuous mode [ 71.464646][ T4995] syzkaller0: entered allmulticast mode [ 71.537657][ T4993] loop2: detected capacity change from 0 to 164 [ 71.611258][ T5007] loop1: detected capacity change from 0 to 128 [ 71.642558][ T5007] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.954557][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 71.964127][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 71.973982][ T5007] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.070385][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.430088][ T5026] lo speed is unknown, defaulting to 1000 [ 72.611414][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 72.621069][ T5030] netlink: 212 bytes leftover after parsing attributes in process `syz.1.501'. [ 73.032594][ T5043] uprobe: syz.0.508:5043 failed to unregister, leaking uprobe [ 73.216392][ T5057] lo speed is unknown, defaulting to 1000 [ 73.413351][ T5060] lo speed is unknown, defaulting to 1000 [ 73.490906][ T5066] wg2: entered promiscuous mode [ 73.495856][ T5066] wg2: entered allmulticast mode [ 73.544403][ T5068] __nla_validate_parse: 1 callbacks suppressed [ 73.544434][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 73.657932][ T5070] netlink: 79 bytes leftover after parsing attributes in process `syz.1.517'. [ 73.669133][ T5070] netlink: 79 bytes leftover after parsing attributes in process `syz.1.517'. [ 73.690868][ T5072] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.725682][ T5074] loop3: detected capacity change from 0 to 512 [ 73.733687][ T5074] EXT4-fs: Ignoring removed oldalloc option [ 73.742463][ T5074] EXT4-fs: inline encryption not supported [ 73.751615][ T5072] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.761408][ T5074] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 73.770344][ T5074] EXT4-fs (loop3): 1 truncate cleaned up [ 73.776786][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.805232][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.842263][ T5072] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.853742][ T5070] 9pnet_fd: Insufficient options for proto=fd [ 73.998818][ T5086] loop3: detected capacity change from 0 to 512 [ 74.006125][ T5086] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.038478][ T5086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.061125][ T5072] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.080152][ T5086] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.125181][ T5092] lo speed is unknown, defaulting to 1000 [ 74.170313][ T5072] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.205403][ T5072] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.219465][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.232238][ T5072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.259714][ T5072] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437527][ T5095] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 74.557647][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 74.557665][ T29] audit: type=1326 audit(1749920252.751:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 74.587444][ T29] audit: type=1326 audit(1749920252.751:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 74.610946][ T29] audit: type=1326 audit(1749920252.751:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 74.634131][ T29] audit: type=1400 audit(1749920252.761:2421): avc: granted { setsecparam } for pid=5124 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 74.653456][ T29] audit: type=1326 audit(1749920252.771:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 74.676872][ T29] audit: type=1326 audit(1749920252.771:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 74.700339][ T29] audit: type=1326 audit(1749920252.771:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 74.723793][ T29] audit: type=1326 audit(1749920252.771:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 74.747323][ T29] audit: type=1326 audit(1749920252.771:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 74.770666][ T29] audit: type=1326 audit(1749920252.771:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97910fe929 code=0x7ffc0000 [ 74.801328][ T5121] wireguard0: entered promiscuous mode [ 74.807644][ T5121] wireguard0: entered allmulticast mode [ 75.002828][ T5142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'. [ 75.069826][ T5147] loop0: detected capacity change from 0 to 512 [ 75.077790][ T5147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.089556][ T5147] EXT4-fs (loop0): 1 truncate cleaned up [ 75.098817][ T5147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.429163][ T5157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.513741][ T5157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.682539][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.077061][ T5166] netlink: 'syz.0.547': attribute type 27 has an invalid length. [ 76.132797][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.140025][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.152784][ T5166] $Hÿ: left promiscuous mode [ 76.157729][ T5166] bond_slave_0: left promiscuous mode [ 76.164007][ T5166] bond_slave_1: left promiscuous mode [ 76.201364][ T5178] xt_hashlimit: size too large, truncated to 1048576 [ 76.233779][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.257971][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.416286][ T5166] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.424861][ T5166] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.433348][ T5166] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.442416][ T5166] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.461222][ T3396] lo speed is unknown, defaulting to 1000 [ 76.467046][ T3396] syz0: Port: 1 Link DOWN [ 76.479660][ T5175] vlan2: entered allmulticast mode [ 76.484903][ T5175] bridge_slave_0: entered allmulticast mode [ 76.513487][ T5176] wg2: entered promiscuous mode [ 76.518399][ T5176] wg2: entered allmulticast mode [ 76.595425][ T5188] loop4: detected capacity change from 0 to 1024 [ 76.731981][ T5188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.783753][ T5198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'. [ 76.854197][ T5200] lo speed is unknown, defaulting to 1000 [ 77.197575][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.240861][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 77.324709][ T5198] loop0: detected capacity change from 0 to 2048 [ 77.335426][ T5199] wireguard0: entered promiscuous mode [ 77.342686][ T5199] wireguard0: entered allmulticast mode [ 77.392197][ T5209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'. [ 77.614452][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 77.744626][ T5232] 9pnet_fd: Insufficient options for proto=fd [ 77.884968][ T9] IPVS: starting estimator thread 0... [ 77.987543][ T5243] IPVS: using max 1680 ests per chain, 84000 per kthread [ 78.216293][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 78.225209][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 78.362479][ T5259] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.370830][ T5259] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.379140][ T5259] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.387434][ T5259] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.559927][ T5269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 78.604642][ T5269] loop2: detected capacity change from 0 to 2048 [ 79.325765][ T5276] syzkaller0: entered promiscuous mode [ 79.331339][ T5276] syzkaller0: entered allmulticast mode [ 79.584536][ T5294] tipc: New replicast peer: 0.0.255.255 [ 79.591196][ T5294] tipc: Enabled bearer , priority 10 [ 79.798612][ T5304] O3ãc¤±: renamed from bridge_slave_0 (while UP) [ 80.251724][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 80.251739][ T29] audit: type=1400 audit(1749920258.471:2756): avc: denied { accept } for pid=5311 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.626148][ T5316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.601'. [ 80.656114][ T5316] loop4: detected capacity change from 0 to 2048 [ 80.710237][ T5324] bridge1: entered allmulticast mode [ 80.720934][ T2961] tipc: Node number set to 3962552035 [ 80.810584][ T29] audit: type=1400 audit(1749920259.031:2757): avc: denied { map } for pid=5332 comm="syz.3.607" path="socket:[10337]" dev="sockfs" ino=10337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.855474][ T5335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.894812][ T5335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.927721][ T5338] lo speed is unknown, defaulting to 1000 [ 80.933633][ T5338] lo speed is unknown, defaulting to 1000 [ 80.940595][ T5338] lo speed is unknown, defaulting to 1000 [ 80.947541][ T5338] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.956597][ T5335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.969451][ T5338] lo speed is unknown, defaulting to 1000 [ 80.975715][ T5338] lo speed is unknown, defaulting to 1000 [ 80.982025][ T5338] lo speed is unknown, defaulting to 1000 [ 80.988100][ T5338] lo speed is unknown, defaulting to 1000 [ 80.995106][ T5338] lo speed is unknown, defaulting to 1000 [ 81.006697][ T5335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.027177][ T5340] loop4: detected capacity change from 0 to 512 [ 81.034462][ T5340] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 81.045170][ T5340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 81.053260][ T5340] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.060624][ T5340] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.610: attempt to clear invalid blocks 1024 len 1 [ 81.074035][ T5340] EXT4-fs (loop4): Remounting filesystem read-only [ 81.081090][ T5340] EXT4-fs (loop4): 1 truncate cleaned up [ 81.087130][ T5340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 81.089304][ T5335] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.112167][ T5335] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.124453][ T5335] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.127653][ T5343] loop0: detected capacity change from 0 to 512 [ 81.138601][ T5335] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.153312][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.166502][ T5343] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.189996][ T5343] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.612: