last executing test programs: 2m38.394252811s ago: executing program 32 (id=238): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) 2m33.371706592s ago: executing program 0 (id=436): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x800}, 0x8) 2m33.294787587s ago: executing program 0 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 2m33.24156612s ago: executing program 0 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) set_tid_address(0x0) 2m33.196335883s ago: executing program 0 (id=443): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 2m32.34199073s ago: executing program 0 (id=471): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m32.261645965s ago: executing program 0 (id=474): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2m31.222426293s ago: executing program 33 (id=492): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x57e, 0x0, 0x0, 0x0, 0x0, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007111b30000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m21.383059261s ago: executing program 3 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 2m21.135133657s ago: executing program 3 (id=816): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = open(&(0x7f0000000980)='./bus\x00', 0x64842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2m20.94070831s ago: executing program 3 (id=821): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getpriority(0x1, 0x0) 2m20.884671064s ago: executing program 3 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 2m20.506003189s ago: executing program 6 (id=837): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) unshare(0x20000400) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/46, 0x1000, 0x1000, 0x0, 0x2}, 0x20) 2m20.505823049s ago: executing program 6 (id=838): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2m20.48453358s ago: executing program 6 (id=840): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xb}, 0x8) 2m20.409662075s ago: executing program 6 (id=842): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 2m20.110016365s ago: executing program 6 (id=846): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') 2m20.021575591s ago: executing program 3 (id=848): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000025c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2m19.217904633s ago: executing program 3 (id=850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 2m19.217771694s ago: executing program 34 (id=850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 2m17.038962037s ago: executing program 35 (id=474): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2m15.62159573s ago: executing program 6 (id=856): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 2m15.576271854s ago: executing program 36 (id=856): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 1m30.402538748s ago: executing program 2 (id=2690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 1m30.37625426s ago: executing program 2 (id=2692): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x15, &(0x7f0000000780)={&(0x7f0000001480)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x8041) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m30.191552881s ago: executing program 2 (id=2700): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) 1m28.755494856s ago: executing program 2 (id=2705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) getpgrp(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b33000000000000000005000000080003"], 0x2c}}, 0x4c002) 1m28.685427071s ago: executing program 2 (id=2710): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m28.564785309s ago: executing program 2 (id=2716): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) 1m13.462421493s ago: executing program 37 (id=2716): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) 11.591401767s ago: executing program 5 (id=5424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="c1", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x4004844) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x6, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)) 11.571450558s ago: executing program 5 (id=5428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000090000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="290b000000000000000020000000050003"], 0x1c}}, 0x2404c044) 11.484903484s ago: executing program 5 (id=5433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 11.3908272s ago: executing program 5 (id=5436): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 11.273707158s ago: executing program 5 (id=5438): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) 11.146006747s ago: executing program 5 (id=5441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20001) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 11.036160484s ago: executing program 38 (id=5441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20001) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 2.519066495s ago: executing program 7 (id=5762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 2.500473776s ago: executing program 7 (id=5764): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.441898279s ago: executing program 7 (id=5766): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) 2.425624181s ago: executing program 7 (id=5769): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='mm_page_free\x00', r0, 0x0, 0x1000000}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.302446189s ago: executing program 7 (id=5773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private0, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x91) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 2.245204432s ago: executing program 7 (id=5775): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto(r0, &(0x7f00000001c0)="31d41edafabdcf31f3bdb2abeb0412a043c2e56e29816db6e6", 0x19, 0x20008815, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1.169653423s ago: executing program 4 (id=5810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 1.110690427s ago: executing program 4 (id=5812): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1b624bc, &(0x7f00000037c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4625, 0x0, @remote, 0xfffffe01}}}, 0x108) unshare(0x24020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.049989501s ago: executing program 4 (id=5813): io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101, r1, 0x0, 0x0, 0x4}]) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x0, 0x0, 0x5}]) 783.117119ms ago: executing program 1 (id=5820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffff7fffffc}, 0xc) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) clock_gettime(0xea758689fa8bced0, 0x0) 760.48338ms ago: executing program 1 (id=5822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000400095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x800000000000000}, 0x18) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 732.021862ms ago: executing program 8 (id=5823): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x4, 0x3}], "", ['\x00']}, 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 722.469323ms ago: executing program 1 (id=5824): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000480)) 714.735623ms ago: executing program 8 (id=5825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='mm_page_free\x00', r0, 0x0, 0x1000000}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 599.64117ms ago: executing program 8 (id=5827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) pidfd_send_signal(0xffffffffffffffff, 0x17, &(0x7f0000000200)={0x2b, 0x7, 0x81}, 0x0) 564.401193ms ago: executing program 8 (id=5828): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080), 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) syz_io_uring_setup(0xdf8, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 481.529459ms ago: executing program 8 (id=5829): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000002c0), 0x0, 0x0, 0x0) 456.34024ms ago: executing program 1 (id=5830): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x2e38}, 0x18) set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) 453.60969ms ago: executing program 8 (id=5832): r0 = gettid() timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 435.099841ms ago: executing program 1 (id=5834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 401.599054ms ago: executing program 1 (id=5835): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5902070705e3b22ccf7f"], 0xa) 182.746418ms ago: executing program 9 (id=5839): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r2) 176.488199ms ago: executing program 4 (id=5840): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 163.883499ms ago: executing program 9 (id=5841): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 149.45198ms ago: executing program 4 (id=5842): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket(0x2, 0x2, 0x0) shutdown(r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 103.219953ms ago: executing program 4 (id=5843): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f820", 0xf) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 102.940573ms ago: executing program 9 (id=5844): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r2, 0x0, 0x0) 102.370163ms ago: executing program 9 (id=5845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 87.935015ms ago: executing program 9 (id=5846): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x420, 0x3f3, 0x4, 0x70bd2b, 0x25dfdbfb, {0x6, 0x0, 0x3c, [0x4, 0x46, 0x6, 0x7, 0x8000, 0x3, 0x3ff, 0xb1, 0x7, 0x7, 0x9, 0xfff, 0x6, 0x4, 0x7, 0x6, 0x7fffffff, 0x4, 0xc, 0x9, 0x401, 0x6, 0x693, 0x4, 0xea5d, 0x3, 0xffffffff, 0xcd73, 0x7, 0x8, 0x1, 0x5, 0x88, 0x5, 0xd, 0x7ff, 0x1, 0x4, 0xec29, 0xff, 0x40, 0xfff, 0x7, 0x2, 0x8d60, 0x3, 0x4, 0x4, 0x0, 0x5, 0x7, 0x7, 0xa, 0x99d, 0xd1bb, 0x45, 0x1, 0x929, 0x6, 0x9ee, 0xe, 0x200, 0x5, 0xffffffd1], [0x6, 0x6, 0x9, 0x7, 0x8, 0x393d, 0x7, 0x1, 0x0, 0x2, 0x1, 0xf, 0xb, 0x3, 0x1ff, 0x0, 0x8, 0x3, 0x9, 0x9, 0x7f, 0x319, 0x0, 0xfffffffd, 0x1ff, 0x1, 0x3, 0x0, 0x2, 0x101, 0x18, 0x400, 0x1, 0x5, 0x2, 0x1000, 0x101, 0x10001, 0x3, 0x3, 0xfffff000, 0x7fffffff, 0x5a, 0x3, 0x57, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x9f7, 0x8ebb, 0xffffffff, 0x8, 0x8, 0x3, 0xfffffffd, 0x1, 0x4, 0x5, 0x8001, 0x3, 0x0, 0x2], [0x1000, 0xff, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x3, 0x9, 0x7fffffff, 0x8, 0x10000, 0x2, 0x5, 0x0, 0x5, 0x1, 0x8, 0x0, 0xfffff774, 0x5b, 0x7, 0x10000, 0x6a, 0x1ff, 0x7fffffff, 0x3b, 0x5, 0x7, 0xfffffffa, 0x2, 0x2, 0x0, 0x0, 0x9, 0x8, 0x7, 0x2, 0xff0, 0xf12, 0x2, 0x83, 0x1ff, 0x0, 0x3, 0x5, 0x4898, 0x7fff, 0xffffff01, 0x9, 0x4a, 0x4, 0x249, 0x2, 0x1, 0x8001, 0x4d5, 0x0, 0x5, 0x1, 0x80000000, 0x80000000, 0x9c], [0x6, 0x9, 0x0, 0x3, 0xfffffffb, 0xbf6, 0x5, 0x0, 0x800, 0x3, 0x3, 0x2, 0x93, 0x9, 0x9e, 0x401, 0xfff, 0x3, 0x3, 0xa9c2, 0x2, 0x8000, 0xfffffe00, 0x2, 0x5, 0x8, 0x2, 0x3, 0x827c, 0x2, 0x7, 0x8000, 0x2, 0x800, 0x6, 0x5, 0x5, 0x18, 0x1, 0x0, 0xfff, 0xbe9, 0xffffff00, 0xffffff27, 0x81, 0xe743, 0x0, 0xbc90, 0xf3d, 0x9, 0x8, 0x4, 0x340, 0x9, 0xffff, 0x2, 0x5d3, 0x2, 0x0, 0xffff0438, 0xba, 0x8, 0xfffffffc, 0x9]}}, 0x420}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 9 (id=5847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): ntil 2038-01-19 (0x7fffffff) [ 145.870221][T12861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.025978][T12889] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3623'. [ 146.053691][T12897] loop8: detected capacity change from 0 to 512 [ 146.061394][T12897] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3624: casefold flag without casefold feature [ 146.074374][T12897] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3624: couldn't read orphan inode 15 (err -117) [ 146.086792][T12897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.197636][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.274706][T12911] netlink: 'syz.8.3629': attribute type 6 has an invalid length. [ 146.307979][T12915] loop8: detected capacity change from 0 to 2048 [ 146.322920][T12915] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.459767][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.487323][T12938] serio: Serial port ptm0 [ 146.498517][T12941] loop5: detected capacity change from 0 to 1024 [ 146.507289][T12941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.528150][T12945] IPv6: Can't replace route, no match found [ 146.648822][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3646'. [ 146.761979][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.787354][T12984] loop5: detected capacity change from 0 to 512 [ 146.796899][T12986] loop9: detected capacity change from 0 to 128 [ 146.816702][T12986] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.829637][T12984] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3653: casefold flag without casefold feature [ 146.842465][T12986] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.871707][T12984] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3653: couldn't read orphan inode 15 (err -117) [ 146.888733][ T5639] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.899125][T12984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.041263][T13018] netlink: 'syz.9.3665': attribute type 8 has an invalid length. [ 147.049114][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3665'. [ 147.079984][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.112090][T13035] loop7: detected capacity change from 0 to 128 [ 147.160871][T13042] macsec1: entered promiscuous mode [ 147.166153][T13042] bridge0: entered promiscuous mode [ 147.171926][T13042] bridge0: port 1(macsec1) entered blocking state [ 147.178389][T13042] bridge0: port 1(macsec1) entered disabled state [ 147.185364][T13042] macsec1: entered allmulticast mode [ 147.186545][T13035] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.190676][T13042] bridge0: entered allmulticast mode [ 147.209253][T13042] macsec1: left allmulticast mode [ 147.214361][T13042] bridge0: left allmulticast mode [ 147.217553][T13035] ext4 filesystem being mounted at /637/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.233098][T13042] bridge0: left promiscuous mode [ 147.281332][ T5527] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.413542][T13076] loop7: detected capacity change from 0 to 512 [ 147.421370][T13076] EXT4-fs (loop7): orphan cleanup on readonly fs [ 147.428786][T13076] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3681: bg 0: block 248: padding at end of block bitmap is not set [ 147.443430][T13076] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3681: Failed to acquire dquot type 1 [ 147.455579][T13076] EXT4-fs (loop7): 1 truncate cleaned up [ 147.461793][T13076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.489595][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.503931][T13080] loop5: detected capacity change from 0 to 1024 [ 147.539199][T13080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.580188][T13080] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.654298][T13101] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3689'. [ 147.800738][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.091827][T13157] loop7: detected capacity change from 0 to 1024 [ 148.101862][T13157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.361911][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.577144][T13219] netem: incorrect gi model size [ 148.582217][T13219] netem: change failed [ 148.689607][T13251] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.718786][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3742'. [ 148.801251][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3748'. [ 148.950712][T13290] netlink: 'syz.7.3754': attribute type 20 has an invalid length. [ 148.958703][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3754'. [ 148.967787][T13290] netlink: 'syz.7.3754': attribute type 20 has an invalid length. [ 148.975684][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3754'. [ 149.507355][T13310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13310 comm=syz.5.3759 [ 149.520113][T13310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13310 comm=syz.5.3759 [ 149.663855][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 149.663872][ T29] audit: type=1400 audit(1759924822.443:5516): avc: denied { validate_trans } for pid=13330 comm="syz.1.3769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.706265][ T29] audit: type=1326 audit(1759924822.483:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.745288][ T29] audit: type=1326 audit(1759924822.483:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.768908][ T29] audit: type=1326 audit(1759924822.483:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.792602][ T29] audit: type=1326 audit(1759924822.483:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.816216][ T29] audit: type=1326 audit(1759924822.483:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.822945][T13338] loop5: detected capacity change from 0 to 1024 [ 149.839961][ T29] audit: type=1326 audit(1759924822.483:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.847240][T13338] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 149.869577][ T29] audit: type=1326 audit(1759924822.483:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.880458][T13338] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 149.903919][ T29] audit: type=1326 audit(1759924822.513:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.914887][T13338] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.936949][ T29] audit: type=1326 audit(1759924822.513:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.1.3770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 149.948064][T13338] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.3772: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 149.998827][T13338] EXT4-fs (loop5): no journal found [ 150.004119][T13338] EXT4-fs (loop5): can't get journal size [ 150.010953][T13338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.052592][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.425454][T13389] loop5: detected capacity change from 0 to 128 [ 150.835840][T13457] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3826'. [ 151.324841][T13463] loop7: detected capacity change from 0 to 2048 [ 151.331558][T13464] loop8: detected capacity change from 0 to 1024 [ 151.331749][T13463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.347700][T13464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.362625][T13463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.406615][T13463] lo speed is unknown, defaulting to 1000 [ 151.543112][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.625076][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.924613][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3841'. [ 152.159168][T13584] 9pnet: p9_errstr2errno: server reported unknown error 1 [ 152.244742][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3855'. [ 152.253750][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3855'. [ 152.262796][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3855'. [ 152.271849][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3855'. [ 152.280854][T13590] netlink: 'syz.7.3855': attribute type 6 has an invalid length. [ 152.600587][T13618] netlink: 'syz.1.3868': attribute type 21 has an invalid length. [ 152.608589][T13618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3868'. [ 152.617721][T13618] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 153.113487][T13651] SELinux: failed to load policy [ 153.182006][T13659] loop9: detected capacity change from 0 to 7 [ 153.196373][T13659] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.206180][T13659] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.214054][T13659] loop9: unable to read partition table [ 153.219914][T13659] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.219914][T13659] ) failed (rc=-5) [ 153.255790][T13666] loop9: detected capacity change from 0 to 164 [ 153.277881][T13666] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.287143][T13666] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.300561][T13666] Symlink component flag not implemented [ 153.306425][T13666] Symlink component flag not implemented [ 153.321854][T13666] Symlink component flag not implemented (7) [ 153.327936][T13666] Symlink component flag not implemented (116) [ 153.372723][T13677] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.511628][T13697] SELinux: Context GPL is not valid (left unmapped). [ 153.561735][T13704] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.561735][T13704] program syz.1.3903 not setting count and/or reply_len properly [ 154.080684][T13757] loop8: detected capacity change from 0 to 1024 [ 154.095672][T13757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.305686][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3925'. [ 154.332293][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.334898][T13765] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 154.352015][T13765] bond0 (unregistering): Released all slaves [ 154.384496][T13834] syzkaller1: entered promiscuous mode [ 154.389990][T13834] syzkaller1: entered allmulticast mode [ 154.478969][T13843] loop9: detected capacity change from 0 to 2048 [ 154.505428][T13843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.573157][ T5639] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.691425][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 154.697671][ T29] audit: type=1400 audit(1759924827.463:6206): avc: denied { getopt } for pid=13876 comm="syz.5.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.780351][T13883] netlink: 'syz.5.3940': attribute type 4 has an invalid length. [ 154.805914][ T29] audit: type=1400 audit(1759924827.493:6207): avc: denied { ioctl } for pid=13871 comm="syz.7.3936" path="socket:[38247]" dev="sockfs" ino=38247 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.830664][ T29] audit: type=1400 audit(1759924827.533:6208): avc: denied { read write } for pid=11133 comm="syz-executor" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.854011][ T29] audit: type=1400 audit(1759924827.533:6209): avc: denied { open } for pid=11133 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.877235][ T29] audit: type=1400 audit(1759924827.533:6210): avc: denied { ioctl } for pid=11133 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.901956][ T29] audit: type=1326 audit(1759924827.543:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 154.925434][ T29] audit: type=1326 audit(1759924827.543:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 154.948908][ T29] audit: type=1326 audit(1759924827.553:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 154.972411][ T29] audit: type=1326 audit(1759924827.553:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 154.995892][ T29] audit: type=1326 audit(1759924827.553:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 155.020804][T13885] netlink: 'syz.5.3940': attribute type 4 has an invalid length. [ 155.276436][T13867] Set syz1 is full, maxelem 65536 reached [ 155.441727][T13920] netlink: 'syz.8.3954': attribute type 4 has an invalid length. [ 155.454938][T13920] netlink: 'syz.8.3954': attribute type 4 has an invalid length. [ 156.561711][T14000] netdevsim netdevsim9: Direct firmware load for ./bus failed with error -2 [ 156.626597][T14007] SELinux: ebitmap: truncated map [ 156.633819][T14007] SELinux: failed to load policy [ 156.665772][T14017] SELinux: failed to load policy [ 156.691249][T14021] netlink: 'syz.9.3996': attribute type 1 has an invalid length. [ 156.716982][T14021] bond0: entered promiscuous mode [ 156.724959][T14021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.741493][T14021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.748997][T14021] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.759218][T14021] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 156.771800][T14021] bond0: (slave vxcan3): making interface the new active one [ 156.779196][T14021] vxcan3: entered promiscuous mode [ 156.795946][T14021] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 156.894031][ T4706] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.094385][T14107] loop7: detected capacity change from 0 to 1024 [ 157.101068][T14107] EXT4-fs: Ignoring removed bh option [ 157.109366][T14107] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 157.139504][T14107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.169724][T14107] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.200053][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.213622][T14121] loop9: detected capacity change from 0 to 512 [ 157.220350][T14121] EXT4-fs: Ignoring removed orlov option [ 157.234329][T14121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.247227][T14121] ext4 filesystem being mounted at /645/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.260184][T14121] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4020: bg 0: block 328: padding at end of block bitmap is not set [ 157.286736][ T5639] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.305293][T14136] loop9: detected capacity change from 0 to 512 [ 157.323124][T14136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.335667][T14136] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.356666][ T5639] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.744324][T14162] loop5: detected capacity change from 0 to 512 [ 157.751462][T14162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.763204][T14162] EXT4-fs (loop5): 1 truncate cleaned up [ 157.769494][T14162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.802423][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.201183][T14185] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4042'. [ 158.298211][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4056'. [ 158.332178][T14223] loop5: detected capacity change from 0 to 736 [ 158.426442][T14244] loop7: detected capacity change from 0 to 512 [ 158.452530][T14244] ext4 filesystem being mounted at /724/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.694568][T14269] netlink: 'syz.9.4072': attribute type 10 has an invalid length. [ 158.702663][T14269] veth0_vlan: entered allmulticast mode [ 158.708516][T14269] veth0_vlan: left promiscuous mode [ 158.714190][T14269] veth0_vlan: entered promiscuous mode [ 158.720846][T14269] team0: Device veth0_vlan failed to register rx_handler [ 158.823169][T14273] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 158.878662][T14281] bridge0: port 2(batadv1) entered blocking state [ 158.885167][T14281] bridge0: port 2(batadv1) entered disabled state [ 158.891872][T14281] batadv1: entered allmulticast mode [ 158.897766][T14281] batadv1: entered promiscuous mode [ 158.971456][ T3865] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.023219][T14305] pim6reg: entered allmulticast mode [ 159.031186][T14305] pim6reg: left allmulticast mode [ 159.238436][T14333] vlan2: entered allmulticast mode [ 159.243682][T14333] veth0_to_bridge: entered allmulticast mode [ 159.279711][T14343] loop9: detected capacity change from 