bg 0: block 96: padding at end of block bitmap is not set [ 81.207133][ T29] audit: type=1326 audit(1749920259.431:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.0.612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73cd96e929 code=0x0 [ 81.493347][ T29] audit: type=1400 audit(1749920259.711:2759): avc: denied { create } for pid=5359 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.517862][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 81.599555][ T29] audit: type=1400 audit(1749920259.811:2760): avc: denied { connect } for pid=5365 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.879520][ T5374] lo speed is unknown, defaulting to 1000 [ 81.886256][ T5374] lo speed is unknown, defaulting to 1000 [ 82.145636][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 82.248908][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.306152][ T5376] netlink: 'syz.4.625': attribute type 27 has an invalid length. [ 82.356955][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.364324][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.399136][ T5376] wg2: left promiscuous mode [ 82.404054][ T5376] wg2: left allmulticast mode [ 82.427725][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.438055][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.517674][ T5376] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.526805][ T5376] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.535819][ T5376] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.544833][ T5376] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.604603][ T5381] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 82.641632][ T36] lo speed is unknown, defaulting to 1000 [ 82.647543][ T36] syz2: Port: 1 Link DOWN [ 82.669851][ T5382] netlink: 3 bytes leftover after parsing attributes in process `syz.1.626'. [ 82.704361][ T5381] bond0: entered promiscuous mode [ 82.751769][ T5386] netlink: 3 bytes leftover after parsing attributes in process `syz.1.626'. [ 82.762570][ T5381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.775094][ T5382] batadv1: entered promiscuous mode [ 82.780462][ T5382] batadv1: entered allmulticast mode [ 82.793276][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.802368][ T5382] bond0: (slave batadv1): making interface the new active one [ 82.810982][ T5382] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 82.843669][ T5386] batadv2: entered promiscuous mode [ 82.849018][ T5386] batadv2: entered allmulticast mode [ 82.888675][ T5386] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 82.913356][ T5386] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 82.979214][ T5392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.629'. [ 83.012383][ T5392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5392 comm=syz.1.629 [ 83.110489][ T29] audit: type=1400 audit(1749920261.301:2761): avc: denied { bind } for pid=5394 comm="syz.1.630" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.131690][ T29] audit: type=1400 audit(1749920261.301:2762): avc: denied { node_bind } for pid=5394 comm="syz.1.630" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 83.215777][ T29] audit: type=1400 audit(1749920261.381:2763): avc: denied { connect } for pid=5394 comm="syz.1.630" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.283097][ T29] audit: type=1400 audit(1749920261.491:2764): avc: denied { ioctl } for pid=5399 comm="syz.2.632" path="socket:[11512]" dev="sockfs" ino=11512 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.365600][ T5405] lo speed is unknown, defaulting to 1000 [ 83.372484][ T5405] lo speed is unknown, defaulting to 1000 [ 83.386639][ T29] audit: type=1400 audit(1749920261.551:2765): avc: denied { lock } for pid=5401 comm="syz.1.633" path="socket:[10487]" dev="sockfs" ino=10487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.782804][ T5414] pim6reg1: entered promiscuous mode [ 83.788275][ T5414] pim6reg1: entered allmulticast mode [ 83.813703][ T3907] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 83.883959][ T5420] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067968) [ 83.894449][ T5420] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 84.136237][ T5441] lo speed is unknown, defaulting to 1000 [ 84.142510][ T5441] lo speed is unknown, defaulting to 1000 [ 84.562277][ T3948] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 84.578014][ T5460] loop2: detected capacity change from 0 to 512 [ 84.603678][ T5460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.616576][ T5460] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.798858][ T5465] tipc: Started in network mode [ 84.803863][ T5465] tipc: Node identity c6625141656c, cluster identity 4711 [ 84.811211][ T5465] tipc: Enabled bearer , priority 0 [ 84.829552][ T5464] tipc: Resetting bearer [ 84.880580][ T5464] tipc: Disabling bearer [ 84.893115][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.095824][ T5477] loop2: detected capacity change from 0 to 256 [ 85.096584][ T5477] FAT-fs (loop2): bogus sectors per cluster 255 [ 85.096605][ T5477] FAT-fs (loop2): Can't find a valid FAT filesystem [ 85.246829][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 85.246845][ T29] audit: type=1326 audit(1749920263.479:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 85.276461][ T29] audit: type=1326 audit(1749920263.479:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fe3bfab19 code=0x7ffc0000 [ 85.299855][ T29] audit: type=1326 audit(1749920263.479:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 85.323463][ T29] audit: type=1326 audit(1749920263.541:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 85.346868][ T29] audit: type=1326 audit(1749920263.541:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fe3bfab19 code=0x7ffc0000 [ 85.370217][ T29] audit: type=1326 audit(1749920263.541:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 85.393708][ T29] audit: type=1326 audit(1749920263.541:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 85.417084][ T29] audit: type=1326 audit(1749920263.541:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fe3bfab19 code=0x7ffc0000 [ 85.440333][ T29] audit: type=1326 audit(1749920263.541:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 85.463718][ T29] audit: type=1326 audit(1749920263.551:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 85.491243][ T5495] loop4: detected capacity change from 0 to 512 [ 85.502673][ T5495] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.664: iget: bad extended attribute block 1 [ 85.524764][ T5495] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.664: couldn't read orphan inode 15 (err -117) [ 85.540569][ T5495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.570370][ T3888] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 85.598856][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.609625][ T5503] loop0: detected capacity change from 0 to 512 [ 85.637393][ T5506] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067968) [ 85.647738][ T5506] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 85.659137][ T5503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.705903][ T5503] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.767170][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.050518][ T5540] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 86.102867][ T5540] bond0: entered promiscuous mode [ 86.127046][ T5540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.158208][ T5545] netlink: 3 bytes leftover after parsing attributes in process `syz.4.675'. [ 86.183467][ T5545] batadv1: entered promiscuous mode [ 86.188765][ T5545] batadv1: entered allmulticast mode [ 86.195299][ T5545] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.203707][ T5545] bond0: (slave batadv1): making interface the new active one [ 86.212646][ T5545] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 86.265735][ T5551] netlink: 'syz.1.680': attribute type 27 has an invalid length. [ 86.290250][ T5551] $Hÿ: left promiscuous mode [ 86.290849][ T5555] tmpfs: Bad value for 'mpol' [ 86.295166][ T5551] bond_slave_0: left promiscuous mode [ 86.305447][ T5551] bond_slave_1: left promiscuous mode [ 86.330431][ T5551] wg2: left promiscuous mode [ 86.335107][ T5551] wg2: left allmulticast mode [ 86.336495][ T5537] netlink: 3 bytes leftover after parsing attributes in process `syz.4.675'. [ 86.350320][ T5555] loop2: detected capacity change from 0 to 1024 [ 86.357837][ T5551] bond0: left promiscuous mode [ 86.363446][ T5551] batadv1: left promiscuous mode [ 86.368656][ T5551] batadv1: left allmulticast mode [ 86.374573][ T5551] batadv2: left promiscuous mode [ 86.379776][ T5551] batadv2: left allmulticast mode [ 86.391122][ T5537] batadv2: entered promiscuous mode [ 86.396534][ T5537] batadv2: entered allmulticast mode [ 86.402620][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 86.410652][ T5555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.426257][ T5537] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 86.455430][ T5555] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.681: bg 0: block 88: padding at end of block bitmap is not set [ 86.677274][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.689'. [ 86.711147][ T5575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5575 comm=syz.4.689 [ 87.215141][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.267846][ T5585] netlink: 14 bytes leftover after parsing attributes in process `syz.2.692'. [ 87.277236][ T5585] hsr_slave_0: left promiscuous mode [ 87.283186][ T5585] hsr_slave_1: left promiscuous mode [ 87.294106][ T5587] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 87.310245][ T5587] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 87.340329][ T5589] loop0: detected capacity change from 0 to 512 [ 87.369308][ T5591] netlink: 'syz.2.695': attribute type 27 has an invalid length. [ 87.445238][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.460443][ T5589] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.508603][ T5589] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.524519][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.536874][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.565294][ T5591] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.573764][ T5591] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.583023][ T5591] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.591671][ T5591] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.612252][ T5591] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.621106][ T5591] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.629712][ T5591] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.638134][ T5591] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.804067][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 87.821213][ T5615] hsr_slave_0 (unregistering): left promiscuous mode [ 87.829752][ T5617] tipc: New replicast peer: 255.255.255.255 [ 87.835956][ T5617] tipc: Enabled bearer , priority 10 [ 87.911856][ T5620] lo speed is unknown, defaulting to 1000 [ 87.918796][ T5620] lo speed is unknown, defaulting to 1000 [ 88.597235][ T5648] tmpfs: Bad value for 'mpol' [ 88.716962][ T5654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 88.821458][ T5663] loop9: detected capacity change from 0 to 7 [ 88.828130][ T5663] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.837068][ T5663] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.844962][ T5663] loop9: unable to read partition table [ 88.851162][ T5663] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 88.851162][ T5663] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 88.924472][ T2961] tipc: Node number set to 2735624513 [ 88.933960][ T5670] pim6reg: entered allmulticast mode [ 88.939991][ T5670] pim6reg: left allmulticast mode [ 89.023769][ T5674] openvswitch: netlink: Message has 6 unknown bytes. [ 89.073098][ T5678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.081777][ T5678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.123219][ T5672] sch_fq: defrate 0 ignored. [ 89.489101][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 89.641610][ T5701] loop0: detected capacity change from 0 to 512 [ 89.677670][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.733296][ T5701] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.774817][ T5707] syzkaller0: entered promiscuous mode [ 89.780394][ T5707] syzkaller0: entered allmulticast mode [ 89.814368][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.854499][ T5711] $Hÿ: entered promiscuous mode [ 89.859646][ T5711] bond_slave_0: entered promiscuous mode [ 89.865597][ T5711] bond_slave_1: entered promiscuous mode [ 89.978050][ T5714] netlink: zone id is out of range [ 89.983392][ T5714] netlink: zone id is out of range [ 89.988607][ T5714] netlink: zone id is out of range [ 89.993763][ T5714] netlink: zone id is out of range [ 89.999285][ T5714] netlink: zone id is out of range [ 90.085092][ T5718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.218429][ T5729] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 90.234348][ T5729] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 90.253156][ T36] lo speed is unknown, defaulting to 1000 [ 90.258961][ T36] syz0: Port: 1 Link ACTIVE [ 90.367014][ T5732] lo speed is unknown, defaulting to 1000 [ 90.388660][ T5732] lo speed is unknown, defaulting to 1000 [ 90.398376][ T5734] tipc: Enabled bearer , priority 0 [ 90.468190][ T5733] tipc: Resetting bearer [ 90.515565][ T5733] tipc: Disabling bearer [ 90.727329][ T5761] loop0: detected capacity change from 0 to 1024 [ 90.740024][ T5761] EXT4-fs: Ignoring removed nobh option [ 90.745690][ T5761] EXT4-fs: Ignoring removed bh option [ 90.772864][ T5761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.811634][ T5761] syzkaller0: entered promiscuous mode [ 90.817245][ T5761] syzkaller0: entered allmulticast mode [ 90.928630][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.934836][ T5775] lo speed is unknown, defaulting to 1000 [ 90.945003][ T5775] lo speed is unknown, defaulting to 1000 [ 91.144193][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 91.144207][ T29] audit: type=1326 audit(1749920269.535:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.181814][ T29] audit: type=1326 audit(1749920269.566:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.205266][ T29] audit: type=1326 audit(1749920269.566:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.228645][ T29] audit: type=1326 audit(1749920269.566:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.252203][ T29] audit: type=1326 audit(1749920269.566:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.275920][ T29] audit: type=1326 audit(1749920269.668:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.332252][ T29] audit: type=1326 audit(1749920269.719:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.355694][ T29] audit: type=1326 audit(1749920269.719:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 91.561463][ T5792] loop2: detected capacity change from 0 to 128 [ 91.669879][ T5783] lo speed is unknown, defaulting to 1000 [ 91.683382][ T5783] lo speed is unknown, defaulting to 1000 [ 91.716143][ T5792] bio_check_eod: 114 callbacks suppressed [ 91.716159][ T5792] syz.2.765: attempt to access beyond end of device [ 91.716159][ T5792] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 91.813686][ T5792] syz.2.765: attempt to access beyond end of device [ 91.813686][ T5792] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 91.927560][ T5792] syz.2.765: attempt to access beyond end of device [ 91.927560][ T5792] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 91.964793][ T5792] syz.2.765: attempt to access beyond end of device [ 91.964793][ T5792] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 92.043116][ T5792] syz.2.765: attempt to access beyond end of device [ 92.043116][ T5792] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 92.066759][ T5795] syz.2.765: attempt to access beyond end of device [ 92.066759][ T5795] loop2: rw=2049, sector=297, nr_sectors = 80 limit=128 [ 92.089767][ T5792] syz.2.765: attempt to access beyond end of device [ 92.089767][ T5792] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 92.103753][ T5795] syz.2.765: attempt to access beyond end of device [ 92.103753][ T5795] loop2: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 92.139334][ T5792] syz.2.765: attempt to access beyond end of device [ 92.139334][ T5792] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 92.157762][ T5795] syz.2.765: attempt to access beyond end of device [ 92.157762][ T5795] loop2: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 92.254418][ T5792] Buffer I/O error on dev loop2, logical block 297, async page read [ 92.262641][ T5792] Buffer I/O error on dev loop2, logical block 298, async page read [ 92.270898][ T5792] Buffer I/O error on dev loop2, logical block 299, async page read [ 92.278963][ T5792] Buffer I/O error on dev loop2, logical block 300, async page read [ 92.287251][ T5792] Buffer I/O error on dev loop2, logical block 301, async page read [ 92.298582][ T5792] Buffer I/O error on dev loop2, logical block 302, async page read [ 92.316422][ T5792] Buffer I/O error on dev loop2, logical block 303, async page read [ 92.354515][ T5802] lo speed is unknown, defaulting to 1000 [ 92.360766][ T5802] lo speed is unknown, defaulting to 1000 [ 92.533415][ T5792] Buffer I/O error on dev loop2, logical block 304, async page read [ 92.597319][ T5806] loop0: detected capacity change from 0 to 512 [ 92.630430][ T5806] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 92.852878][ T29] audit: type=1400 audit(1749920271.271:3331): avc: denied { write } for pid=5814 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.872714][ T29] audit: type=1400 audit(1749920271.281:3332): avc: denied { ioctl } for pid=5814 comm="syz.0.773" path="socket:[11162]" dev="sockfs" ino=11162 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.978398][ T5815] loop0: detected capacity change from 0 to 1024 [ 93.547828][ T5815] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.647481][ T5815] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.659278][ T5815] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.755639][ T5815] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 93.771161][ T5815] EXT4-fs (loop0): mount failed [ 93.874681][ T5830] loop3: detected capacity change from 0 to 1024 [ 93.896990][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.958255][ T5832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 93.967749][ T5827] bridge_slave_0: left allmulticast mode [ 93.973580][ T5827] bridge_slave_0: left promiscuous mode [ 93.979421][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.007863][ T5835] netlink: 3 bytes leftover after parsing attributes in process `syz.1.778'. [ 94.028788][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.048648][ T5827] bridge_slave_1: left allmulticast mode [ 94.054428][ T5827] bridge_slave_1: left promiscuous mode [ 94.060295][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.070911][ T5836] netlink: 3 bytes leftover after parsing attributes in process `syz.1.778'. [ 94.087871][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.088387][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.103821][ T5835] batadv3: entered promiscuous mode [ 94.103843][ T5835] batadv3: entered allmulticast mode [ 94.120429][ T5836] batadv3: entered promiscuous mode [ 94.120450][ T5836] batadv3: entered allmulticast mode [ 94.726063][ T5873] mmap: syz.0.792 (5873) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.770384][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.794'. [ 94.780807][ T5872] netlink: 3 bytes leftover after parsing attributes in process `syz.4.794'. [ 94.817635][ T5872] batadv3: entered promiscuous mode [ 94.823006][ T5872] batadv3: entered allmulticast mode [ 94.836646][ T5874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.794'. [ 94.869459][ T5874] batadv3: entered promiscuous mode [ 94.874729][ T5874] batadv3: entered allmulticast mode [ 94.941053][ T5878] loop4: detected capacity change from 0 to 128 [ 95.023241][ T5881] netlink: 'syz.0.796': attribute type 4 has an invalid length. [ 95.035668][ T3389] lo speed is unknown, defaulting to 1000 [ 95.041473][ T3389] syz0: Port: 1 Link DOWN [ 95.048387][ T5881] netlink: 'syz.0.796': attribute type 4 has an invalid length. [ 95.060514][ T3389] lo speed is unknown, defaulting to 1000 [ 95.066329][ T3389] syz0: Port: 1 Link ACTIVE [ 95.120645][ T5878] buffer_io_error: 1096 callbacks suppressed [ 95.120664][ T5878] Buffer I/O error on dev loop4, logical block 