0 to 512 [ 159.286970][T14343] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 159.305703][T14343] EXT4-fs (loop9): 1 truncate cleaned up [ 159.363085][T14349] loop7: detected capacity change from 0 to 512 [ 159.375601][T14357] loop9: detected capacity change from 0 to 512 [ 159.382543][ T4706] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 159.391776][ T4706] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 159.418160][T14349] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 159.421486][T14365] netlink: 'syz.5.4103': attribute type 27 has an invalid length. [ 159.430148][T14349] EXT4-fs (loop7): 1 truncate cleaned up [ 159.458930][T14357] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.481638][T14357] EXT4-fs (loop9): mount failed [ 159.487938][T14365] xfrm1: left promiscuous mode [ 159.492731][T14365] xfrm1: left allmulticast mode [ 159.530072][T14375] loop8: detected capacity change from 0 to 736 [ 159.569569][T14373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.605050][T14373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.696088][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 159.696103][ T29] audit: type=1326 audit(1759924832.473:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.740614][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4114'. [ 159.750981][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4113'. [ 159.760027][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4113'. [ 159.773677][T14401] vlan0: entered promiscuous mode [ 159.778710][T14401] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 159.787346][ T29] audit: type=1326 audit(1759924832.503:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.810996][ T29] audit: type=1326 audit(1759924832.503:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.834499][ T29] audit: type=1326 audit(1759924832.503:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.857996][ T29] audit: type=1326 audit(1759924832.503:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.881484][ T29] audit: type=1326 audit(1759924832.503:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.904977][ T29] audit: type=1326 audit(1759924832.503:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.928530][ T29] audit: type=1326 audit(1759924832.503:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.952063][ T29] audit: type=1326 audit(1759924832.503:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 159.975652][ T29] audit: type=1326 audit(1759924832.503:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.1.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 160.060130][T14417] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4119'. [ 160.070678][T14417] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4119'. [ 160.116475][T14429] loop7: detected capacity change from 0 to 256 [ 160.134442][T14429] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.285312][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4130'. [ 160.296496][T14445] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4130'. [ 160.477260][T14395] 9pnet_fd: p9_fd_create_tcp (14395): problem connecting socket to 127.0.0.1 [ 160.521539][T14464] loop9: detected capacity change from 0 to 736 [ 160.533724][T14467] loop8: detected capacity change from 0 to 512 [ 160.542463][T14467] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.4135: error while reading EA inode 32 err=-116 [ 160.555079][T14467] EXT4-fs (loop8): Remounting filesystem read-only [ 160.562521][T14467] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 160.572773][T14467] EXT4-fs (loop8): 1 orphan inode deleted [ 160.874611][T14512] loop7: detected capacity change from 0 to 128 [ 160.889750][T14512] FAT-fs (loop7): Directory bread(block 32) failed [ 160.897070][T14512] FAT-fs (loop7): Directory bread(block 33) failed [ 160.904386][T14512] FAT-fs (loop7): Directory bread(block 34) failed [ 160.911127][T14512] FAT-fs (loop7): Directory bread(block 35) failed [ 160.918097][T14512] FAT-fs (loop7): Directory bread(block 36) failed [ 160.925065][T14512] FAT-fs (loop7): Directory bread(block 37) failed [ 160.953681][T14512] FAT-fs (loop7): Directory bread(block 38) failed [ 160.966790][T14512] FAT-fs (loop7): Directory bread(block 39) failed [ 160.979749][T14512] FAT-fs (loop7): Directory bread(block 40) failed [ 160.995894][T14512] FAT-fs (loop7): Directory bread(block 41) failed [ 161.015801][T14518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.040016][T14518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.430193][ T3389] Process accounting resumed [ 161.621898][T14572] loop8: detected capacity change from 0 to 512 [ 161.664567][T14572] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.681885][T14572] EXT4-fs (loop8): mount failed [ 161.823546][T14612] netlink: 'syz.9.4191': attribute type 8 has an invalid length. [ 161.831302][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4191'. [ 161.952328][T14635] veth1_macvtap: left promiscuous mode [ 162.033174][T14653] syzkaller0: entered promiscuous mode [ 162.038679][T14653] syzkaller0: entered allmulticast mode [ 162.087932][ T3474] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.109054][T14674] veth1_virt_wifi: entered promiscuous mode [ 162.115136][T14674] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 162.131501][ T3474] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.140276][ T3474] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.149773][ T3474] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.331965][T14712] netlink: 'syz.9.4216': attribute type 12 has an invalid length. [ 162.416520][T14728] loop9: detected capacity change from 0 to 128 [ 162.422954][T14726] loop8: detected capacity change from 0 to 1024 [ 162.429726][T14726] EXT4-fs: inline encryption not supported [ 162.437589][T14728] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 162.477367][ T4667] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 162.493052][T14744] loop7: detected capacity change from 0 to 1024 [ 162.526267][T14744] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 162.531694][T14761] vlan2: entered allmulticast mode [ 162.546383][T14761] veth0_to_bridge: entered allmulticast mode [ 162.646516][T14779] SELinux: failed to load policy [ 162.698995][T14786] loop7: detected capacity change from 0 to 1024 [ 162.705783][T14786] EXT4-fs: inline encryption not supported [ 163.002024][T14810] vlan0: entered allmulticast mode [ 163.007442][T14810] veth0_to_bridge: entered allmulticast mode [ 163.120461][T14829] loop8: detected capacity change from 0 to 512 [ 163.147463][T14829] EXT4-fs: Ignoring removed nobh option [ 163.165504][T14829] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4251: iget: bad i_size value: 38620345925642 [ 163.192366][T14829] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4251: couldn't read orphan inode 15 (err -117) [ 163.249579][T14730] 9pnet_fd: p9_fd_create_tcp (14730): problem connecting socket to 127.0.0.1 [ 163.558667][T14861] vlan2: entered allmulticast mode [ 163.563868][T14861] veth0_to_bridge: entered allmulticast mode [ 163.699293][T14891] __nla_validate_parse: 10 callbacks suppressed [ 163.699404][T14891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4269'. [ 163.715470][T14884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4269'. [ 163.773858][T14901] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.813942][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4281'. [ 163.824058][T14904] vhci_hcd: invalid port number 11 [ 163.829186][T14904] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 163.944881][T14920] loop8: detected capacity change from 0 to 128 [ 163.951782][T14920] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.963763][T14920] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.983962][ T3474] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.002483][ T4669] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.452099][T14940] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 164.459929][T14940] SELinux: failed to load policy [ 164.483560][T14946] loop9: detected capacity change from 0 to 512 [ 164.514158][T14954] tap0: tun_chr_ioctl cmd 1074025675 [ 164.519528][T14954] tap0: persist disabled [ 164.747480][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 164.747495][ T29] audit: type=1326 audit(1759924837.523:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.782864][ T29] audit: type=1326 audit(1759924837.523:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.806519][ T29] audit: type=1326 audit(1759924837.553:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.830250][ T29] audit: type=1326 audit(1759924837.553:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.853854][ T29] audit: type=1326 audit(1759924837.553:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.877691][ T29] audit: type=1326 audit(1759924837.563:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.901190][ T29] audit: type=1326 audit(1759925605.647:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.924692][ T29] audit: type=1326 audit(1759925605.647:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.948256][ T29] audit: type=1326 audit(1759925605.647:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 164.971852][ T29] audit: type=1326 audit(1759925605.647:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15003 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 165.120995][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4330'. [ 165.951663][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.948756][T15090] loop8: detected capacity change from 0 to 512 [ 166.969655][T15090] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 167.009734][T15090] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 167.044566][T15090] EXT4-fs (loop8): 1 truncate cleaned up [ 167.066405][T15090] EXT4-fs mount: 16 callbacks suppressed [ 167.066418][T15090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.162115][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.203133][T15112] tap0: tun_chr_ioctl cmd 1074025675 [ 167.208511][T15112] tap0: persist disabled [ 167.259892][T15121] SELinux: failed to load policy [ 167.475949][T15145] bridge0: left promiscuous mode [ 167.520627][T15145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.549319][T15145] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.558847][T15145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.835191][T15183] vhci_hcd: invalid port number 96 [ 167.840337][T15183] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 168.482627][T15189] vlan2: entered allmulticast mode [ 168.487937][T15189] veth0_to_bridge: entered allmulticast mode [ 168.878112][T15247] loop5: detected capacity change from 0 to 128 [ 169.074365][T15278] syzkaller1: entered promiscuous mode [ 169.079856][T15278] syzkaller1: entered allmulticast mode [ 169.216087][T15301] netlink: 'syz.9.4432': attribute type 27 has an invalid length. [ 169.252821][T15301] veth1_virt_wifi: left promiscuous mode [ 169.258717][T15301] veth0_vlan: left allmulticast mode [ 169.265376][T15259] loop8: detected capacity change from 0 to 32768 [ 169.273641][T15301] bond0: left promiscuous mode [ 169.278455][T15301] vxcan3: left promiscuous mode [ 169.300072][T15308] 8021q: adding VLAN 0 to HW filter on device  [ 169.308107][T15308] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.315675][T15259] loop8: p1 p3 < > [ 169.355732][T15308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.373623][ T4684] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.383901][ T8870] lo speed is unknown, defaulting to 1000 [ 169.389783][ T8870] syz2: Port: 1 Link ACTIVE [ 169.389964][ T4684] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.415024][ T4684] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.443231][ T4684] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.516372][T15343] pim6reg1: entered promiscuous mode [ 169.530078][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 169.530093][ T29] audit: type=1400 audit(1759925610.572:6889): avc: denied { attach_queue } for pid=15342 comm="syz.8.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 169.586855][ T29] audit: type=1326 audit(1759925610.636:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.610524][ T29] audit: type=1326 audit(1759925610.636:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.645016][ T29] audit: type=1326 audit(1759925610.678:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.668591][ T29] audit: type=1326 audit(1759925610.678:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.692068][ T29] audit: type=1326 audit(1759925610.678:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.715728][ T29] audit: type=1326 audit(1759925610.678:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.739267][ T29] audit: type=1326 audit(1759925610.678:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.762958][ T29] audit: type=1326 audit(1759925610.678:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.764425][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.786624][ T29] audit: type=1326 audit(1759925610.678:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15360 comm="syz.9.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 169.825625][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.858773][T15371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 169.956804][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4462'. [ 169.967833][T15388] IPVS: Error connecting to the multicast addr [ 169.992012][T15390] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 169.992789][T15385] SELinux: ebitmap: truncated map [ 170.013404][T15385] SELinux: failed to load policy [ 170.083000][T15407] 9pnet_fd: Insufficient options for proto=fd [ 170.116107][T15412] loop9: detected capacity change from 0 to 1024 [ 170.134184][T15412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 170.150792][T15412] ext4 filesystem being mounted at /752/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.172496][T15412] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.4474: lblock 3 mapped to illegal pblock 3 (length 3) [ 170.193435][T15412] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 170.205849][T15412] EXT4-fs (loop9): This should not happen!! Data will be lost [ 170.205849][T15412] [ 170.221919][T15426] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.4474: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.236657][T15426] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.4474: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.251041][T15426] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.4474: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.266431][T15426] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.4474: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.281690][T15426] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.4474: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.297583][T15412] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.4474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 170.316053][T15412] EXT4-fs error (device loop9) in ext4_setattr:6042: Corrupt filesystem [ 170.350742][ T5639] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.559250][T15469] loop7: detected capacity change from 0 to 1024 [ 170.578523][T15469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.606322][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.858117][T15505] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4510'. [ 170.870396][T15505] batadv2: entered promiscuous mode [ 170.875705][T15505] batadv2: entered allmulticast mode [ 171.208016][T15519] loop9: detected capacity change from 0 to 512 [ 171.288565][T15531] loop8: detected capacity change from 0 to 128 [ 171.297719][T15531] bio_check_eod: 9205 callbacks suppressed [ 171.297734][T15531] syz.8.4518: attempt to access beyond end of device [ 171.297734][T15531] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 171.318561][T15531] syz.8.4518: attempt to access beyond end of device [ 171.318561][T15531] loop8: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 171.332096][T15531] Buffer I/O error on dev loop8, logical block 70, lost async page write [ 171.342406][T15531] syz.8.4518: attempt to access beyond end of device [ 171.342406][T15531] loop8: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 171.355913][T15531] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 171.364422][T15531] syz.8.4518: attempt to access beyond end of device [ 171.364422][T15531] loop8: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 171.377856][T15531] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 171.387007][T15531] syz.8.4518: attempt to access beyond end of device [ 171.387007][T15531] loop8: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 171.401356][T15533] syz.8.4518: attempt to access beyond end of device [ 171.401356][T15533] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 171.414769][T15533] Buffer I/O error on dev loop8, logical block 69, lost async page write [ 171.414915][T15524] loop9: detected capacity change from 0 to 32768 [ 171.466143][T15524] loop9: p1 p3 < > [ 171.661386][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.669316][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.677068][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.684862][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.692610][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.700370][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.708132][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.715868][T15563] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.825847][T15582] netlink: 'syz.7.4533': attribute type 27 has an invalid length. [ 171.843307][T15579] loop8: detected capacity change from 0 to 8192 [ 171.850628][T15584] sd 0:0:1:0: device reset [ 171.852661][T15579] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4532'. [ 172.037472][T15582] sit0: left promiscuous mode [ 172.042242][T15582] sit0: left allmulticast mode [ 172.067199][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.311225][T15582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.385500][ T4652] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.419583][ T4652] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.428848][ T4652] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.437903][ T4652] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.448383][T15615] loop5: detected capacity change from 0 to 1024 [ 172.455362][T15615] EXT4-fs: Ignoring removed nobh option [ 172.461138][T15615] EXT4-fs: inline encryption not supported [ 172.483000][T15615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.526184][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.543128][T15625] loop7: detected capacity change from 0 to 256 [ 172.573706][T15625] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 172.581637][T15625] FAT-fs (loop7): Filesystem has been set read-only [ 172.588747][T15625] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 172.617219][T15625] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 172.625518][T15625] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 172.634801][T15625] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 172.654572][T15625] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152) [ 172.660210][T15642] loop9: detected capacity change from 0 to 2048 [ 172.671240][T15642] EXT4-fs: Ignoring removed bh option [ 172.695753][T15647] loop8: detected capacity change from 0 to 512 [ 172.711956][T15647] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 172.727701][T15642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.739109][T15647] EXT4-fs (loop8): 1 truncate cleaned up [ 172.745820][T15647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.785049][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.841352][T15670] netlink: 'syz.8.4558': attribute type 1 has an invalid length. [ 172.856092][T15670] bond1: entered promiscuous mode [ 172.869677][T15670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.897361][T15670] bond1: (slave bridge1): making interface the new active one [ 172.904907][T15670] bridge1: entered promiscuous mode [ 172.911828][T15670] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 172.942700][T15713] tipc: Started in network mode [ 172.947670][T15713] tipc: Node identity ac141413, cluster identity 4711 [ 172.970055][T15713] tipc: New replicast peer: 10.1.1.2 [ 172.975509][T15713] tipc: Enabled bearer , priority 10 [ 173.036227][T15721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15721 comm=syz.5.4564 [ 173.049065][T15721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15721 comm=syz.5.4564 [ 173.142160][ T4655] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.157347][ T4655] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 173.169842][ T4655] EXT4-fs (loop9): This should not happen!! Data will be lost [ 173.169842][ T4655] [ 173.179515][ T4655] EXT4-fs (loop9): Total free blocks count 0 [ 173.185512][ T4655] EXT4-fs (loop9): Free/Dirty block details [ 173.191405][ T4655] EXT4-fs (loop9): free_blocks=2415919104 [ 173.197108][ T4655] EXT4-fs (loop9): dirty_blocks=8192 [ 173.202403][ T4655] EXT4-fs (loop9): Block reservation details [ 173.208400][ T4655] EXT4-fs (loop9): i_reserved_data_blocks=512 [ 173.224310][ T4684] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 173.312700][T15737] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 173.388570][T15750] net_ratelimit: 46 callbacks suppressed [ 173.388581][T15750] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 173.464706][T15757] loop9: detected capacity change from 0 to 256 [ 173.497487][T15757] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 173.505406][T15757] FAT-fs (loop9): Filesystem has been set read-only [ 173.512204][T15757] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 173.520237][T15757] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 173.528162][T15757] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 173.536308][T15757] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 173.544257][T15757] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 173.588718][T15765] sd 0:0:1:0: device reset [ 173.661697][T15775] loop9: detected capacity change from 0 to 512 [ 173.679843][T15775] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.696095][T15777] loop7: detected capacity change from 0 to 1024 [ 173.712592][T15777] EXT4-fs: Ignoring removed orlov option [ 173.738374][T15777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.768054][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4583'. [ 173.792315][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.830530][T15794] pim6reg1: entered promiscuous mode [ 173.955506][T15821] loop5: detected capacity change from 0 to 512 [ 173.962771][T15821] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 173.973404][T15821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 173.984630][T15826] loop7: detected capacity change from 0 to 128 [ 173.989773][T15822] wg2: entered promiscuous mode [ 173.995795][T15822] wg2: entered allmulticast mode [ 174.003065][T15821] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.009409][T15821] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4598: bad orphan inode 267 [ 174.028409][T15821] EXT4-fs (loop5): Remounting filesystem read-only [ 174.035039][ T3389] tipc: Node number set to 2886997011 [ 174.041560][T15821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 174.055936][T15826] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.069186][T15826] ext4 filesystem being mounted at /838/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.093683][ T5527] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.106216][T15839] netlink: 'syz.1.4602': attribute type 1 has an invalid length. [ 174.113990][T15839] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4602'. [ 174.144392][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 174.206661][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4610'. [ 174.217042][T15858] pim6reg1: entered promiscuous mode [ 174.220779][T15864] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4610'. [ 174.275183][T15874] loop7: detected capacity change from 0 to 512 [ 174.289584][T15874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.302501][T15874] ext4 filesystem being mounted at /844/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.313154][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 174.313166][ T29] audit: type=1400 audit(1759925615.613:7008): avc: denied { relabelfrom } for pid=15878 comm="syz.5.4615" name="NETLINK" dev="sockfs" ino=44140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 174.330086][T15881] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4616'. [ 174.343571][ T29] audit: type=1400 audit(1759925615.613:7009): avc: denied { relabelto } for pid=15878 comm="syz.5.4615" name="NETLINK" dev="sockfs" ino=44140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 174.377859][ T29] audit: type=1400 audit(1759925615.677:7010): avc: denied { write } for pid=15873 comm="syz.7.4614" path=2F3834342F66696C65312F01 dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.401419][ T29] audit: type=1400 audit(1759925615.677:7011): avc: denied { create } for pid=15873 comm="syz.7.4614" name=0C scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.427098][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.484565][ T29] audit: type=1326 audit(1759925615.782:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.5.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 174.508191][ T29] audit: type=1326 audit(1759925615.782:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.5.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 174.531745][ T29] audit: type=1326 audit(1759925615.782:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.5.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 174.555301][ T29] audit: type=1326 audit(1759925615.782:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.5.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4673eeec9 code=0x7ffc0000 [ 174.659497][ T29] audit: type=1326 audit(1759925615.994:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b352eeec9 code=0x7ffc0000 [ 174.683207][ T29] audit: type=1326 audit(1759925615.994:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.7.