297, async page read [ 95.135251][ T5878] Buffer I/O error on dev loop4, logical block 298, async page read [ 95.143470][ T5878] Buffer I/O error on dev loop4, logical block 299, async page read [ 95.151770][ T5878] Buffer I/O error on dev loop4, logical block 300, async page read [ 95.160011][ T5878] Buffer I/O error on dev loop4, logical block 301, async page read [ 95.168230][ T5878] Buffer I/O error on dev loop4, logical block 302, async page read [ 95.216527][ T5878] Buffer I/O error on dev loop4, logical block 303, async page read [ 95.224912][ T5878] Buffer I/O error on dev loop4, logical block 304, async page read [ 95.233295][ T5878] Buffer I/O error on dev loop4, logical block 297, async page read [ 95.268076][ T5878] Buffer I/O error on dev loop4, logical block 298, async page read [ 95.487045][ T5895] loop3: detected capacity change from 0 to 512 [ 95.503714][ T5895] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.670037][ T5898] lo speed is unknown, defaulting to 1000 [ 95.676581][ T5898] lo speed is unknown, defaulting to 1000 [ 96.340826][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 96.340840][ T29] audit: type=1326 audit(1749920274.834:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.382694][ T29] audit: type=1326 audit(1749920274.834:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.406883][ T29] audit: type=1326 audit(1749920274.834:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.411756][ T5908] loop4: detected capacity change from 0 to 8192 [ 96.431798][ T29] audit: type=1326 audit(1749920274.834:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.461528][ T29] audit: type=1326 audit(1749920274.834:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.485190][ T29] audit: type=1326 audit(1749920274.834:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.508981][ T29] audit: type=1326 audit(1749920274.834:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.532315][ T29] audit: type=1326 audit(1749920274.834:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.556538][ T29] audit: type=1326 audit(1749920274.834:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.580652][ T29] audit: type=1326 audit(1749920274.834:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 96.612378][ T5917] x_tables: ip_tables: osf match: only valid for protocol 6 [ 96.636423][ T5908] loop4: p1 p2 p3 [ 96.641525][ T5908] loop4: p2 start 3506442254 is beyond EOD, truncated [ 96.648400][ T5908] loop4: p3 size 49412 extends beyond EOD, truncated [ 96.681860][ T5920] lo speed is unknown, defaulting to 1000 [ 96.706882][ T5920] lo speed is unknown, defaulting to 1000 [ 96.775506][ T5922] netlink: 'syz.2.808': attribute type 4 has an invalid length. [ 96.796281][ T5922] netlink: 'syz.2.808': attribute type 4 has an invalid length. [ 96.836620][ T5930] veth0: entered promiscuous mode [ 96.845471][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 96.874013][ T5928] loop4: detected capacity change from 0 to 256 [ 96.892253][ T5930] veth0 (unregistering): left promiscuous mode [ 97.413579][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 97.546470][ T5948] SELinux: ebitmap: truncated map [ 97.562832][ T5948] SELinux: failed to load policy [ 97.778828][ T5960] lo speed is unknown, defaulting to 1000 [ 97.785006][ T5960] lo speed is unknown, defaulting to 1000 [ 98.855444][ T5962] lo speed is unknown, defaulting to 1000 [ 98.861698][ T5962] lo speed is unknown, defaulting to 1000 [ 99.347491][ T5976] loop3: detected capacity change from 0 to 1024 [ 99.354677][ T5975] lo speed is unknown, defaulting to 1000 [ 99.360952][ T5973] loop2: detected capacity change from 0 to 1024 [ 99.361579][ T5975] lo speed is unknown, defaulting to 1000 [ 99.374026][ T5976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.385990][ T5973] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.392838][ T5976] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.403899][ T5976] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.414252][ T5973] EXT4-fs: Ignoring removed nobh option [ 99.419939][ T5973] EXT4-fs: Ignoring removed bh option [ 99.427518][ T5976] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 99.434136][ T5976] EXT4-fs (loop3): mount failed [ 99.492505][ T5973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.552115][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.562616][ T5985] geneve0: entered allmulticast mode [ 99.593123][ T5987] pim6reg: entered allmulticast mode [ 99.602698][ T5987] pim6reg: left allmulticast mode [ 100.099522][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'. [ 100.535552][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 100.616438][ T6029] loop2: detected capacity change from 0 to 1024 [ 100.637289][ T6027] lo speed is unknown, defaulting to 1000 [ 100.714777][ T6027] lo speed is unknown, defaulting to 1000 [ 100.920971][ T6029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.984949][ T6029] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.032886][ T6038] loop3: detected capacity change from 0 to 128 [ 101.302341][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 101.302355][ T29] audit: type=1400 audit(1749920279.862:4314): avc: denied { mounton } for pid=6028 comm="syz.2.848" path="/174/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.320803][ T6038] bio_check_eod: 37449 callbacks suppressed [ 101.320825][ T6038] syz.3.850: attempt to access beyond end of device [ 101.320825][ T6038] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 101.369472][ T6048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.804453][ T29] audit: type=1400 audit(1749920280.368:4315): avc: denied { setattr } for pid=6028 comm="syz.2.848" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.828700][ T6046] netlink: 'syz.4.852': attribute type 4 has an invalid length. [ 101.873910][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.884380][ T6049] syz.3.850: attempt to access beyond end of device [ 101.884380][ T6049] loop3: rw=2049, sector=289, nr_sectors = 72 limit=128 [ 102.034136][ T6038] syz.3.850: attempt to access beyond end of device [ 102.034136][ T6038] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 102.051760][ T6055] netlink: 'syz.4.854': attribute type 4 has an invalid length. [ 102.073556][ T6049] syz.3.850: attempt to access beyond end of device [ 102.073556][ T6049] loop3: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 102.087323][ T6049] syz.3.850: attempt to access beyond end of device [ 102.087323][ T6049] loop3: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 102.100909][ T6049] syz.3.850: attempt to access beyond end of device [ 102.100909][ T6049] loop3: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 102.118199][ T6038] syz.3.850: attempt to access beyond end of device [ 102.118199][ T6038] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 102.139371][ T6038] syz.3.850: attempt to access beyond end of device [ 102.139371][ T6038] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 102.159853][ T6038] syz.3.850: attempt to access beyond end of device [ 102.159853][ T6038] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 102.176378][ T6038] syz.3.850: attempt to access beyond end of device [ 102.176378][ T6038] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 102.332996][ T6038] buffer_io_error: 33782 callbacks suppressed [ 102.333020][ T6038] Buffer I/O error on dev loop3, logical block 289, async page read [ 102.350566][ T6038] Buffer I/O error on dev loop3, logical block 290, async page read [ 102.394364][ T6038] Buffer I/O error on dev loop3, logical block 291, async page read [ 102.403365][ T6038] Buffer I/O error on dev loop3, logical block 292, async page read [ 102.413875][ T6038] Buffer I/O error on dev loop3, logical block 293, async page read [ 102.440082][ T6038] Buffer I/O error on dev loop3, logical block 294, async page read [ 102.482830][ T6038] Buffer I/O error on dev loop3, logical block 295, async page read [ 102.545840][ T6038] Buffer I/O error on dev loop3, logical block 296, async page read [ 102.737735][ T29] audit: type=1326 audit(1749920281.278:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.761214][ T29] audit: type=1326 audit(1749920281.278:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.785294][ T29] audit: type=1326 audit(1749920281.278:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.809583][ T29] audit: type=1326 audit(1749920281.278:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.833216][ T29] audit: type=1326 audit(1749920281.278:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.857507][ T29] audit: type=1326 audit(1749920281.278:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.880842][ T29] audit: type=1326 audit(1749920281.278:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 102.904929][ T29] audit: type=1326 audit(1749920281.278:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 103.040598][ T6072] bridge: RTM_NEWNEIGH with invalid ether address [ 103.133905][ T6080] loop3: detected capacity change from 0 to 512 [ 103.171735][ T6080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.227361][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.274635][ T6080] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.332705][ T1036] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 103.427251][ T6092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.471400][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.525598][ T6093] tipc: Enabled bearer , priority 0 [ 103.607550][ T6089] tipc: Resetting bearer [ 103.649882][ T6089] tipc: Disabling bearer [ 103.792347][ T6110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.232244][ T6118] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 104.856234][ T6133] geneve0: entered allmulticast mode [ 105.253248][ T6139] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 105.341020][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 105.525158][ T6149] netlink: 100 bytes leftover after parsing attributes in process `syz.0.891'. [ 105.556154][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 105.590323][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.598844][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 105.612911][ T6151] veth5: entered promiscuous mode [ 105.620614][ T6151] bond0: (slave veth5): Enslaving as an active interface