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b352eeec9 code=0x7ffc0000 [ 174.723000][T15906] loop5: detected capacity change from 0 to 512 [ 174.731799][T15906] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.763245][T15911] netlink: 'syz.9.4629': attribute type 1 has an invalid length. [ 174.774564][T15913] netlink: 'syz.1.4630': attribute type 13 has an invalid length. [ 174.776459][T15909] loop7: detected capacity change from 0 to 4096 [ 174.789519][T15909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.796171][T15913] gretap0: refused to change device tx_queue_len [ 174.803599][T15913] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.817002][T15909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.858519][T15911] bond1: entered promiscuous mode [ 174.867040][T15911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.879447][T15958] program syz.5.4631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.894629][T15916] bond1: (slave bridge1): making interface the new active one [ 174.902173][T15916] bridge1: entered promiscuous mode [ 174.910166][T15916] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 174.947275][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.073870][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4642'. [ 175.088707][T15985] loop5: detected capacity change from 0 to 512 [ 175.120890][T15985] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.143463][T15985] EXT4-fs (loop5): mount failed [ 175.173266][T15995] loop9: detected capacity change from 0 to 164 [ 175.201787][T15995] syz.9.4648: attempt to access beyond end of device [ 175.201787][T15995] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 175.227388][T15995] syz.9.4648: attempt to access beyond end of device [ 175.227388][T15995] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.387333][T16022] loop7: detected capacity change from 0 to 512 [ 175.446104][ T5609] hid_parser_main: 8 callbacks suppressed [ 175.446129][ T5609] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 175.459363][ T5609] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 175.467697][ T5609] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.03 Device [syz0] on syz0 [ 175.489270][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4661'. [ 175.691371][T16073] loop7: detected capacity change from 0 to 1024 [ 175.698360][T16073] EXT4-fs: Ignoring removed nobh option [ 175.703941][T16073] EXT4-fs: Ignoring removed bh option [ 175.709955][T16073] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 175.735431][T16073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.759911][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.817435][T16091] netlink: 'syz.5.4678': attribute type 3 has an invalid length. [ 176.138938][T16121] loop5: detected capacity change from 0 to 4096 [ 176.147611][T16121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.171336][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.243847][T16141] pimreg: entered allmulticast mode [ 176.251680][T16141] pimreg: left allmulticast mode [ 176.331920][T16159] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4697'. [ 176.361700][ T4702] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8 [ 176.379548][T16174] batadv_slave_1: entered promiscuous mode [ 176.393673][T16173] batadv_slave_1: left promiscuous mode [ 176.452132][T16180] hub 6-0:1.0: USB hub found [ 176.457024][T16180] hub 6-0:1.0: 8 ports detected [ 176.588681][T16212] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4712'. [ 176.752569][T16238] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4723'. [ 176.763575][T16238] IPVS: Error connecting to the multicast addr [ 176.855596][T16255] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4732'. [ 176.870659][T16265] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4735'. [ 176.875848][T16257] syzkaller1: entered promiscuous mode [ 176.885363][T16257] syzkaller1: entered allmulticast mode [ 176.917322][T16271] netlink: 'syz.7.4737': attribute type 1 has an invalid length. [ 176.965440][T16271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.013227][T16321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.039155][T16321] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 177.056326][T16321] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 177.071393][T16337] loop8: detected capacity change from 0 to 512 [ 177.099198][T16337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.112088][T16337] ext4 filesystem being mounted at /788/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.142111][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.218983][T16370] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4753'. [ 177.643900][T16468] program syz.9.4788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.690728][T16471] hub 6-0:1.0: USB hub found [ 177.696926][T16471] hub 6-0:1.0: 8 ports detected [ 177.842596][T16497] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4799'. [ 178.053612][T16525] loop9: detected capacity change from 0 to 128 [ 178.061916][T16525] syz.9.4809: attempt to access beyond end of device [ 178.061916][T16525] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 178.253189][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4823'. [ 178.384078][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.402168][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.532500][T16611] syzkaller1: entered promiscuous mode [ 178.538108][T16611] syzkaller1: entered allmulticast mode [ 178.700309][ T4652] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 178.806627][T16641] loop7: detected capacity change from 0 to 128 [ 178.856326][T16650] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.900579][T16654] netlink: 'syz.1.4852': attribute type 1 has an invalid length. [ 178.914827][T16654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.933019][T16654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.940053][T16654] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.951501][T16654] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 179.071278][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 179.071295][ T29] audit: type=1326 audit(1759925620.652:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.101014][ T29] audit: type=1326 audit(1759925620.652:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.125105][ T29] audit: type=1326 audit(1759925620.652:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.148683][ T29] audit: type=1326 audit(1759925620.652:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.172274][ T29] audit: type=1326 audit(1759925620.663:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.195895][ T29] audit: type=1326 audit(1759925620.663:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.219626][ T29] audit: type=1326 audit(1759925620.663:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.243251][ T29] audit: type=1326 audit(1759925620.663:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.266869][ T29] audit: type=1326 audit(1759925620.715:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.278533][T16705] SELinux: ebitmap: truncated map [ 179.290563][ T29] audit: type=1326 audit(1759925620.715:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.1.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 179.308490][T16705] SELinux: failed to load policy [ 179.575888][T16740] SELinux: ebitmap: truncated map [ 179.583270][T16740] SELinux: failed to load policy [ 179.632045][T16757] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 179.756239][T16784] 9p: Unknown access argument : -22 [ 179.857490][T16795] SELinux: failed to load policy [ 179.889792][T16804] loop9: detected capacity change from 0 to 1024 [ 179.904239][T16804] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.915391][T16804] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.944191][T16804] JBD2: no valid journal superblock found [ 179.950079][T16804] EXT4-fs (loop9): Could not load journal inode [ 179.957738][T16820] netlink: 'syz.5.4898': attribute type 1 has an invalid length. [ 179.967080][T16804] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 179.989935][T16824] netlink: 'syz.7.4899': attribute type 3 has an invalid length. [ 180.022875][T16820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.090778][T16833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.092096][T16872] 9pnet: p9_errstr2errno: server reported unknown error 9YTPX: [ 180.107233][T16833] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.118639][T16833] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 180.541657][T16930] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 180.541657][T16930] program syz.7.4928 not setting count and/or reply_len properly [ 180.659760][T16956] netlink: 'syz.9.4937': attribute type 1 has an invalid length. [ 180.681006][T16960] __nla_validate_parse: 5 callbacks suppressed [ 180.681020][T16960] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4940'. [ 180.699637][T16956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.720453][T16960] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4940'. [ 180.743408][T16956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.750752][T16956] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 180.763111][T16956] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 180.825477][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 180.834589][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 180.954556][T17031] syzkaller1: entered promiscuous mode [ 180.960135][T17031] syzkaller1: entered allmulticast mode [ 181.070665][T17047] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4966'. [ 181.114889][T17051] netlink: 'syz.8.4957': attribute type 1 has an invalid length. [ 181.137835][T17051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.210987][T17051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.228181][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'. [ 181.260168][T17051] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 181.278340][T17051] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 181.305929][T17103] macvtap1: entered allmulticast mode [ 181.311330][T17103] bridge0: entered allmulticast mode [ 181.323721][T17103] bridge0: port 3(macvtap1) entered blocking state [ 181.330319][T17103] bridge0: port 3(macvtap1) entered disabled state [ 181.342048][T17103] bridge0: left allmulticast mode [ 181.346395][T17097] SELinux: failed to load policy [ 181.407933][T17126] Invalid ELF header magic: != ELF [ 181.524714][T17151] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 181.687124][T17174] netlink: 'syz.8.4994': attribute type 27 has an invalid length. [ 181.740912][T17174] syzkaller0: left promiscuous mode [ 181.746148][T17174] syzkaller0: left allmulticast mode [ 181.759575][T17174] macvtap1: left allmulticast mode [ 181.782807][T17174] bond1: left promiscuous mode [ 181.787700][T17174] bridge1: left promiscuous mode [ 181.944849][T17198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.971619][T17205] lo speed is unknown, defaulting to 1000 [ 181.989721][T17198] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 182.048489][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5009'. [ 182.116875][T17240] SELinux: ebitmap: truncated map [ 182.125158][T17240] SELinux: failed to load policy [ 182.352605][T17281] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 182.352605][T17281] program syz.5.5027 not setting count and/or reply_len properly [ 182.397415][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5029'. [ 182.447657][T17307] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5034'. [ 182.650197][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5052'. [ 182.763176][T17375] wireguard0: entered promiscuous mode [ 182.768728][T17375] wireguard0: entered allmulticast mode [ 183.462871][T17410] lo speed is unknown, defaulting to 1000 [ 183.478406][T17417] loop8: detected capacity change from 0 to 1024 [ 183.519448][T17417] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.554246][T17417] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.5081: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.593767][T17417] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5081: Failed to acquire dquot type 0 [ 183.617522][T17417] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.5081: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.641773][T17417] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.5081: Invalid inode bitmap blk 0 in block_group 0 [ 183.660647][ T4655] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.698767][T17417] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 183.710896][ T4655] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:22: Failed to release dquot type 0 [ 183.722060][T17417] EXT4-fs (loop8): 1 orphan inode deleted [ 183.742564][T17417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.799628][T17417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.817392][T17466] loop5: detected capacity change from 0 to 8192 [ 183.851222][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 183.851239][ T29] audit: type=1400 audit(1759925625.699:7491): avc: denied { name_bind } for pid=17477 comm="syz.9.5087" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 183.890916][ T29] audit: type=1400 audit(1759925625.730:7492): avc: denied { bind } for pid=17474 comm="syz.7.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.942039][ T29] audit: type=1400 audit(1759925625.794:7493): avc: denied { prog_load } for pid=17488 comm="syz.8.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.961221][ T29] audit: type=1400 audit(1759925625.794:7494): avc: denied { bpf } for pid=17488 comm="syz.8.5091" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.979512][T17492] 9pnet: p9_errstr2errno: server reported unknown error  [ 183.989204][ T29] audit: type=1400 audit(1759925625.794:7495): avc: denied { perfmon } for pid=17488 comm="syz.8.5091" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.010242][ T29] audit: type=1400 audit(1759925625.794:7496): avc: denied { prog_run } for pid=17488 comm="syz.8.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.029308][ T29] audit: type=1400 audit(1759925625.804:7497): avc: denied { read write } for pid=5527 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.053610][ T29] audit: type=1400 audit(1759925625.804:7498): avc: denied { open } for pid=5527 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.077735][ T29] audit: type=1400 audit(1759925625.804:7499): avc: denied { ioctl } for pid=5527 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.103364][ T29] audit: type=1400 audit(1759925625.825:7500): avc: denied { open } for pid=17491 comm="syz.7.5092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 184.236120][T17513] loop7: detected capacity change from 0 to 1024 [ 184.249529][T17513] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.268736][T17513] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.5099: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.287721][T17525] bridge0: entered promiscuous mode [ 184.292976][T17525] macsec1: entered promiscuous mode [ 184.305367][T17525] bridge0: port 4(macsec1) entered blocking state [ 184.312056][T17525] bridge0: port 4(macsec1) entered disabled state [ 184.318761][T17513] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5099: Failed to acquire dquot type 0 [ 184.333159][T17513] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.5099: Freeing blocks not in datazone - block = 0, count = 4096 [ 184.355409][T17525] macsec1: entered allmulticast mode [ 184.360802][T17525] bridge0: entered allmulticast mode [ 184.375829][T17513] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.5099: Invalid inode bitmap blk 0 in block_group 0 [ 184.389046][T17513] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 184.389134][T17525] macsec1: left allmulticast mode [ 184.397664][ T4684] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.402670][T17525] bridge0: left allmulticast mode [ 184.417096][T17513] EXT4-fs (loop7): 1 orphan inode deleted [ 184.422460][ T4684] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 0 [ 184.439746][T17525] bridge0: left promiscuous mode [ 184.448981][T17513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.471508][T17513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.929630][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.937130][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.944586][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.952063][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.959510][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.966907][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.974343][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.981804][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.989240][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.996689][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.039091][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 185.083616][T17601] loop8: detected capacity change from 0 to 1024 [ 185.113075][T17601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.140735][T17601] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.5123: Allocating blocks 385-513 which overlap fs metadata [ 185.157412][T17601] EXT4-fs (loop8): pa ffff888106e0de00: logic 16, phys. 129, len 24 [ 185.165450][T17601] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 185.213661][T17601] syz.8.5123 (17601) used greatest stack depth: 9152 bytes left [ 185.229855][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.423495][T17645] loop9: detected capacity change from 0 to 164 [ 185.495758][T17663] SELinux: failed to load policy [ 185.518049][T17665] __nla_validate_parse: 6 callbacks suppressed [ 185.518067][T17665] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5148'. [ 185.611725][T17679] loop8: detected capacity change from 0 to 1024 [ 185.624627][T17679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.637260][T17679] ext4 filesystem being mounted at /891/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.651140][T17679] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.5155: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.664673][T17679] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 185.676994][T17679] EXT4-fs (loop8): This should not happen!! Data will be lost [ 185.676994][T17679] [ 185.697662][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.787029][T17713] netlink: 'syz.8.5164': attribute type 3 has an invalid length. [ 185.889962][T17730] random: crng reseeded on system resumption [ 185.900206][T17732] loop8: detected capacity change from 0 to 256 [ 186.212873][T17776] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 186.435418][T17804] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5200'. [ 186.457892][T17807] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5198'. [ 186.469532][T17809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5201'. [ 186.478849][T17798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5198'. [ 186.488469][T17809] IPVS: Error connecting to the multicast addr [ 187.026325][T17827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5209'. [ 187.035349][T17827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5209'. [ 187.101787][T17836] No such timeout policy "syz0" [ 187.123345][T17838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5213'. [ 187.353061][T17869] ALSA: seq fatal error: cannot create timer (-22) [ 187.387696][T17873] netlink: 'syz.5.5227': attribute type 1 has an invalid length. [ 187.395491][T17873] netlink: 'syz.5.5227': attribute type 6 has an invalid length. [ 187.403241][T17873] netlink: 'syz.5.5227': attribute type 3 has an invalid length. [ 187.410968][T17873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5227'. [ 187.722298][T17927] loop7: detected capacity change from 0 to 1024 [ 187.743079][T17927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.787166][T17927] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.5246: Allocating blocks 385-513 which overlap fs metadata [ 187.803521][T17927] EXT4-fs (loop7): pa ffff888106e4c2a0: logic 16, phys. 129, len 24 [ 187.809555][T17942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.811623][T17927] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 187.859139][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.894547][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5254'. [ 187.942669][T17964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.993402][T17964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.041420][T17964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.078375][T17964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.142862][T17979] loop9: detected capacity change from 0 to 1024 [ 188.150206][T17979] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.182660][T17979] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.5258: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.186626][ T4652] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.207633][T17979] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.5258: Failed to acquire dquot type 0 [ 188.232000][ T4652] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.240356][ T4652] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.247162][T17979] EXT4-fs error (device loop9): ext4_free_blocks:6706: comm syz.9.5258: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.248922][ T4652] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.289183][T17979] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.5258: Invalid inode bitmap blk 0 in block_group 0 [ 188.303178][ T4652] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.317955][T18010] loop7: detected capacity change from 0 to 512 [ 188.324932][T17979] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 188.347244][ T4652] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:19: Failed to release dquot type 0 [ 188.360655][T18010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.375974][T17979] EXT4-fs (loop9): 1 orphan inode deleted [ 188.383990][T17979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.396918][T18010] ext4 filesystem being mounted at /968/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.437914][T17979] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.569642][T18026] netlink: 'syz.9.5270': attribute type 18 has an invalid length. [ 188.593951][T18026] netlink: 'syz.9.5270': attribute type 18 has an invalid length. [ 188.660029][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 188.660045][ T29] audit: type=1326 audit(1759925630.775:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.767188][ T29] audit: type=1326 audit(1759925630.775:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.790791][ T29] audit: type=1326 audit(1759925630.775:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.814211][ T29] audit: type=1326 audit(1759925630.786:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.837756][ T29] audit: type=1326 audit(1759925630.786:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.857997][T18047] loop8: detected capacity change from 0 to 1024 [ 188.861597][ T29] audit: type=1326 audit(1759925630.786:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18037 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1393bf1785 code=0x7ffc0000 [ 188.872805][T18047] EXT4-fs: Ignoring removed orlov option [ 188.891520][ T29] audit: type=1326 audit(1759925630.786:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.891550][ T29] audit: type=1326 audit(1759925630.786:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.944222][ T29] audit: type=1326 audit(1759925630.786:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.1.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 188.967719][ T29] audit: type=1400 audit(1759925630.807:7808): avc: denied { setopt } for pid=18031 comm="syz.9.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.001758][T18047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.033100][T18047] ext4 filesystem being mounted at /911/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.134540][T18047] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.5280: lblock 0 mapped to illegal pblock 0 (length 6) [ 189.206101][T18047] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 3: comm syz.8.5280: lblock 3 mapped to illegal pblock 3 (length 1) [ 189.235748][T18047] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 189.248184][T18047] EXT4-fs (loop8): This should not happen!! Data will be lost [ 189.248184][T18047] [ 189.280801][T18047] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 189.326831][T18047] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 189.339141][T18047] EXT4-fs (loop8): This should not happen!! Data will be lost [ 189.339141][T18047] [ 189.348821][T18047] EXT4-fs (loop8): Total free blocks count 0 [ 189.354833][T18047] EXT4-fs (loop8): Free/Dirty block details [ 189.360775][T18047] EXT4-fs (loop8): free_blocks=4293918720 [ 189.366573][T18047] EXT4-fs (loop8): dirty_blocks=0 [ 189.371653][T18047] EXT4-fs (loop8): Block reservation details [ 189.394265][T18047] syz.8.5280 (18047) used greatest stack depth: 9136 bytes left [ 189.579523][T18010] syz.7.5265 (18010) used greatest stack depth: 6120 bytes left [ 189.595531][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.797098][T18133] loop8: detected capacity change from 0 to 512 [ 189.819529][T18133] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 189.847759][T18145] loop5: detected capacity change from 0 to 128 [ 189.856982][T18147] loop9: detected capacity change from 0 to 512 [ 189.863577][T18133] EXT4-fs (loop8): 1 truncate cleaned up [ 189.869972][T18133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.882250][T18147] EXT4-fs: Ignoring removed bh option [ 189.888419][T18145] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 189.897753][T18147] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 189.947728][T18147] EXT4-fs (loop9): 1 truncate cleaned up [ 189.960106][T18145] syz.5.5319: attempt to access beyond end of device [ 189.960106][T18145] loop5: rw=0, sector=97, nr_sectors = 944 limit=128 [ 189.973807][T18147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.990765][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.019256][ T4655] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 190.041322][ T5639] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.213036][T18187] loop5: detected capacity change from 0 to 512 [ 190.231918][T18187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.258314][T18187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.284646][T18187] ext4 filesystem being mounted at /866/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.366740][T18199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.374807][T18199] bond0: (slave bond2): Enslaving as an active interface with an up link [ 190.386773][ T5522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.389585][T18199] __nla_validate_parse: 7 callbacks suppressed [ 190.389601][T18199] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5336'. [ 190.417318][T18199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.428820][T18199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.450490][T18199] bond0 (unregistering): (slave bond2): Releasing backup interface [ 190.485748][T18199] bond0 (unregistering): Released all slaves [ 190.496447][T18239] loop8: detected capacity change from 0 to 164 [ 190.655825][T18288] loop7: detected capacity change from 0 to 512 [ 190.667493][T18288] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.704638][T18303] sd 0:0:1:0: device reset [ 190.709173][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.719128][T18304] FAT-fs (loop7): Filesystem has been set read-only [ 