with an up link [ 105.661972][ T6151] vlan2: entered allmulticast mode [ 105.667190][ T6151] bond0: entered allmulticast mode [ 105.672401][ T6151] veth5: entered allmulticast mode [ 105.684484][ T6159] netlink: 19 bytes leftover after parsing attributes in process `syz.2.895'. [ 105.756879][ T6169] veth0: entered promiscuous mode [ 105.782665][ T6169] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 105.795900][ T6166] loop4: detected capacity change from 0 to 2048 [ 105.809964][ T6166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.835743][ T6178] netlink: 763 bytes leftover after parsing attributes in process `syz.1.899'. [ 105.847683][ T6176] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.854368][ T6166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.860370][ T6176] syzkaller0: entered promiscuous mode [ 105.873689][ T6176] syzkaller0: entered allmulticast mode [ 105.878298][ T6178] bridge0: port 5($Hÿ) entered blocking state [ 105.885737][ T6178] bridge0: port 5($Hÿ) entered disabled state [ 105.887642][ T6166] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 5: comm syz.4.889: path /178/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 105.894850][ T6178] $Hÿ: entered allmulticast mode [ 105.913676][ T6166] EXT4-fs (loop4): Remounting filesystem read-only [ 105.918631][ T6178] bond_slave_0: entered allmulticast mode [ 105.918653][ T6178] bond_slave_1: entered allmulticast mode [ 105.921347][ T6178] $Hÿ: entered promiscuous mode [ 105.942469][ T6178] bond_slave_0: entered promiscuous mode [ 105.948271][ T6178] bond_slave_1: entered promiscuous mode [ 105.976670][ T6166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.988823][ T6182] $Hÿ: left allmulticast mode [ 105.993732][ T6182] bond_slave_0: left allmulticast mode [ 105.999411][ T6182] bond_slave_1: left allmulticast mode [ 106.005005][ T6182] $Hÿ: left promiscuous mode [ 106.010756][ T6182] bond_slave_0: left promiscuous mode [ 106.016549][ T6182] bond_slave_1: left promiscuous mode [ 106.022896][ T6182] bridge0: port 5($Hÿ) entered disabled state [ 106.060999][ T6186] wireguard0: entered promiscuous mode [ 106.066781][ T6186] wireguard0: entered allmulticast mode [ 106.114613][ T6195] lo speed is unknown, defaulting to 1000 [ 106.120803][ T6195] lo speed is unknown, defaulting to 1000 [ 106.227855][ T6210] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 106.263133][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 106.263151][ T29] audit: type=1326 audit(1749920284.872:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.295498][ T29] audit: type=1326 audit(1749920284.872:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.319795][ T29] audit: type=1326 audit(1749920284.872:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.343923][ T29] audit: type=1326 audit(1749920284.872:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.367348][ T29] audit: type=1326 audit(1749920284.872:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.391489][ T29] audit: type=1326 audit(1749920284.872:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.415587][ T29] audit: type=1326 audit(1749920284.872:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.439145][ T29] audit: type=1326 audit(1749920284.872:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.463177][ T29] audit: type=1326 audit(1749920284.872:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.486562][ T29] audit: type=1326 audit(1749920284.872:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6ae20e929 code=0x7ffc0000 [ 106.570790][ T6222] batadv_slave_0: entered promiscuous mode [ 106.599366][ T6228] netlink: 763 bytes leftover after parsing attributes in process `syz.0.916'. [ 106.641092][ T6228] bridge0: port 3($Hÿ) entered blocking state [ 106.647444][ T6228] bridge0: port 3($Hÿ) entered disabled state [ 106.655487][ T6228] $Hÿ: entered allmulticast mode [ 106.660681][ T6228] bond_slave_0: entered allmulticast mode [ 106.666462][ T6228] bond_slave_1: entered allmulticast mode [ 106.680278][ T6236] netlink: 'syz.1.919': attribute type 4 has an invalid length. [ 106.691833][ T6236] netlink: 'syz.1.919': attribute type 4 has an invalid length. [ 106.699730][ T6228] $Hÿ: left allmulticast mode [ 106.704732][ T6228] bond_slave_0: left allmulticast mode [ 106.711032][ T6228] bond_slave_1: left allmulticast mode [ 106.716755][ T6228] bridge0: port 3($Hÿ) entered disabled state [ 106.839402][ T6246] vhci_hcd: invalid port number 254 [ 106.915393][ T6250] wireguard0: entered promiscuous mode [ 106.921033][ T6250] wireguard0: entered allmulticast mode [ 107.142293][ T6258] loop3: detected capacity change from 0 to 2048 [ 107.168334][ T6258] EXT4-fs: Ignoring removed bh option [ 107.207981][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.266908][ T6258] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 107.440693][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.475653][ T6271] wg2: entered promiscuous mode [ 107.480678][ T6271] wg2: entered allmulticast mode [ 107.699434][ T1036] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 107.770567][ T6291] tipc: Enabled bearer , priority 10 [ 107.779070][ T6291] ªªªªªª: renamed from vlan0 [ 107.785575][ T6291] tipc: Disabling bearer [ 107.816650][ T6292] bridge0: port 1($Hÿ) entered blocking state [ 107.823761][ T6292] bridge0: port 1($Hÿ) entered disabled state [ 107.834650][ T6292] $Hÿ: entered allmulticast mode [ 107.839869][ T6292] bond_slave_0: entered allmulticast mode [ 107.845676][ T6292] bond_slave_1: entered allmulticast mode [ 107.856646][ T6292] $Hÿ: left allmulticast mode [ 107.861692][ T6292] bond_slave_0: left allmulticast mode [ 107.867301][ T6292] bond_slave_1: left allmulticast mode [ 107.873117][ T6292] bridge0: port 1($Hÿ) entered disabled state [ 108.017467][ T6302] loop4: detected capacity change from 0 to 2048 [ 108.054820][ T6302] EXT4-fs: Ignoring removed bh option [ 108.091269][ T6302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.105459][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.217906][ T6308] veth11: entered promiscuous mode [ 108.226222][ T6308] bond1: (slave veth11): Enslaving as an active interface with an up link [ 108.245426][ T6317] vlan3: entered allmulticast mode [ 108.250638][ T6317] bond1: entered allmulticast mode [ 108.255788][ T6317] veth11: entered allmulticast mode [ 108.262313][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.027375][ T6359] lo speed is unknown, defaulting to 1000 [ 109.038657][ T6359] lo speed is unknown, defaulting to 1000 [ 109.136697][ T6364] bridge2: entered allmulticast mode [ 109.195282][ T6372] loop3: detected capacity change from 0 to 512 [ 109.215298][ T6372] EXT4-fs (loop3): 1 orphan inode deleted [ 109.227975][ T6372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.242640][ T3948] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 109.300063][ T6372] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.368688][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.409385][ T6386] 9pnet_fd: Insufficient options for proto=fd [ 109.911451][ T6401] loop3: detected capacity change from 0 to 4096 [ 109.969097][ T6404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.981612][ T6404] bond1 (unregistering): Released all slaves [ 110.041117][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.104135][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.151955][ T6418] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.160854][ T6418] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.169661][ T6418] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.178498][ T6418] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.194725][ T6418] vxlan0: entered promiscuous mode [ 110.227668][ T6423] loop2: detected capacity change from 0 to 512 [ 110.234905][ T6423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.289037][ T6423] EXT4-fs (loop2): 1 truncate cleaned up [ 110.305361][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.331389][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.354422][ T6423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.457188][ T6429] kernel read not supported for file /policy (pid: 6429 comm: syz.0.986) [ 110.521745][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.583332][ T6437] macvtap1: entered allmulticast mode [ 110.588747][ T6437] bridge0: entered allmulticast mode [ 110.594477][ T6437] bridge0: port 1(macvtap1) entered blocking state [ 110.601094][ T6437] bridge0: port 1(macvtap1) entered disabled state [ 110.608673][ T6437] bridge0: left allmulticast mode [ 110.762719][ T6445] sch_fq: defrate 4294967295 ignored. [ 111.238066][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 111.238085][ T29] audit: type=1326 audit(1749920289.887:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 111.267921][ T29] audit: type=1326 audit(1749920289.897:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fe3bfab19 code=0x7ffc0000 [ 111.291324][ T29] audit: type=1326 audit(1749920289.897:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 111.314628][ T29] audit: type=1326 audit(1749920289.917:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 111.337900][ T29] audit: type=1326 audit(1749920289.917:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fe3bfab19 code=0x7ffc0000 [ 111.361331][ T29] audit: type=1326 audit(1749920289.917:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 111.384744][ T29] audit: type=1326 audit(1749920289.928:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 111.407984][ T29] audit: type=1326 audit(1749920289.928:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fe3bfab19 code=0x7ffc0000 [ 111.431346][ T29] audit: type=1326 audit(1749920289.928:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 111.454610][ T29] audit: type=1326 audit(1749920289.938:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fe3c558e7 code=0x7ffc0000 [ 111.535338][ T6453] syzkaller0: entered promiscuous mode [ 111.541145][ T6453] syzkaller0: entered allmulticast mode [ 111.624582][ T6459] xt_hashlimit: size too large, truncated to 1048576 [ 111.633059][ T6456] lo speed is unknown, defaulting to 1000 [ 111.639280][ T6456] lo speed is unknown, defaulting to 1000 [ 111.712245][ T6463] loop3: detected capacity change from 0 to 512 [ 111.719565][ T6463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.736036][ T6463] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.752054][ T6463] EXT4-fs (loop3): 1 truncate cleaned up [ 111.758695][ T6463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.831730][ T6470] loop2: detected capacity change from 0 to 1024 [ 111.839220][ T6470] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.850368][ T6470] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.866810][ T6470] JBD2: no valid journal superblock found [ 111.872654][ T6470] EXT4-fs (loop2): Could not load journal inode [ 111.905486][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 111.917690][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 111.927765][ T6476] team0 (unregistering): Port device geneve1 removed [ 111.957918][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.014004][ T6483] geneve2: entered promiscuous mode [ 112.019448][ T6483] geneve2: entered allmulticast mode [ 112.046136][ T6484] vhci_hcd: invalid port number 254 [ 112.300312][ T6490] syzkaller0: entered promiscuous mode [ 112.305906][ T6490] syzkaller0: entered allmulticast mode [ 112.404478][ T6496] netlink: 'syz.2.1009': attribute type 4 has an invalid length. [ 112.421633][ T6496] netlink: 'syz.2.1009': attribute type 4 has an invalid length. [ 112.485453][ T6501] loop2: detected capacity change from 0 to 1024 [ 112.497659][ T6501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.498242][ T6502] lo speed is unknown, defaulting to 1000 [ 112.515270][ T6502] lo speed is unknown, defaulting to 1000 [ 112.533732][ T6501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.675548][ T6517] __nla_validate_parse: 10 callbacks suppressed [ 112.675570][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 112.692042][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 112.811504][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.813234][ T6526] lo speed is unknown, defaulting to 1000 [ 112.834514][ T6526] lo speed is unknown, defaulting to 1000 [ 113.041096][ T6540] loop2: detected capacity change from 0 to 1024 [ 113.050154][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 113.074811][ T6529] vlan3: entered allmulticast mode [ 113.080791][ T6529] bond2: entered allmulticast mode [ 113.118285][ T6540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.194595][ T6548] syzkaller0: entered promiscuous mode [ 113.200274][ T6548] syzkaller0: entered allmulticast mode [ 113.265725][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 113.280302][ T6550] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1024'. [ 113.603757][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.691465][ T6574] @ÿ: renamed from bond_slave_0 [ 113.780476][ T6577] syzkaller0: entered promiscuous mode [ 113.786110][ T6577] syzkaller0: entered allmulticast mode [ 113.797515][ T6581] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.806563][ T6581] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.814888][ T6581] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.823404][ T6581] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.832219][ T6581] geneve2: entered promiscuous mode [ 113.838152][ T6581] geneve2: entered allmulticast mode [ 113.953237][ T6581] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.961878][ T6581] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.970328][ T6581] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.978908][ T6581] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.285802][ T6587] loop3: detected capacity change from 0 to 2048 [ 114.343213][ T6587] loop3: p1 < > p4 [ 114.354369][ T6587] loop3: p4 size 8388608 extends beyond EOD, truncated [ 114.729827][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'. [ 114.755068][ T6606] lo speed is unknown, defaulting to 1000 [ 114.763059][ T6606] lo speed is unknown, defaulting to 1000 [ 114.763324][ T6607] lo speed is unknown, defaulting to 1000 [ 114.783439][ T6607] lo speed is unknown, defaulting to 1000 [ 114.930303][ T6617] bridge: RTM_NEWNEIGH with invalid ether address [ 115.105927][ T6627] loop3: detected capacity change from 0 to 1024 [ 115.132791][ T6627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.159393][ T6627] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.179895][ T6570] syz.4.1034 (6570) used greatest stack depth: 6040 bytes left [ 115.194178][ T6627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 115.207093][ T6627] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1055: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.225194][ T6627] EXT4-fs (loop3): Remounting filesystem read-only [ 115.232635][ T6627] EXT4-fs (loop3): 1 orphan inode deleted [ 115.241435][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.258340][ T6627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.449528][ T6641] loop3: detected capacity change from 0 to 1024 [ 115.458922][ T6641] EXT4-fs: Ignoring removed bh option [ 115.464534][ T6641] EXT4-fs: inline encryption not supported [ 115.497367][ T6641] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.501091][ T6643] lo speed is unknown, defaulting to 1000 [ 115.521555][ T6643] lo speed is unknown, defaulting to 1000 [ 115.524921][ T6641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 115.557632][ T6641] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1061: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.584768][ T6641] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.1061: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.601830][ T6641] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1061: Failed to acquire dquot type 0 [ 115.616756][ T6641] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 115.634824][ T6641] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1061: mark_inode_dirty error [ 115.657290][ T6641] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 115.667838][ T6641] EXT4-fs (loop3): 1 orphan inode deleted [ 115.674017][ T6641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.686938][ T3934] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:50: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.711231][ T3934] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 0 [ 115.713483][ T6651] lo speed is unknown, defaulting to 1000 [ 115.735207][ T6651] lo speed is unknown, defaulting to 1000 [ 115.754826][ T6641] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.786762][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.818239][ T6659] loop2: detected capacity change from 0 to 256 [ 115.842033][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 115.855167][ T6661] ipvlan0: entered promiscuous mode [ 116.094202][ T6679] lo speed is unknown, defaulting to 1000 [ 116.100516][ T6679] lo speed is unknown, defaulting to 1000 [ 116.181029][ T6688] 9pnet_fd: Insufficient options for proto=fd [ 116.225088][ T6691] loop4: detected capacity change from 0 to 1024 [ 116.232658][ T6691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.245645][ T6691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.378901][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.404877][ T6707] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 116.425959][ T6707] bond1: entered promiscuous mode [ 116.429090][ T6710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1083'. [ 116.431206][ T6707] bond1: entered allmulticast mode [ 116.445703][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.463428][ T6707] ip6gretap1: entered promiscuous mode [ 116.469279][ T6707] ip6gretap1: entered allmulticast mode [ 116.475684][ T6707] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 116.510766][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 116.510822][ T29] audit: type=1400 audit(1749920295.174:5185): avc: denied { read } for pid=6712 comm="syz.4.1084" path="socket:[15947]" dev="sockfs" ino=15947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.544376][ T29] audit: type=1326 audit(1749920295.215:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.568175][ T29] audit: type=1326 audit(1749920295.215:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.568431][ T3888] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.591665][ T29] audit: type=1326 audit(1749920295.215:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.625296][ T29] audit: type=1326 audit(1749920295.215:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.648821][ T29] audit: type=1326 audit(1749920295.215:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.672306][ T29] audit: type=1326 audit(1749920295.215:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.695688][ T29] audit: type=1326 audit(1749920295.215:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.709764][ T3888] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.719186][ T29] audit: type=1326 audit(1749920295.215:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 116.752557][ T29] audit: type=1326 audit(1749920295.215:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cd96e929 code=0x7ffc0000 [ 117.371834][ T6728] 9pnet_fd: Insufficient options for proto=fd [ 117.382496][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 117.395441][ T6726] netem: change failed [ 117.421355][ T6729] lo speed is unknown, defaulting to 1000 [ 117.432052][ T6729] lo speed is unknown, defaulting to 1000 [ 117.446959][ T6735] futex_wake_op: syz.0.1090 tries to shift op by -1; fix this program [ 117.554552][ T6750] lo speed is unknown, defaulting to 1000 [ 117.561012][ T6750] lo speed is unknown, defaulting to 1000 [ 117.568182][ T6753] loop3: detected capacity change from 0 to 128 [ 117.723796][ T6760] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.746134][ T6762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.809713][ T6760] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.821911][ T6762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.839230][ T6766] netlink: 'syz.0.1102': attribute type 16 has an invalid length. [ 117.847299][ T6766] netlink: 'syz.0.1102': attribute type 17 has an invalid length. [ 117.858481][ T6760] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.895755][ T6762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.926202][ T6760] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.976341][ T6762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.032499][ T6760] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.044583][ T6760] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056879][ T6760] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.069049][ T6760] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.086236][ T6762] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.100575][ T6762] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.112478][ T6762] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.127151][ T6762] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.226240][ T6776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6776 comm=syz.3.1104 [ 118.776903][ T6789] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 118.795500][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.814512][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 118.827686][ T6789] ipvlan0: entered promiscuous mode [ 118.835812][ T6789] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 118.845414][ T6789] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.946472][ T6796] netlink: 'syz.1.1111': attribute type 4 has an invalid length. [ 118.965036][ T6793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.973434][ T6793] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.981708][ T6793] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.990022][ T6793] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.999204][ T6793] geneve2: entered promiscuous mode [ 119.073526][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1117'. [ 119.083620][ T6807] futex_wake_op: syz.1.1116 tries to shift op by -1; fix this program [ 119.115517][ T6810] loop2: detected capacity change from 0 to 512 [ 119.123474][ T6810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.125423][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 119.146280][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.169142][ T6810] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.190683][ T6810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 119.233187][ T6814] lo speed is unknown, defaulting to 1000 [ 119.239866][ T6814] lo speed is unknown, defaulting to 1000 [ 119.292595][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.302930][ T6822] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 119.322849][ T6822] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 119.333533][ T2961] lo speed is unknown, defaulting to 1000 [ 119.339472][ T2961] syz2: Port: 1 Link ACTIVE [ 119.406245][ T6834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6834 comm=syz.4.1126 [ 119.419031][ T6834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6834 comm=syz.4.1126 [ 119.440931][ T6831] netlink: 'syz.1.1127': attribute type 4 has an invalid length. [ 119.501136][ T6831] netlink: 'syz.1.1127': attribute type 4 has an invalid length. [ 119.512209][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1128'. [ 119.786833][ T6827] loop2: detected capacity change from 0 to 2048 [ 119.824980][ T6827] EXT4-fs (loop2): failed to initialize system zone (-117) [ 119.834948][ T6827] EXT4-fs (loop2): mount failed [ 121.245769][ T6869] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.283017][ T6870] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 121.290964][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1138'. [ 121.362041][ T6869] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.402461][ T6870] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 121.465265][ T6869] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.490072][ T6867] ref_ctr_offset mismatch. inode: 0x4d8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 121.543129][ T6869] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.611626][ T6869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.640630][ T6869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.665399][ T6869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.695533][ T6869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.831072][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 121.831086][ T29] audit: type=1400 audit(1749920300.524:5830): avc: denied { bind } for pid=6876 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.103106][ T29] audit: type=1400 audit(1749920300.795:5831): avc: denied { ioctl } for pid=6885 comm="syz.2.1144" path="socket:[16245]" dev="sockfs" ino=16245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.131055][ T6886] loop2: detected capacity change from 0 to 512 [ 122.149228][ T6886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.176375][ T6873] ªªªªªª: renamed from tunl0 [ 122.183472][ T6886] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 122.251743][ T6886] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.300076][ T6886] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 122.331303][ T6886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1144: bg 0: block 248: padding at end of block bitmap is not set [ 122.366140][ T6886] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 122.376339][ T6886] EXT4-fs (loop2): 1 orphan inode deleted [ 122.391096][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.511928][ T29] audit: type=1326 audit(1749920301.206:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 122.549800][ T29] audit: type=1326 audit(1749920301.226:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 122.573954][ T29] audit: type=1326 audit(1749920301.226:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 122.597755][ T29] audit: type=1326 audit(1749920301.226:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 122.622003][ T29] audit: type=1326 audit(1749920301.226:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 122.645573][ T29] audit: type=1326 audit(1749920301.226:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 122.670107][ T29] audit: type=1326 audit(1749920301.226:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b630e929 code=0x7ffc0000 [ 123.187819][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.367566][ T6920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1157'. [ 123.387214][ T6920] netlink: 'syz.0.1157': attribute type 3 has an invalid length. [ 123.395126][ T6920] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1157'. [ 123.555197][ T6930] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 123.740699][ T6930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.825621][ T6934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.833121][ T6934] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.846413][ T6934] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 123.863586][ T6935] veth9: entered promiscuous mode [ 123.873215][ T6935] bond2: (slave veth9): Enslaving as an active interface with a down link [ 123.881932][ T6930] erspan0: entered allmulticast mode [ 123.898205][ T6930] bond2: (slave erspan0): making interface the new active one [ 123.909033][ T6930] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 123.927540][ T6932] lo speed is unknown, defaulting to 1000 [ 123.933740][ T6932] lo speed is unknown, defaulting to 1000 [ 124.049235][ T6947] TCP: out of memory -- consider tuning tcp_mem [ 124.277640][ T6960] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 124.451984][ T6970] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 124.493665][ T6949] Set syz1 is full, maxelem 65536 reached [ 124.562730][ T6978] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.604675][ T6978] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.686630][ T6978] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.719319][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 124.744918][ T6978] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.802492][ T6978] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.815737][ T6978] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.828667][ T6978] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.841051][ T6978] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.935176][ T6993] lo speed is unknown, defaulting to 1000 [ 124.941733][ T6993] lo speed is unknown, defaulting to 1000 [ 125.009909][ T7006] loop4: detected capacity change from 0 to 1024 [ 125.020255][ T7006] EXT4-fs: Ignoring removed nobh option [ 125.026376][ T7006] EXT4-fs: Ignoring removed bh option [ 125.056095][ T7006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.093293][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 125.448236][ T7026] loop2: detected capacity change from 0 to 2048 [ 125.810530][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.131328][ T7030] loop3: detected capacity change from 0 to 1024 [ 126.161500][ T7030] EXT4-fs: Ignoring removed orlov option [ 126.197973][ T7030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.312891][ T7037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7037 comm=syz.2.1196 [ 126.325489][ T7037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7037 comm=syz.2.1196 [ 126.372830][ T7041] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 126.426696][ T7041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.535810][ T7041] bond1: (slave gretap1): making interface the new active one [ 126.544429][ T7041] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 126.893740][ T7056] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 126.915780][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.970140][ T7056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.014801][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 127.014818][ T29] audit: type=1400 audit(1749920305.707:6003): avc: denied { write } for pid=7059 comm="syz.3.1205" path="socket:[17001]" dev="sockfs" ino=17001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.046486][ T7057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.056057][ T7057] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 127.084103][ T7057] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 127.097870][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 127.115847][ T7056] gretap2: entered promiscuous mode [ 127.122132][ T7068] netlink: 'syz.3.1207': attribute type 16 has an invalid length. [ 127.130235][ T7068] netlink: 'syz.3.1207': attribute type 17 has an invalid length. [ 127.143877][ T7056] bond2: (slave gretap2): making interface the new active one [ 127.157765][ T7066] loop4: detected capacity change from 0 to 1024 [ 127.161734][ T7056] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 127.170940][ T7066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.559737][ T7076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7076 comm=syz.1.1210 [ 127.572346][ T7076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7076 comm=syz.1.1210 [ 127.631431][ T7067] bond2: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 128.140559][ T7079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.245804][ T7079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.326750][ T7079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.455416][ T7079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.495176][ T7081] ref_ctr_offset mismatch. inode: 0x4c2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 128.805991][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.822991][ T29] audit: type=1326 audit(1749920307.521:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 128.847286][ T29] audit: type=1326 audit(1749920307.521:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 128.881523][ T7095] loop2: detected capacity change from 0 to 1024 [ 128.888534][ T7095] EXT4-fs: Ignoring removed nobh option [ 128.892237][ T29] audit: type=1326 audit(1749920307.581:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 128.894179][ T7095] EXT4-fs: Ignoring removed bh option [ 128.924192][ T29] audit: type=1326 audit(1749920307.581:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 128.948687][ T29] audit: type=1326 audit(1749920307.581:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 128.972295][ T29] audit: type=1326 audit(1749920307.581:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 128.996309][ T29] audit: type=1326 audit(1749920307.581:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 129.007453][ T7095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.019774][ T29] audit: type=1326 audit(1749920307.581:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 129.057230][ T29] audit: type=1326 audit(1749920307.581:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe3c5e929 code=0x7ffc0000 [ 129.085426][ T7098] loop4: detected capacity change from 0 to 512 [ 129.088129][ T7079] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.110121][ T7098] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 129.121168][ T7098] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.1215: iget: bad i_size value: 12154757448730 [ 129.121625][ T7079] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.145112][ T7098] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1215: couldn't read orphan inode 13 (err -117) [ 129.159931][ T7100] wg2: entered promiscuous mode [ 129.164905][ T7100] wg2: entered allmulticast mode [ 129.194320][ T7098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.203069][ T7079] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.220309][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.239277][ T7079] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.270829][ T7098] erspan0: left allmulticast mode [ 129.282749][ T7098] bond0: left promiscuous mode [ 129.299561][ T7098] batadv1: left promiscuous mode [ 129.304912][ T7098] batadv1: left allmulticast mode [ 129.310834][ T7098] batadv2: left promiscuous mode [ 129.316158][ T7098] batadv2: left allmulticast mode [ 129.322211][ T7098] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.331367][ T7098] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.339896][ T7098] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.348549][ T7098] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.358285][ T7098] vxlan0: left promiscuous mode [ 129.366064][ T7098] bond1: left promiscuous mode [ 129.370909][ T7098] ip6gretap1: left promiscuous mode [ 129.376631][ T7098] bond1: left allmulticast mode [ 129.381592][ T7098] ip6gretap1: left allmulticast mode [ 129.392256][ T7098] veth9: left promiscuous mode [ 129.402994][ T3389] lo speed is unknown, defaulting to 1000 [ 129.408819][ T3389] syz2: Port: 1 Link DOWN [ 129.433021][ T7117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.447178][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.459835][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 129.486379][ T7117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.530215][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 130.008278][ T7117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.133361][ T7117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.449833][ T7143] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 130.464576][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1234'. [ 130.481677][ T7144] netlink: 'syz.2.1232': attribute type 10 has an invalid length. [ 130.489717][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1232'. [ 130.502069][ T7144] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 130.585250][ T7143] team0: Port device geneve1 added [ 130.626369][ T7149] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 130.642467][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.661147][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.668544][ T7149] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.680327][ T7149] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 130.692737][ T7152] $Hÿ: entered promiscuous mode [ 130.697819][ T7152] bond_slave_0: entered promiscuous mode [ 130.704761][ T7152] bond_slave_1: entered promiscuous mode [ 130.714714][ T7153] gretap1: entered promiscuous mode [ 130.722415][ T7153] bond1: (slave gretap1): making interface the new active one [ 130.731598][ T7153] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 130.752148][ T7155] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 130.754849][ T7153] bond1: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 130.781457][ T7155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.794435][ T7155] ipvlan2: entered promiscuous mode [ 130.809490][ T7155] bond3: (slave gretap1): making interface the new active one [ 130.818320][ T7155] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 130.875888][ T7162] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 130.896659][ T7162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.917445][ T7162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.924868][ T7162] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.940525][ T7162] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 130.952395][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 130.972994][ T7169] veth13: entered promiscuous mode [ 130.979924][ T7169] bond4: (slave veth13): Enslaving as an active interface with a down link [ 131.004793][ T7169] erspan0: entered allmulticast mode [ 131.012197][ T7169] bond4: (slave erspan0): making interface the new active one [ 131.022200][ T7169] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 131.026304][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 131.067271][ T7171] loop2: detected capacity change from 0 to 1024 [ 131.077460][ T7166] netlink: 'syz.3.1241': attribute type 13 has an invalid length. [ 131.085386][ T7166] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1241'. [ 131.104785][ T7117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.118048][ T7171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.182757][ T7117] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.215843][ T7166] erspan0: refused to change device tx_queue_len [ 131.240371][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 131.244655][ T7166] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 131.272848][ T7117] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.332564][ T7117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.465281][ T7179] ================================================================== [ 131.473442][ T7179] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 131.481508][ T7179] [ 131.483848][ T7179] write to 0xffff88811c82e54c of 4 bytes by task 7171 on cpu 1: [ 131.491495][ T7179] xas_set_mark+0x12b/0x140 [ 131.496029][ T7179] tag_pages_for_writeback+0xc2/0x290 [ 131.501435][ T7179] ext4_do_writepages+0x697/0x21c0 [ 131.506563][ T7179] ext4_writepages+0x176/0x300 [ 131.511362][ T7179] do_writepages+0x1c6/0x310 [ 131.515974][ T7179] filemap_write_and_wait_range+0x144/0x340 [ 131.521898][ T7179] filemap_invalidate_pages+0xa4/0x1a0 [ 131.527389][ T7179] kiocb_invalidate_pages+0x6e/0x80 [ 131.532648][ T7179] __iomap_dio_rw+0x5d4/0x1250 [ 131.537451][ T7179] iomap_dio_rw+0x40/0x90 [ 131.541808][ T7179] ext4_file_write_iter+0xad9/0xf00 [ 131.547027][ T7179] iter_file_splice_write+0x5ef/0x970 [ 131.552430][ T7179] direct_splice_actor+0x156/0x2a0 [ 131.557566][ T7179] splice_direct_to_actor+0x312/0x680 [ 131.562965][ T7179] do_splice_direct+0xda/0x150 [ 131.567758][ T7179] do_sendfile+0x380/0x650 [ 131.572213][ T7179] __x64_sys_sendfile64+0x105/0x150 [ 131.577456][ T7179] x64_sys_call+0xb39/0x2fb0 [ 131.582513][ T7179] do_syscall_64+0xd2/0x200 [ 131.587032][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.593031][ T7179] [ 131.595369][ T7179] read to 0xffff88811c82e54c of 4 bytes by task 7179 on cpu 0: [ 131.602923][ T7179] file_write_and_wait_range+0x10e/0x2c0 [ 131.608603][ T7179] generic_buffers_fsync_noflush+0x45/0x120 [ 131.614552][ T7179] ext4_sync_file+0x1ab/0x690 [ 131.619273][ T7179] vfs_fsync_range+0x10a/0x130 [ 131.624064][ T7179] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.629652][ T7179] ext4_file_write_iter+0xdbf/0xf00 [ 131.634884][ T7179] iter_file_splice_write+0x5ef/0x970 [ 131.640281][ T7179] direct_splice_actor+0x156/0x2a0 [ 131.645421][ T7179] splice_direct_to_actor+0x312/0x680 [ 131.650823][ T7179] do_splice_direct+0xda/0x150 [ 131.656144][ T7179] do_sendfile+0x380/0x650 [ 131.660595][ T7179] __x64_sys_sendfile64+0x105/0x150 [ 131.665818][ T7179] x64_sys_call+0xb39/0x2fb0 [ 131.670432][ T7179] do_syscall_64+0xd2/0x200 [ 131.674952][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.680868][ T7179] [ 131.683201][ T7179] value changed: 0x02000021 -> 0x04000021 [ 131.688926][ T7179] [ 131.691273][ T7179] Reported by Kernel Concurrency Sanitizer on: [ 131.697899][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.2.1243 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 131.710420][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.720491][ T7179] ================================================================== [ 131.945355][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.