190.739847][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.750238][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.762486][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.774041][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.784870][T18288] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.795030][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.805709][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.818256][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.829389][T18304] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 191.051274][T18325] syzkaller0: entered promiscuous mode [ 191.056806][T18325] syzkaller0: entered allmulticast mode [ 191.355160][T18370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5373'. [ 191.364307][T18370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5373'. [ 191.381928][T18370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5373'. [ 191.401321][T18378] tmpfs: Unsupported parameter 'huge' [ 191.451535][T18383] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 191.462224][T18385] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5381'. [ 191.638162][T18404] loop9: detected capacity change from 0 to 1024 [ 191.653544][T18407] netlink: 'syz.8.5390': attribute type 7 has an invalid length. [ 191.664944][ T4688] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.674062][ T4688] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.682850][T18407] netlink: 'syz.8.5390': attribute type 7 has an invalid length. [ 191.691266][T18404] EXT4-fs: Ignoring removed orlov option [ 191.697462][ T4688] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.716415][ T4688] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.726718][T18404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.741170][T18404] ext4 filesystem being mounted at /941/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.755051][T18404] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.5388: lblock 0 mapped to illegal pblock 0 (length 6) [ 191.769172][T18404] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.5388: lblock 3 mapped to illegal pblock 3 (length 1) [ 191.785602][T18404] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 191.797930][T18404] EXT4-fs (loop9): This should not happen!! Data will be lost [ 191.797930][T18404] [ 191.837530][T18416] lo speed is unknown, defaulting to 1000 [ 191.865517][T18424] netlink: 'syz.8.5394': attribute type 1 has an invalid length. [ 191.873322][T18424] netlink: 'syz.8.5394': attribute type 4 has an invalid length. [ 191.881200][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5394'. [ 191.892322][T18419] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 191.944238][T18419] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.945335][T18446] netlink: 'syz.5.5395': attribute type 3 has an invalid length. [ 191.956510][T18419] EXT4-fs (loop9): This should not happen!! Data will be lost [ 191.956510][T18419] [ 191.956530][T18419] EXT4-fs (loop9): Total free blocks count 0 [ 191.964298][T18446] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5395'. [ 191.989267][T18419] EXT4-fs (loop9): Free/Dirty block details [ 191.995204][T18419] EXT4-fs (loop9): free_blocks=4293918720 [ 192.001065][T18419] EXT4-fs (loop9): dirty_blocks=0 [ 192.006111][T18419] EXT4-fs (loop9): Block reservation details [ 192.034940][T18448] loop8: detected capacity change from 0 to 2048 [ 192.064361][T18448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.080552][T18448] ext4 filesystem being mounted at /943/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.143519][T18464] EXT4-fs (loop8): shut down requested (2) [ 192.190362][T18466] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 192.218719][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.452654][T18516] loop7: detected capacity change from 0 to 512 [ 192.505516][T18516] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.555768][T18516] EXT4-fs (loop7): mount failed [ 192.663931][T18542] netlink: 'syz.5.5428': attribute type 3 has an invalid length. [ 192.740410][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5433'. [ 192.764413][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5433'. [ 192.854817][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5437'. [ 192.879972][T18558] loop5: detected capacity change from 0 to 8192 [ 192.901487][ T2313] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.920008][ T2313] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.928883][ T2313] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.981180][ T2313] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.078899][T18571] lo speed is unknown, defaulting to 1000 [ 193.193078][T18583] loop9: detected capacity change from 0 to 2048 [ 193.311982][T18611] vhci_hcd: invalid port number 255 [ 193.317228][T18611] vhci_hcd: default hub control req: 8012 v0303 i00ff l0 [ 193.403489][T18606] lo speed is unknown, defaulting to 1000 [ 193.415569][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 193.415582][ T29] audit: type=1400 audit(1759925635.796:8011): avc: denied { mount } for pid=18631 comm="syz.8.5449" name="/" dev="rpc_pipefs" ino=52106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 193.518701][T18606] chnl_net:caif_netlink_parms(): no params data found [ 193.558025][T18606] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.565190][T18606] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.572317][T18606] bridge_slave_0: entered allmulticast mode [ 193.578810][T18606] bridge_slave_0: entered promiscuous mode [ 193.585493][T18606] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.592596][T18606] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.599788][T18606] bridge_slave_1: entered allmulticast mode [ 193.606411][T18606] bridge_slave_1: entered promiscuous mode [ 193.626850][T18606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.637573][T18606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.657761][T18606] team0: Port device team_slave_0 added [ 193.664589][T18606] team0: Port device team_slave_1 added [ 193.681351][T18606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.688317][T18606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.714240][T18606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.725721][T18606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.732687][T18606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.758616][T18606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.790905][ T29] audit: type=1326 audit(1759925636.187:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.814468][ T29] audit: type=1326 audit(1759925636.187:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.843285][T18875] loop7: detected capacity change from 0 to 1024 [ 193.854887][T18875] EXT4-fs: Ignoring removed orlov option [ 193.862690][ T29] audit: type=1326 audit(1759925636.208:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.886225][ T29] audit: type=1326 audit(1759925636.208:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.890680][T18875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.909742][ T29] audit: type=1326 audit(1759925636.208:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.909787][ T29] audit: type=1326 audit(1759925636.208:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.909876][ T29] audit: type=1326 audit(1759925636.208:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.909907][ T29] audit: type=1326 audit(1759925636.208:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.910005][ T29] audit: type=1326 audit(1759925636.208:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18867 comm="syz.1.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1393bbeec9 code=0x7ffc0000 [ 193.914167][T18606] hsr_slave_0: entered promiscuous mode [ 193.990934][T18875] ext4 filesystem being mounted at /997/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.996686][T18606] hsr_slave_1: entered promiscuous mode [ 194.031808][T18875] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.5453: lblock 0 mapped to illegal pblock 0 (length 6) [ 194.040540][T18606] debugfs: 'hsr0' already exists in 'hsr' [ 194.086529][T18606] Cannot create hsr debugfs directory [ 194.101375][T18875] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.5453: lblock 3 mapped to illegal pblock 3 (length 1) [ 194.125245][ T4688] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.138712][T18875] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 194.151243][T18875] EXT4-fs (loop7): This should not happen!! Data will be lost [ 194.151243][T18875] [ 194.165484][T18909] loop9: detected capacity change from 0 to 256 [ 194.176219][ T4688] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.186849][T18918] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 194.239679][T18918] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.251982][T18918] EXT4-fs (loop7): This should not happen!! Data will be lost [ 194.251982][T18918] [ 194.261778][T18918] EXT4-fs (loop7): Total free blocks count 0 [ 194.267801][T18918] EXT4-fs (loop7): Free/Dirty block details [ 194.273708][T18918] EXT4-fs (loop7): free_blocks=4293918720 [ 194.279478][T18918] EXT4-fs (loop7): dirty_blocks=0 [ 194.284518][T18918] EXT4-fs (loop7): Block reservation details [ 194.294854][ T4688] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.347773][ T4688] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.562113][ T4688] bond0 (unregistering): Released all slaves [ 194.570110][ T4688] bond1 (unregistering): Released all slaves [ 194.578815][ T4688] bond2 (unregistering): Released all slaves [ 194.586748][ T4688] bond3 (unregistering): Released all slaves [ 194.647675][ T4688] tipc: Disabling bearer [ 194.652925][ T4688] tipc: Left network mode [ 194.674264][ T4688] hsr_slave_0: left promiscuous mode [ 194.679911][ T4688] hsr_slave_1: left promiscuous mode [ 194.908128][T18606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.917892][T18606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.926777][T18606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.935653][T18606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.969523][T18606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.981972][T18606] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.991171][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.998218][ T4692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.009259][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.016379][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.072049][T18606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.164976][T18606] veth0_vlan: entered promiscuous mode [ 195.172531][T18606] veth1_vlan: entered promiscuous mode [ 195.186261][T18606] veth0_macvtap: entered promiscuous mode [ 195.193180][T18606] veth1_macvtap: entered promiscuous mode [ 195.202963][T18606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.213272][T18606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.223984][ T4688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.232839][ T4688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.244829][ T4688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.253798][ T4688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.300258][T19056] __nla_validate_parse: 1 callbacks suppressed [ 195.300273][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5475'. [ 195.315391][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'. [ 195.317824][T19050] loop8: detected capacity change from 0 to 512 [ 195.324389][T19056] netlink: 'syz.1.5475': attribute type 15 has an invalid length. [ 195.344645][ T4713] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 195.360813][ T4713] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 195.369479][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5475'. [ 195.378432][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'. [ 195.387518][T19056] netlink: 'syz.1.5475': attribute type 15 has an invalid length. [ 195.390462][ T4713] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 195.403716][ T4713] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 195.404841][T19050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.424805][T19050] ext4 filesystem being mounted at /951/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.460379][ T5572] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.521508][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5467'. [ 195.591170][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5481'. [ 195.617060][T19097] IPv6: sit1: Disabled Multicast RS [ 195.630091][T19097] sit1: entered allmulticast mode [ 195.661712][T19101] can0: slcan on ttyS3. [ 195.725875][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 195.726491][T19100] can0 (unregistered): slcan off ttyS3. [ 195.759099][ T3377] lo speed is unknown, defaulting to 1000 [ 195.764917][ T3377] syz2: Port: 1 Link DOWN [ 195.959578][T19143] lo speed is unknown, defaulting to 1000 [ 195.966655][T19127] loop8: detected capacity change from 0 to 32768 [ 196.011389][T19127] loop8: p1 p2 p3 < p5 p6 > [ 196.025815][T19127] loop8: p2 size 16775168 extends beyond EOD, truncated [ 196.035847][T19127] loop8: p5 start 4294970168 is beyond EOD, truncated [ 196.169577][T19192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19192 comm=syz.8.5502 [ 196.182260][T19192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19192 comm=syz.8.5502 [ 196.219000][T19202] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 196.233442][T19204] netlink: 'syz.4.5506': attribute type 13 has an invalid length. [ 196.244457][T19204] gretap0: refused to change device tx_queue_len [ 196.251254][T19204] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.332640][T19205] lo speed is unknown, defaulting to 1000 [ 196.364998][T19219] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5511'. [ 196.772725][T19273] netlink: 'syz.7.5525': attribute type 1 has an invalid length. [ 196.801127][T19273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.818713][T19273] bond0: (slave geneve2): making interface the new active one [ 196.833540][T19273] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 196.842617][ T4692] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.854223][ T4692] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.863086][T19323] netlink: 51563 bytes leftover after parsing attributes in process `syz.4.5532'. [ 196.883193][ T4692] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.892593][ T4692] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.990629][T19341] 9pnet_fd: Insufficient options for proto=fd [ 197.029470][T19345] ALSA: seq fatal error: cannot create timer (-19) [ 197.094051][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5544'. [ 197.131498][T19358] loop7: detected capacity change from 0 to 1024 [ 197.138742][T19358] ext2: Unknown parameter 'silent' [ 197.399171][T19382] loop7: detected capacity change from 0 to 512 [ 197.406012][T19382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.425729][T19382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.442077][T19382] ext4 filesystem being mounted at /1019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.453624][T19382] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.679055][T19414] lo speed is unknown, defaulting to 1000 [ 197.977565][T19456] netlink: 'syz.1.5571': attribute type 1 has an invalid length. [ 197.985368][T19456] netlink: 'syz.1.5571': attribute type 3 has an invalid length. [ 198.106752][T19475] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 198.161393][T19483] netlink: 'syz.4.5581': attribute type 1 has an invalid length. [ 198.173615][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 198.173630][ T29] audit: type=1400 audit(1759925640.816:8190): avc: denied { read } for pid=19484 comm="syz.1.5582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.271292][T19497] lo speed is unknown, defaulting to 1000 [ 198.289075][T19505] loop7: detected capacity change from 0 to 512 [ 198.299348][T19507] netlink: 'syz.4.5590': attribute type 10 has an invalid length. [ 198.307680][T19507] dummy0: entered promiscuous mode [ 198.335607][T19505] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 198.343648][T19505] EXT4-fs (loop7): orphan cleanup on readonly fs [ 198.371762][T19505] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 198.385911][T19530] !60X: renamed from caif0 [ 198.393873][T19530] !60X: entered allmulticast mode [ 198.399275][T19530] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 198.465404][T19505] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.514366][T19505] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 198.538681][ T29] audit: type=1326 audit(1759925641.196:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.4.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60da0eec9 code=0x7ffc0000 [ 198.562824][T19505] EXT4-fs (loop7): 1 truncate cleaned up [ 198.574413][T19505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.598387][ T29] audit: type=1326 audit(1759925641.196:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.4.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa60da0eec9 code=0x7ffc0000 [ 198.621958][ T29] audit: type=1326 audit(1759925641.196:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.4.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60da0eec9 code=0x7ffc0000 [ 198.645498][ T29] audit: type=1326 audit(1759925641.217:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.4.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60da0eec9 code=0x7ffc0000 [ 198.693571][ T29] audit: type=1326 audit(1759925641.333:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19554 comm="syz.9.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 198.717140][ T29] audit: type=1326 audit(1759925641.333:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19554 comm="syz.9.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 198.740648][ T29] audit: type=1326 audit(1759925641.333:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19554 comm="syz.9.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 198.774069][ T3377] IPVS: starting estimator thread 0... [ 198.780020][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.824770][ T29] audit: type=1326 audit(1759925641.491:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19554 comm="syz.9.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ccaeec9 code=0x7ffc0000 [ 198.874736][T19578] loop7: detected capacity change from 0 to 512 [ 198.884913][T19578] EXT4-fs (loop7): orphan cleanup on readonly fs [ 198.893279][T19578] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.5603: invalid block [ 198.929168][T19578] EXT4-fs (loop7): Remounting filesystem read-only [ 198.936023][T19578] EXT4-fs (loop7): 2 truncates cleaned up [ 198.942368][T19578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.956396][ T2313] IPVS: stop unused estimator thread 0... [ 198.985184][ T5527] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.996576][ T4713] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.005507][ T8868] hid_parser_main: 33 callbacks suppressed [ 199.005521][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.018836][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.026304][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.035381][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.042937][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.050375][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.057879][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.065301][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.072693][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.080145][ T8868] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 199.113690][ T8868] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 199.809726][T19718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.966564][T19737] netlink: 'syz.8.5669': attribute type 10 has an invalid length. [ 199.976226][T19737] team0: Port device geneve1 added [ 199.984146][ T2313] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.992969][ T2313] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.002106][ T2313] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.011006][ T2313] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.283504][T19788] lo speed is unknown, defaulting to 1000 [ 200.523455][T19838] netem: incorrect gi model size [ 200.688735][T19875] loop7: detected capacity change from 0 to 8192 [ 200.698581][T19875] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.970574][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.132433][T19943] netlink: 'syz.1.5726': attribute type 21 has an invalid length. [ 201.217804][T19952] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 201.217804][T19952] program syz.4.5729 not setting count and/or reply_len properly [ 201.382215][T19972] program syz.4.5738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.652006][T20018] vlan2: entered allmulticast mode [ 201.741253][T20034] lo speed is unknown, defaulting to 1000 [ 201.849209][T20076] $H: renamed from bond0 (while UP) [ 201.856808][T20076] $H: entered promiscuous mode [ 201.861869][T20076] bond_slave_0: entered promiscuous mode [ 201.867678][T20076] bond_slave_1: entered promiscuous mode [ 201.907135][T20078] __nla_validate_parse: 13 callbacks suppressed [ 201.907153][T20078] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5773'. [ 202.580181][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5798'. [ 202.625147][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5798'. [ 202.634182][T20142] binfmt_misc: register: failed to install interpreter file ./file0 [ 202.646555][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'. [ 202.659148][T20146] batman_adv: batadv0: Adding interface: ipvlan2 [ 202.665634][T20146] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.691063][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.701609][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.711616][T20146] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 202.753904][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'. [ 202.786207][T20154] batman_adv: batadv0: Adding interface: ipvlan3 [ 202.792614][T20154] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.799194][T20157] loop8: detected capacity change from 0 to 2048 [ 202.817959][T20154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.817980][T20154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.817993][T20154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 202.854717][T20154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.864556][T20154] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 202.910949][T20157] loop8: p1 < > p4 [ 202.920091][T20157] loop8: p4 size 8388608 extends beyond EOD, truncated [ 202.972669][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 202.972682][ T29] audit: type=1400 audit(2000000003.548:8481): avc: denied { unmount } for pid=5572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 203.055082][ T29] audit: type=1400 audit(2000000003.632:8482): avc: denied { ioctl } for pid=20175 comm="syz.4.5810" path="socket:[55273]" dev="sockfs" ino=55273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.116255][ T29] audit: type=1400 audit(2000000003.674:8483): avc: denied { remount } for pid=20179 comm="syz.4.5812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.216641][ T29] audit: type=1400 audit(2000000003.810:8484): avc: denied { read write } for pid=20183 comm="syz.8.5814" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 203.241039][ T29] audit: type=1400 audit(2000000003.810:8485): avc: denied { open } for pid=20183 comm="syz.8.5814" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 203.284687][ T29] audit: type=1400 audit(2000000003.873:8486): avc: denied { create } for pid=20187 comm="syz.8.5815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.305266][ T29] audit: type=1400 audit(2000000003.894:8487): avc: denied { connect } for pid=20187 comm="syz.8.5815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.348234][ T29] audit: type=1400 audit(2000000003.936:8488): avc: denied { append } for pid=20191 comm="syz.8.5817" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.386013][ T29] audit: type=1400 audit(2000000003.978:8489): avc: denied { setopt } for pid=20195 comm="syz.1.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.448663][ T29] audit: type=1400 audit(2000000004.041:8490): avc: denied { create } for pid=20202 comm="syz.1.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.647370][T20218] loop8: detected capacity change from 0 to 512 [ 203.654543][T20218] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 203.672696][T20218] EXT4-fs error (device loop8): ext4_init_orphan_info:618: comm syz.8.5828: orphan file block 0: bad magic [ 203.693003][T20218] EXT4-fs (loop8): mount failed [ 203.771022][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5833'. [ 203.780831][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5833'. [ 203.858588][ T4713] nci: nci_rsp_packet: unknown rsp opcode 0x902 [ 204.062121][T20256] SELinux: failed to load policy [ 204.211058][T20269] loop9: detected capacity change from 0 to 512 [ 204.219718][T20269] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5847: error while reading EA inode 32 err=-116 [ 204.232227][T20269] EXT4-fs (loop9): Remounting filesystem read-only [ 204.243034][T20269] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 204.253302][T20269] EXT4-fs (loop9): 1 orphan inode deleted [ 204.259870][T20269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.303321][T20267] ================================================================== [ 204.311435][T20267] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 204.320043][T20267] [ 204.322371][T20267] write to 0xffff8881247793a8 of 8 bytes by task 20260 on cpu 0: [ 204.330192][T20267] shmem_file_splice_read+0x470/0x600 [ 204.335580][T20267] splice_direct_to_actor+0x26c/0x680 [ 204.340964][T20267] do_splice_direct+0xda/0x150 [ 204.345742][T20267] do_sendfile+0x380/0x650 [ 204.350174][T20267] __x64_sys_sendfile64+0x105/0x150 [ 204.355390][T20267] x64_sys_call+0x2bb4/0x3000 [ 204.360082][T20267] do_syscall_64+0xd2/0x200 [ 204.364590][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.370486][T20267] [ 204.372809][T20267] write to 0xffff8881247793a8 of 8 bytes by task 20267 on cpu 1: [ 204.380527][T20267] shmem_file_splice_read+0x470/0x600 [ 204.385922][T20267] splice_direct_to_actor+0x26c/0x680 [ 204.391310][T20267] do_splice_direct+0xda/0x150 [ 204.396083][T20267] do_sendfile+0x380/0x650 [ 204.400544][T20267] __x64_sys_sendfile64+0x105/0x150 [ 204.405774][T20267] x64_sys_call+0x2bb4/0x3000 [ 204.410449][T20267] do_syscall_64+0xd2/0x200 [ 204.414945][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.420858][T20267] [ 204.423171][T20267] value changed: 0x000000000002ff58 -> 0x000000000002ffb2 [ 204.430262][T20267] [ 204.432572][T20267] Reported by Kernel Concurrency Sanitizer on: [ 204.438739][T20267] CPU: 1 UID: 0 PID: 20267 Comm: syz.4.5843 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.448657][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.458727][T20267] ================================================================== [ 204.623384][ T5639] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.